Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: CSYWsES4pD37cXQNnf4UjazVxkggSvafg/VoS+NTVDg=
Subject key identifier: 57:3E:69:0F:FA:EC:FD:9A:C8:2B:98:6E:A3:91:45:77:C0:4C:90:9F
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 09D255E90A988ABD7C638E30400D5620AB40D961
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa
Signing time: Mon 17 Feb 2025 13:11:12 +0000
ROA not before: Mon 17 Feb 2025 13:06:12 +0000
ROA not after: Mon 16 Feb 2026 13:11:12 +0000
asID: 16276
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d2:55:e9:0a:98:8a:bd:7c:63:8e:30:40:0d:56:20:ab:40:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Feb 17 13:06:12 2025 GMT
Not After : Feb 16 13:11:12 2026 GMT
Subject: CN=573E690FFAECFD9AC82B986EA3914577C04C909F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:44:56:9a:7c:c6:32:60:ef:bb:59:a5:eb:
fb:38:54:ef:2d:8e:d4:38:31:15:27:62:84:84:d3:
0a:ea:f5:f2:df:d2:70:c4:7c:1a:41:8a:4b:9b:7b:
19:a7:a0:91:75:65:8a:69:03:fa:80:77:67:1b:e0:
cb:4d:40:d7:db:f8:2d:2f:bb:24:8d:46:56:44:41:
4c:b6:59:b5:5f:44:83:ab:bf:1c:74:f5:d9:71:fe:
7a:57:bd:e3:52:90:9e:ab:e6:97:4b:f0:43:91:bd:
da:60:98:97:75:d2:ca:a4:06:0f:25:09:18:eb:0d:
a8:4c:2c:5f:9a:d9:79:76:68:74:f9:4b:c0:17:b0:
81:0f:94:24:7a:25:f1:7f:f2:a2:71:37:1a:f9:fe:
f9:ea:40:ce:1c:88:59:83:32:c7:32:23:e5:56:c8:
d9:5c:d4:8c:b0:0d:b1:67:29:94:81:5b:77:d2:53:
c3:91:22:d7:57:42:36:fa:24:20:4a:bb:c7:e9:11:
d9:04:cd:23:c7:10:e7:17:7e:f7:57:5e:06:41:fc:
b6:4a:df:32:1d:3c:ad:5b:0d:5c:c3:89:ee:1e:75:
56:54:a3:43:61:3b:c8:cb:a5:b0:08:28:57:2f:ff:
ed:f9:d3:62:73:db:39:a3:86:73:f2:b2:55:35:f4:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:69:0F:FA:EC:FD:9A:C8:2B:98:6E:A3:91:45:77:C0:4C:90:9F
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:70:6e:3e:e0:e8:2f:26:00:12:c3:8d:7c:95:fd:74:c6:f4:
d4:c2:d7:47:00:2b:b1:61:bb:1a:74:51:77:2d:96:3c:32:b3:
a2:bc:70:ef:0f:90:dd:a8:4c:8b:e5:b9:93:a5:37:4e:51:9a:
74:af:80:ac:96:2e:c2:d0:c6:d7:f9:2b:cc:03:52:cf:e2:6e:
23:54:c3:27:70:be:ed:c2:79:f0:f0:3d:eb:d2:6c:40:56:e6:
d7:10:fc:15:f8:2a:3f:38:1b:6c:a1:67:fa:82:c3:9f:6b:ed:
83:9e:00:51:ff:1c:b9:97:95:0f:4a:72:d3:46:b0:a6:d2:07:
3d:41:9e:ee:e8:c5:22:d2:50:7d:f6:df:1f:03:fb:cc:b0:32:
49:d6:e3:b8:7c:a9:5b:8f:78:eb:bf:d1:40:36:31:a8:c3:b7:
9e:11:68:35:18:22:8e:97:f8:41:d4:16:07:44:f8:28:57:d3:
27:21:cc:7a:05:c8:3c:77:89:cd:66:58:eb:2c:d9:ab:20:89:
af:60:d8:4e:35:df:a7:37:16:61:d7:fe:b5:26:c8:36:39:8a:
73:fa:52:28:1b:2f:11:49:56:92:a9:03:a9:2e:4f:61:92:e5:
23:46:4c:ee:46:76:ea:27:ee:7e:1b:dc:2c:6e:76:57:76:3d:
5a:ae:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:45:57 2025 by rpki-client