Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20383334.roa
File: 3130392e3233362e36312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GivwcvWm+Dyyl9fmmhcPUdMKb3WgAaNzbmcG592eF+c=
Subject key identifier: C1:0B:1D:3A:B1:5C:23:23:D7:D6:7B:7E:54:87:E2:E0:30:64:9A:FB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6E33E2691D6A8E441301609FE442962FA2F15C1D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20383334.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 834
IP address blocks: 109.236.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:33:e2:69:1d:6a:8e:44:13:01:60:9f:e4:42:96:2f:a2:f1:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=C10B1D3AB15C2323D7D67B7E5487E2E030649AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:4b:e2:57:5f:ce:21:ff:47:9d:49:a0:cf:
d9:33:39:2a:d0:50:0f:eb:70:1b:09:fb:1f:07:a7:
fe:64:2d:ea:d8:df:55:bd:3b:a7:2d:e7:b2:0c:53:
bc:08:9c:09:62:fe:89:83:ca:c5:0e:05:b5:a9:bd:
7a:6e:bf:e2:e8:ef:a1:b2:22:da:92:2a:e7:ed:d9:
c1:d0:a4:98:ca:d0:0e:ea:6c:61:ba:06:07:44:54:
75:63:e8:4c:d6:a1:57:2d:0f:81:3c:45:37:14:9f:
8d:c5:e5:10:f5:7d:66:e2:37:3f:46:10:03:5f:b2:
46:db:04:c9:2a:36:d0:31:ee:d7:5f:b6:c2:7a:52:
30:f9:6f:3f:01:83:7b:68:35:d9:44:40:69:32:3e:
bd:6c:01:26:bb:70:a5:b4:47:9b:eb:ee:9a:8b:d3:
80:7a:e9:18:b9:a7:c9:f6:e7:5b:cb:02:89:9f:48:
e2:28:0b:9f:a9:85:cd:dd:83:cf:dc:89:23:8f:b1:
a8:76:81:ea:f1:c1:23:06:2e:23:4d:3a:6e:91:17:
a9:8c:16:b6:aa:63:a2:96:4c:55:49:4d:5c:d7:90:
83:04:6c:79:59:42:41:6d:b2:4b:5e:55:eb:d8:a1:
7c:f9:6d:cc:ef:e1:84:20:4c:6b:c0:ce:68:cb:e4:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:1D:3A:B1:5C:23:23:D7:D6:7B:7E:54:87:E2:E0:30:64:9A:FB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f3:97:73:d2:b5:0c:10:e4:8c:b9:f7:ac:05:d9:17:15:7e:
50:11:05:9e:cf:7a:3d:2f:c9:77:73:43:b8:e2:de:42:7a:69:
b6:cd:4f:0f:36:b3:e3:1f:c2:8b:99:00:11:79:3f:97:dc:be:
85:31:10:db:4a:c2:5b:ea:c3:4a:80:05:c1:c7:39:6c:22:6d:
68:07:8e:a4:b4:c7:7b:dc:1d:6f:ce:8b:ff:46:3c:94:6a:e1:
d6:bb:d3:64:63:55:63:bd:2a:17:53:fe:a4:d0:01:1c:d3:87:
4a:b1:10:b2:60:03:44:a3:2e:20:71:a0:36:e7:c6:a7:72:7c:
30:bd:d6:dc:2a:d9:2b:c5:53:b8:2e:38:4c:6a:59:f7:14:ad:
57:94:54:8f:72:47:45:e5:2d:f8:22:30:ab:01:7e:65:29:0d:
d2:84:da:89:d0:a4:a4:ae:53:60:f6:b2:82:b4:62:d5:ed:a4:
34:4d:0b:de:a5:9a:3b:8e:e3:14:8b:b0:45:22:d3:6f:2a:df:
60:61:b4:ff:06:1d:57:df:fa:6c:3c:74:dc:e1:b3:fb:d8:51:
dc:75:2c:c3:8c:5f:5a:39:27:a5:a7:4f:ae:72:61:c1:90:c4:
fb:40:ef:46:c0:6a:80:2f:d1:a7:59:7b:9b:e1:c1:08:e3:00:
d6:ef:f2:ba
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUbjPiaR1qjkQTAWCf5EKWL6LxXB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzZaFw0yNTEyMTkxNTIzMzZaMDMxMTAvBgNV
BAMTKEMxMEIxRDNBQjE1QzIzMjNEN0Q2N0I3RTU0ODdFMkUwMzA2NDlBRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrEviV1/OIf9HnUmgz9kzOSrQ
UA/rcBsJ+x8Hp/5kLerY31W9O6ct57IMU7wInAli/omDysUOBbWpvXpuv+Lo76Gy
ItqSKuft2cHQpJjK0A7qbGG6BgdEVHVj6EzWoVctD4E8RTcUn43F5RD1fWbiNz9G
EANfskbbBMkqNtAx7tdftsJ6UjD5bz8Bg3toNdlEQGkyPr1sASa7cKW0R5vr7pqL
04B66Ri5p8n251vLAomfSOIoC5+phc3dg8/ciSOPsah2gerxwSMGLiNNOm6RF6mM
FraqY6KWTFVJTVzXkIMEbHlZQkFtskteVevYoXz5bczv4YQgTGvAzmjL5E99AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUwQsdOrFcIyPX1nt+VIfi4DBkmvswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz
NjJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AG3sPTANBgkqhkiG9w0BAQsFAAOCAQEApfOXc9K1DBDkjLn3rAXZFxV+UBEFns96
PS/Jd3NDuOLeQnppts1PDzaz4x/Ci5kAEXk/l9y+hTEQ20rCW+rDSoAFwcc5bCJt
aAeOpLTHe9wdb86L/0Y8lGrh1rvTZGNVY70qF1P+pNABHNOHSrEQsmADRKMuIHGg
NufGp3J8ML3W3CrZK8VTuC44TGpZ9xStV5RUj3JHReUt+CIwqwF+ZSkN0oTaidCk
pK5TYPaygrRi1e2kNE0L3qWaO47jFIuwRSLTbyrfYGG0/wYdV9/6bDx03OGz+9hR
3HUsw4xfWjknpadPrnJhwZDE+0DvRsBqgC/Rp1l7m+HBCOMA1u/yug==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:59 2024 by rpki-client on console.sobornost.net