Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e20323135323837.roa
File: 3138352e35352e38332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: OwBYRFjUW3/GMJvAg1ftyjTYl7sljINQpVoQJtB1Im4=
Subject key identifier: 3A:C5:D2:9C:29:C0:6F:4F:AF:23:88:20:CB:18:38:75:5F:57:62:2B
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 037C0D0DCF0B144EFB24BD99231456ABDED8A3D0
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 18 Jan 2025 14:54:48 +0000
ROA not before: Sat 18 Jan 2025 14:49:48 +0000
ROA not after: Sat 17 Jan 2026 14:54:48 +0000
asID: 215287
IP address blocks: 185.55.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7c:0d:0d:cf:0b:14:4e:fb:24:bd:99:23:14:56:ab:de:d8:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Jan 18 14:49:48 2025 GMT
Not After : Jan 17 14:54:48 2026 GMT
Subject: CN=3AC5D29C29C06F4FAF238820CB1838755F57622B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:7d:c8:93:9d:f9:eb:a2:49:e2:35:dc:df:
64:8e:5e:42:04:15:a3:6d:8b:c9:56:e4:85:c8:f0:
0f:94:1f:98:57:83:c5:4a:47:2f:71:27:1f:f8:cd:
ff:f2:33:15:8e:43:f8:32:fb:8b:c0:a3:04:e8:be:
1f:94:67:23:c3:96:3d:46:52:5c:24:96:12:3b:5f:
60:f6:91:fb:fb:f7:41:81:b7:e9:e7:f8:f5:b5:67:
cc:60:7f:8c:ee:80:f8:28:a3:1c:d9:d7:b3:15:31:
3d:8c:75:f2:12:19:10:c0:77:ac:00:8d:77:d3:de:
ec:40:b3:fa:8f:61:40:ca:60:3b:a9:0e:ff:9c:63:
88:4e:40:fb:db:32:7a:e5:b0:a1:61:ad:cd:21:ab:
71:da:7c:68:d1:c8:24:4e:47:41:d2:44:0f:f2:c8:
a3:de:ac:12:47:f4:c0:b1:50:65:ec:37:c0:81:40:
7d:63:0e:72:5d:c8:ee:12:fd:e7:f3:d9:a6:40:44:
6f:79:66:7b:d9:ef:3e:1d:87:8c:35:83:02:7d:91:
72:a2:b5:c8:dd:eb:96:99:e8:fd:f0:14:02:ac:23:
34:3b:51:4b:99:ee:05:fa:a1:e4:85:e5:c2:bf:49:
6e:e6:79:ff:61:77:aa:b8:f3:89:c3:99:fd:98:f3:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:D2:9C:29:C0:6F:4F:AF:23:88:20:CB:18:38:75:5F:57:62:2B
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8c:af:1a:6e:9a:35:dc:89:76:e3:18:2d:9f:4a:73:06:26:
07:e5:29:f0:aa:f3:c1:10:ec:1f:4e:03:d9:0b:85:fa:d7:64:
94:7c:81:a1:c5:40:d1:5f:f6:99:af:1d:4f:d1:83:2e:28:3e:
4f:f6:d9:0a:db:c9:52:86:ba:c2:dc:72:84:4f:73:35:30:27:
72:88:6f:ed:50:6f:15:a6:14:91:e0:23:9b:84:b1:d1:47:fe:
f3:28:84:57:57:29:03:04:8d:38:b9:07:d0:a5:8b:fe:d6:de:
d9:a9:52:a3:a7:a5:42:20:cc:f6:67:e5:c0:c6:79:0a:db:d0:
8a:53:1e:f1:db:e8:91:9a:f2:26:85:4b:4d:61:21:eb:16:39:
68:9d:dc:1e:9a:aa:da:e9:67:05:81:da:58:fa:00:4f:9c:08:
ff:a3:fc:37:29:af:4e:c7:d1:56:37:9d:96:4a:ad:fb:15:0b:
69:0b:b4:d8:1f:5b:f9:8c:ca:bd:93:a1:32:01:32:28:9e:c5:
f6:64:78:8a:a4:53:d7:a6:35:f3:a7:8e:4e:a5:20:b1:a7:1a:
06:37:75:b7:32:a2:ea:ba:a9:45:7e:9b:b9:72:d2:97:7d:1b:
ab:20:80:44:5b:0d:17:45:3c:a4:04:31:a3:b1:4c:0a:78:4e:
19:95:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:53 2025 by rpki-client