Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa
File: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=
Subject key identifier: D3:5B:66:1E:AC:A2:8D:F9:E4:41:66:D0:2D:22:C3:52:04:70:23:F2
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 411880A4D87E06EDE0236A921CCBF7972F706311
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa
Signing time: Wed 12 Mar 2025 05:23:19 +0000
ROA not before: Wed 12 Mar 2025 05:18:19 +0000
ROA not after: Wed 11 Mar 2026 05:23:19 +0000
asID: 16509
IP address blocks: 178.132.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:18:80:a4:d8:7e:06:ed:e0:23:6a:92:1c:cb:f7:97:2f:70:63:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 12 05:18:19 2025 GMT
Not After : Mar 11 05:23:19 2026 GMT
Subject: CN=D35B661EACA28DF9E44166D02D22C352047023F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:1f:ad:9c:b2:cf:da:39:6b:35:ae:4b:cc:
fc:6d:0b:c8:57:9b:be:a5:36:3e:0d:82:05:27:14:
c9:8f:2e:1d:71:6d:df:f5:86:05:a9:40:04:a2:d8:
9e:0b:80:70:b1:cd:aa:85:e4:57:f1:98:11:bc:3b:
7d:46:2c:ae:9e:d4:c6:f7:70:4f:42:9d:3b:fe:bc:
64:8c:42:24:3f:3c:4e:bd:fb:bc:b3:70:20:14:53:
67:35:bf:41:5c:88:db:1c:ba:c0:b7:5d:41:f4:ea:
b5:9d:3f:43:2b:63:07:b5:d9:9d:15:93:74:11:69:
b5:c8:83:27:1a:54:fe:6c:eb:69:93:ce:47:1c:8a:
5f:d2:29:38:cb:26:98:62:a3:ba:56:49:6b:ac:f8:
4d:ee:b8:35:68:1e:9b:42:c7:3a:2b:ae:58:d1:43:
1c:2b:46:ee:9f:cd:ee:7a:42:9d:f4:4f:5e:a1:d2:
b3:db:af:73:06:21:3d:88:4b:44:52:55:9a:3d:1f:
d4:7b:c2:ca:b0:25:89:5a:72:75:56:66:52:9a:1d:
ce:d2:e4:59:f5:d3:48:b1:d2:9d:a1:13:6f:74:70:
3b:5e:ed:54:8d:3f:1b:33:6d:a9:5b:af:30:ad:4a:
8f:e5:f8:d9:35:ba:9a:b2:0a:50:99:27:64:ce:8f:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:66:1E:AC:A2:8D:F9:E4:41:66:D0:2D:22:C3:52:04:70:23:F2
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.192.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8c:81:eb:59:23:23:b5:c2:6e:ff:ea:44:35:89:61:f2:ac:
cc:82:b6:71:5b:87:e7:b9:22:d3:fc:c8:d2:b8:39:e9:2d:63:
0a:1c:58:05:4e:f7:b1:fa:e5:ca:13:2c:e0:90:37:b9:1b:79:
07:40:df:eb:d6:be:49:9c:b0:ad:20:96:a3:85:17:08:50:a6:
06:01:6b:6d:07:d5:8e:d8:f1:3e:0a:6b:67:d8:e1:e9:7f:1c:
94:20:4c:9c:99:e3:1f:05:41:90:9d:2c:90:04:ba:fc:3e:12:
27:3e:13:4d:ee:31:be:e3:67:19:93:e1:cd:d3:1d:e3:75:c6:
f8:31:41:bb:3f:95:65:8f:0f:e4:ae:f0:b6:4e:ce:36:db:6d:
7f:a6:b4:c1:dd:c4:c7:d7:a7:0e:5a:41:9f:e1:e1:3e:84:73:
f6:65:be:48:9c:1c:56:36:40:9e:e9:ff:a1:6a:03:62:af:ad:
18:73:eb:bf:75:4c:e7:93:f3:5d:1c:3c:c1:3c:a7:dd:6f:5a:
5c:17:cf:24:1d:3c:99:de:8c:c3:d3:80:07:60:8c:1e:23:b9:
bf:e6:80:85:0f:47:76:68:de:7c:7c:b2:24:c8:84:dd:bd:f8:
5c:23:bb:b9:29:f8:a6:d1:a6:c2:f6:3a:e4:3c:a8:43:ee:21:
08:6a:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:02 2025 by rpki-client