Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa
File: 39342e3130312e3131352e302f32342d3234203d3e203537313732.roa (raw, json)
Hash identifier: aE7CyG5XhKnOXTdgjHwKyRJLcbNeDvgEvPOchIH3P6Y=
Subject key identifier: 15:2C:D7:32:A8:AA:18:94:20:85:D1:FA:C2:68:D4:C0:F3:87:E5:0A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3FC1AA2B58DBC8019BD35B3639251076DA744910
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa
Signing time: Fri 20 Dec 2024 15:23:32 +0000
ROA not before: Fri 20 Dec 2024 15:18:32 +0000
ROA not after: Fri 19 Dec 2025 15:23:32 +0000
asID: 57172
IP address blocks: 94.101.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c1:aa:2b:58:db:c8:01:9b:d3:5b:36:39:25:10:76:da:74:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:32 2024 GMT
Not After : Dec 19 15:23:32 2025 GMT
Subject: CN=152CD732A8AA18942085D1FAC268D4C0F387E50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:20:f8:c0:18:f8:07:00:26:e3:80:0a:fa:
12:29:3d:6b:a1:7f:b2:94:dd:a2:f6:22:84:2e:30:
b4:3e:c0:4d:dc:0e:c7:22:2e:6a:1b:71:e3:07:f0:
60:29:9a:5b:e6:4b:a9:e8:24:f9:26:0b:be:6f:04:
2c:a0:a8:4b:83:a1:4f:cd:ef:84:21:ab:b5:fa:16:
a9:22:68:53:d4:8d:eb:48:b9:34:e8:38:ab:c2:c2:
e0:a1:90:a5:90:fb:fb:90:24:76:b4:ba:2c:b1:cb:
45:93:a8:fa:c9:40:bf:17:b1:9e:18:99:e7:7e:9d:
17:94:f7:95:d0:92:14:71:0e:4b:70:c4:d3:71:69:
c0:a0:ef:5d:93:ff:da:9f:53:fa:78:d2:b5:60:d0:
bf:d8:3f:5c:4c:54:a1:b0:a7:ac:4b:a5:4d:5a:52:
e9:a5:d9:10:1e:a3:e5:a9:c4:fd:88:b7:0b:78:f9:
2b:f7:6c:0e:d7:4d:81:b8:99:ad:58:66:f9:0d:b2:
2d:dc:cf:28:c9:10:72:28:d0:23:b9:bd:15:6b:71:
b0:b0:27:34:e6:38:9f:fe:58:d7:9e:23:57:05:04:
03:b2:db:14:60:62:ca:08:0a:c8:51:96:38:0a:25:
ea:6f:51:c6:1f:b5:9f:c1:6f:fe:c7:ec:30:7e:5a:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:D7:32:A8:AA:18:94:20:85:D1:FA:C2:68:D4:C0:F3:87:E5:0A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.115.0/24
Signature Algorithm: sha256WithRSAEncryption
20:92:f2:90:6d:f7:0d:31:0e:61:45:ec:20:1b:5d:69:21:4d:
14:05:1e:65:94:f2:ce:99:b8:21:66:c7:2a:b2:42:2b:ef:bb:
64:c0:6a:11:bc:90:8a:be:c4:2b:48:63:94:72:4e:bb:ce:43:
07:51:db:f4:b4:b1:34:96:95:92:2a:6a:4c:81:87:0b:ee:65:
90:a0:0a:eb:dd:38:40:51:4c:e9:cc:41:05:3d:a5:81:df:82:
30:c7:10:8b:f7:19:71:3a:ff:ba:bf:25:39:b7:dc:5e:3a:3b:
3d:f0:ea:f6:17:81:b6:b9:91:32:c2:9d:b1:09:4d:85:10:c2:
0a:4a:82:96:d1:35:ba:36:44:a4:23:f1:10:48:49:e3:9f:6c:
c7:b3:08:10:b4:6f:72:2e:2d:1b:7a:be:e3:0c:67:fb:2c:cd:
f8:ae:c1:d6:8a:3a:f5:c1:38:7d:6e:73:22:b3:42:fe:08:a3:
f0:60:6f:4b:12:d4:c8:06:0c:2d:a5:bf:26:fb:b4:3e:15:52:
e9:cd:ab:8e:1f:a5:4e:e5:a6:b0:89:31:cb:8b:97:51:7c:70:
20:41:7f:e8:bf:db:91:bc:12:d4:54:60:bc:fe:e8:d4:4a:9e:
9d:d8:eb:c1:9c:2a:d2:1e:4f:1e:70:0e:0f:c8:c7:52:ec:5a:
8a:8c:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:38:01 2025 by rpki-client