Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203231383539.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: VZQZt/O++mNurr9oaUX4qYeJ6ewtDIjMQuiCqSG5gA8=
Subject key identifier: D9:F6:31:AD:AC:23:26:64:5F:78:E7:C5:10:37:71:4B:98:13:FC:C7
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 5EFF822A7FE51CA481D8902E1453B2EB632BE80A
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203231383539.roa
Signing time: Sun 12 Jan 2025 11:47:58 +0000
ROA not before: Sun 12 Jan 2025 11:42:58 +0000
ROA not after: Sun 11 Jan 2026 11:47:58 +0000
asID: 21859
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ff:82:2a:7f:e5:1c:a4:81:d8:90:2e:14:53:b2:eb:63:2b:e8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jan 12 11:42:58 2025 GMT
Not After : Jan 11 11:47:58 2026 GMT
Subject: CN=D9F631ADAC2326645F78E7C51037714B9813FCC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:df:18:09:d1:73:c1:28:a2:b4:29:13:f4:
2d:0e:37:5c:87:20:e8:58:47:63:97:7e:12:83:cd:
58:75:95:31:0d:f2:a1:02:dd:ef:22:f1:de:2d:c8:
b1:fe:76:97:0d:f1:cf:15:eb:c3:9c:a1:85:1b:fa:
bb:66:42:f5:c5:4b:58:3f:44:38:1b:35:9e:19:23:
77:00:c6:22:ef:9f:94:e8:a8:99:f1:77:f5:f5:70:
c9:65:2f:38:a3:7a:70:ad:e5:9e:9e:74:8e:f9:2a:
dd:0b:96:15:0e:6c:4e:33:ed:51:08:ad:0d:7d:66:
c0:61:d3:86:8c:f1:74:42:e1:1f:12:6c:39:78:7e:
4e:c2:c9:3b:ac:eb:6f:0e:5d:35:57:f7:d3:cf:75:
1b:3e:5c:ae:08:d6:84:5c:85:af:94:44:30:a7:f9:
11:ea:9e:f0:5d:39:26:e0:8c:df:8e:89:1a:a2:b3:
16:fe:b5:e5:52:28:d4:58:16:a8:df:0e:24:f4:bb:
6f:90:7e:aa:ab:1c:25:d5:d9:3a:ea:05:fc:1f:a1:
1c:56:c4:b5:57:81:c6:d1:69:2d:01:81:cd:69:c8:
3f:bf:34:84:62:75:86:04:c2:aa:c4:43:2d:1a:a6:
b5:7a:ad:a6:ce:11:c8:e3:73:a4:dd:5e:6d:4d:50:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:31:AD:AC:23:26:64:5F:78:E7:C5:10:37:71:4B:98:13:FC:C7
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
02:08:1e:9e:30:74:22:da:34:39:ba:98:7f:0f:31:01:e1:2e:
b6:c3:8c:dd:00:b4:c3:3a:88:09:92:af:b8:59:f8:5a:74:e1:
c4:03:34:44:4f:ef:2e:98:2d:0f:77:ac:1a:3f:3f:99:19:e2:
86:c2:e6:7a:43:6d:15:61:18:f7:73:f9:9b:b2:85:35:90:37:
03:21:ef:21:7d:0d:09:92:5d:6a:5c:60:1b:8f:91:46:c2:33:
2b:4d:1d:9d:31:93:e3:aa:4a:f9:ad:71:f3:71:7a:53:18:58:
e3:e9:c1:cd:07:55:01:3c:8f:ba:c8:14:87:7f:04:f7:fa:91:
4b:b8:34:1a:7f:dc:f5:f9:62:4f:f3:1c:2d:d5:83:b0:da:c4:
24:15:64:06:a7:df:3d:5f:8f:69:b9:c2:d3:82:20:28:8f:ab:
9c:ab:21:06:75:83:ac:db:51:da:d7:b7:6d:c8:65:00:ef:46:
e7:01:58:9e:23:25:78:c0:d7:88:41:aa:00:2e:29:a9:c0:c0:
44:7a:eb:27:83:ca:34:b2:f7:34:31:25:8f:9d:60:46:cc:28:
d1:bd:7d:c2:d9:0f:a7:36:0c:48:05:8e:fc:62:ff:5b:60:5b:
17:7f:7e:b2:9a:99:8f:3b:0e:7e:1e:a9:14:f5:8b:46:4c:39:
0a:45:d6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:57 2025 by rpki-client