Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa
File: 39342e3130312e3131332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: X+M5r/Xjyff7VOcSpd5K+O78NF5VE+pXhqo1jasFlcI=
Subject key identifier: 8E:63:F4:05:2E:03:D9:48:0E:B3:24:88:BD:A0:FE:C6:45:F3:9D:1D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1586D1B6CC1B8B77D2BA1F0F44D48DA3BE83D283
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:35 +0000
ROA not before: Fri 20 Dec 2024 15:18:35 +0000
ROA not after: Fri 19 Dec 2025 15:23:35 +0000
asID: 51167
IP address blocks: 94.101.113.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:86:d1:b6:cc:1b:8b:77:d2:ba:1f:0f:44:d4:8d:a3:be:83:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:35 2024 GMT
Not After : Dec 19 15:23:35 2025 GMT
Subject: CN=8E63F4052E03D9480EB32488BDA0FEC645F39D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:ab:e1:3a:84:ca:df:87:80:18:c8:fc:12:
35:f8:52:c8:c0:35:5c:97:38:1f:45:60:4f:0e:05:
a1:cb:83:c7:c0:c9:66:7b:d3:c7:bc:f2:66:78:42:
06:c0:44:bc:76:0b:9a:ba:19:28:33:98:fb:0d:0d:
66:83:27:cb:05:51:05:66:e0:63:4a:59:5c:27:d6:
3e:02:7b:61:3f:ad:b0:a0:bf:ee:72:6d:f6:5d:de:
84:a3:1c:95:94:cc:28:69:60:f4:dd:cb:97:87:57:
f7:3f:14:54:44:cf:ca:d3:c7:d7:02:23:53:a5:a5:
ce:cb:b6:33:b9:69:3d:fd:be:e8:6f:70:ea:45:63:
dc:cc:2b:fe:02:bc:5b:ee:d0:dc:61:46:16:7b:e6:
71:44:f0:05:ce:c2:03:6d:4d:df:bd:a2:7d:c4:73:
9e:a5:37:91:12:8e:74:08:51:d6:93:23:a9:69:54:
43:b3:93:02:81:b0:8f:ba:7c:e8:0c:3c:07:b6:3e:
ac:a5:cf:97:f1:8a:23:4e:1b:09:dd:1c:34:9e:76:
2b:0e:23:d8:c3:86:e2:a1:f4:c4:cc:4b:28:fe:1f:
3a:3c:09:ae:80:2e:50:45:ca:55:a9:1c:96:71:38:
9b:4f:eb:39:44:42:88:6b:5d:9e:fd:ef:5f:43:cf:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:F4:05:2E:03:D9:48:0E:B3:24:88:BD:A0:FE:C6:45:F3:9D:1D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.113.0/24
Signature Algorithm: sha256WithRSAEncryption
63:39:ae:eb:a4:29:5c:2c:35:f9:92:91:c5:0d:85:56:77:a7:
11:22:ba:6b:e6:2b:fe:de:09:fe:ec:7e:99:e8:60:c8:72:65:
5a:89:11:bf:16:62:cd:b8:6c:c3:e0:33:d5:25:92:0b:2a:04:
f9:1c:10:4b:5a:97:85:75:d4:4a:ab:2e:25:76:cf:ac:4f:62:
35:45:7e:81:aa:b5:51:fb:4b:00:11:8d:88:0c:b6:d0:dc:8f:
5e:70:4e:a3:11:ab:86:70:e4:71:f5:3e:96:20:27:9a:24:18:
36:0d:be:a5:ae:51:77:72:1c:6e:bc:82:63:17:d5:b5:a8:91:
cc:f8:b8:64:7e:02:fd:87:63:65:95:d7:85:91:af:93:f8:1a:
6c:0e:15:58:ab:6e:02:8a:34:6f:31:05:12:35:90:6f:58:3a:
c5:b3:c3:3d:fe:c0:e1:aa:b0:75:7b:f4:20:29:93:55:21:55:
17:45:c3:3c:db:ff:4b:05:a8:c4:2f:d8:bf:7d:4b:33:b4:04:
8c:97:42:53:6b:89:ef:b6:4d:8f:c2:21:64:b5:7c:64:c2:98:
e1:26:ee:a4:db:d4:00:85:23:fc:f2:d7:e9:e9:1f:24:4a:bc:
41:7f:ed:3d:ad:17:01:bc:be:bc:a5:cf:17:fa:de:ab:e6:6d:
8f:53:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:16:30 2025 by rpki-client