Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203232343237.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: OrmiM/mDfS5iYPI2GGL6GObvaNCAV5dshSFDktfRjcg=
Subject key identifier: E0:26:27:DB:E1:5F:E1:25:48:42:77:91:8E:45:F2:D9:F2:62:F3:62
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 59FA97206077DE63F44F48A1F55530D4DAACDEF7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203232343237.roa
Signing time: Tue 18 Mar 2025 08:52:08 +0000
ROA not before: Tue 18 Mar 2025 08:47:08 +0000
ROA not after: Tue 17 Mar 2026 08:52:08 +0000
asID: 22427
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fa:97:20:60:77:de:63:f4:4f:48:a1:f5:55:30:d4:da:ac:de:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 18 08:47:08 2025 GMT
Not After : Mar 17 08:52:08 2026 GMT
Subject: CN=E02627DBE15FE125484277918E45F2D9F262F362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:b4:6f:86:5b:7b:fa:5b:ac:c5:9c:89:cb:
d0:61:5a:bf:a3:cf:81:31:eb:5e:b1:26:0b:66:0e:
90:e4:6d:eb:c6:49:f1:f1:82:fc:1b:58:59:35:f3:
f1:c7:3e:77:b2:d2:88:ed:83:09:ad:0a:d1:98:d0:
39:b3:fb:bd:23:78:e2:f9:ee:6e:44:f5:71:c1:3f:
64:86:59:33:79:c8:8f:00:58:ee:0a:18:4e:9c:27:
b2:85:9d:bd:91:a0:25:ce:07:a1:93:1a:be:8c:81:
b9:e5:42:6a:16:74:eb:7e:90:9f:7c:3b:fd:7d:5e:
26:c9:4f:b9:23:34:f7:8c:b8:0a:82:69:93:e2:89:
5e:66:aa:20:17:57:28:c1:0e:4c:bd:83:a1:36:4b:
d3:ae:c7:3b:ad:08:9a:0d:ef:fb:57:d7:63:f7:3e:
1c:d5:ae:88:85:17:c0:61:98:cb:77:28:85:6e:ab:
52:19:68:e9:d5:17:38:e4:16:81:f4:ac:f8:72:4e:
ac:7d:6a:9e:ed:69:be:a3:6d:cd:eb:75:90:31:0b:
aa:b7:ba:c7:30:a2:78:3d:85:bc:51:6c:9e:a1:86:
35:92:a5:6c:04:42:ea:25:0b:0d:8d:7e:8c:a9:e0:
24:fd:14:d3:a5:7f:d1:2d:93:74:ff:0f:e0:bb:d1:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:27:DB:E1:5F:E1:25:48:42:77:91:8E:45:F2:D9:F2:62:F3:62
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5a:ee:14:ee:8c:76:90:ce:c8:1a:a5:e8:71:8c:ec:03:db:
56:dd:1d:8c:60:91:2c:d3:1e:6a:a3:42:df:73:b2:36:5b:cd:
c6:35:16:ca:f1:e7:77:f6:ca:f7:8f:c7:4e:48:5e:30:fa:95:
81:79:7d:5f:76:0a:3d:e4:e9:f9:27:2e:e8:24:e3:96:38:39:
dd:93:53:cf:89:01:f0:4b:33:bd:e5:cc:5d:2c:a5:d3:2e:27:
d8:b6:05:54:6e:0f:0b:41:e3:e7:65:13:7e:9b:03:21:0a:71:
bd:fc:2d:8b:af:9c:14:7a:68:58:92:99:20:a5:d8:ca:85:cb:
ba:5b:88:91:a9:59:1b:15:f7:f6:2f:20:66:f7:02:2b:20:a0:
c9:a5:ee:cd:dd:0b:e8:a3:4d:f4:d2:54:af:cb:01:29:d7:95:
97:32:26:48:d4:d0:a2:51:2b:a9:71:0b:f3:5a:3e:d7:26:9f:
f1:39:37:85:34:71:9a:ca:7d:b9:63:30:ef:fb:8b:c6:f7:35:
2a:eb:27:c5:6c:be:d9:17:c4:72:bf:0e:65:ee:17:b1:64:ce:
f9:77:30:51:b5:a6:05:b2:e0:d6:ba:2a:08:a9:83:2d:c5:77:
e3:35:16:3c:13:5d:40:b7:ba:68:f5:6d:ab:92:ec:9b:d5:b2:
0a:c7:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:44 2025 by rpki-client