Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
File: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=
Subject key identifier: C6:E8:23:EE:38:1C:9A:47:5E:19:EE:96:A2:B9:34:5F:B3:7D:90:4F
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 7EA6B42307B50626AB7EEEA09DAA0BD990A7E98E
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
Signing time: Thu 27 Mar 2025 03:53:59 +0000
ROA not before: Thu 27 Mar 2025 03:48:59 +0000
ROA not after: Thu 26 Mar 2026 03:53:59 +0000
asID: 61317
IP address blocks: 188.164.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a6:b4:23:07:b5:06:26:ab:7e:ee:a0:9d:aa:0b:d9:90:a7:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Mar 27 03:48:59 2025 GMT
Not After : Mar 26 03:53:59 2026 GMT
Subject: CN=C6E823EE381C9A475E19EE96A2B9345FB37D904F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:c4:48:2e:a0:c3:59:09:7d:2e:cd:2d:9c:
9a:10:6c:a0:4d:5c:3d:db:da:2c:5d:f5:20:6d:04:
af:d0:84:63:94:ae:69:69:c2:2b:8f:10:ad:3a:51:
2d:4b:ff:a3:ca:d6:7e:a1:d2:fe:57:e3:85:e0:d9:
92:12:dd:41:e8:ea:e2:c3:ca:9e:38:0b:11:80:0b:
cb:a2:92:8b:8b:73:18:f1:57:72:94:ae:a2:46:6a:
d8:d1:7d:a6:10:c6:4f:90:54:d8:27:e4:e9:01:ad:
74:a4:27:a9:54:e1:71:a7:50:2b:89:f0:5e:1b:9c:
81:b1:46:42:cb:a7:fb:e3:01:7f:71:98:d7:d7:8f:
c4:90:8e:19:7b:57:17:7e:63:45:f9:a5:1c:31:1d:
88:c2:0d:97:01:e8:de:2e:3c:be:8d:9f:e2:26:81:
8f:49:58:3f:e6:59:b7:a2:72:80:2f:a2:5d:40:ff:
6a:c7:c1:9b:30:9f:9c:5e:93:4d:ef:73:5d:6c:01:
e8:f1:bd:16:be:c9:07:67:06:41:40:d2:a1:5c:42:
9c:fb:77:10:73:e3:2b:bd:db:00:bc:75:a1:4e:c3:
9c:71:bc:60:a9:f7:09:33:7e:0c:7f:8c:99:69:0c:
da:a4:c1:13:25:e3:62:50:5a:76:f8:e3:ca:d0:5c:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:23:EE:38:1C:9A:47:5E:19:EE:96:A2:B9:34:5F:B3:7D:90:4F
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:11:f7:e7:d3:94:22:a1:ce:a0:8f:c9:c4:ee:e4:22:60:3b:
af:18:fb:a5:53:2b:5d:1a:e8:37:5b:85:18:22:b3:d2:c9:a6:
3d:5a:1d:13:b1:04:3d:8e:04:68:bf:7e:3a:c7:28:36:28:82:
28:02:48:3e:70:77:7d:a3:00:b7:6a:85:15:b4:d2:5c:11:3c:
40:19:1b:09:2c:82:fe:e4:cb:9d:ee:33:7a:c7:99:6e:1f:f9:
e5:d4:f2:0e:8f:35:09:6e:12:e1:f6:34:e8:34:82:62:16:82:
18:98:b3:e0:a5:6a:3c:b2:3b:2a:e5:03:57:e7:1a:c1:5d:49:
6e:ef:4c:0a:38:74:8e:ae:1e:99:ed:ca:73:c7:f4:35:2e:87:
60:20:54:8d:41:66:7b:72:fa:69:47:14:43:32:84:b0:ca:df:
5d:32:f9:9a:f8:68:0d:65:35:a1:53:47:56:cb:35:ac:5b:a1:
a5:a5:b1:00:26:4d:76:74:18:e4:7c:a9:d8:15:ac:f1:2b:7a:
a4:11:a8:20:e4:f0:d5:65:a9:11:bf:5f:cc:33:a7:a9:9a:0a:
8c:a5:74:85:13:7b:b1:f9:a1:45:cd:0a:e4:aa:90:be:cc:d6:
36:e3:ad:87:b2:14:5b:b7:66:be:02:e0:58:f5:61:46:00:6d:
99:21:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:41 2025 by rpki-client