Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa
File: 3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: 5xPprZZFQQVjl0yOGKGJzCi56B4Lnd8oMx5+fKttstc=
Subject key identifier: 9C:74:91:3D:CE:C6:C8:5F:93:25:83:14:ED:E2:FF:9B:9F:63:80:69
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 077613B143A837B7A889175A29728CE9281B52E2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa
Signing time: Tue 31 Dec 2024 05:52:21 +0000
ROA not before: Tue 31 Dec 2024 05:47:21 +0000
ROA not after: Tue 30 Dec 2025 05:52:21 +0000
asID: 22363
IP address blocks: 178.208.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:13:b1:43:a8:37:b7:a8:89:17:5a:29:72:8c:e9:28:1b:52:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 31 05:47:21 2024 GMT
Not After : Dec 30 05:52:21 2025 GMT
Subject: CN=9C74913DCEC6C85F93258314EDE2FF9B9F638069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:49:a7:79:76:77:ab:b7:ba:52:c3:b7:7c:
e8:b8:5a:16:6b:50:f6:98:3a:f0:8d:64:5a:84:18:
62:53:93:f4:53:ba:79:61:32:d4:37:3c:43:aa:2c:
6b:59:df:76:4b:e4:f4:ad:72:3e:df:c5:ec:ed:88:
40:31:b3:51:40:7a:9f:68:d4:9e:e4:89:30:7f:8c:
7b:f7:ba:9f:18:4a:aa:15:15:75:16:7b:bf:7c:b4:
b4:d1:88:75:31:4d:cf:2a:60:35:10:97:75:7d:d3:
2c:55:d0:0d:48:24:d2:cb:86:db:a6:da:f7:68:76:
1f:f8:33:2b:28:e5:0c:e8:5c:86:a4:85:50:18:af:
1f:c9:16:2d:bf:f0:02:03:ea:f3:5b:90:ca:9d:c3:
15:ef:61:97:c1:d6:7e:91:3f:e9:b8:b7:cd:34:d9:
56:32:6d:2f:94:e4:f9:09:f2:f6:ee:77:c7:dc:fb:
89:60:87:8d:86:7e:fa:1d:45:33:b7:80:3c:bb:dd:
f8:c3:e6:94:ec:49:77:33:04:2f:9b:1e:41:52:2a:
16:b4:bc:09:87:6d:b9:59:cb:26:ec:19:c3:ac:be:
58:fa:67:9a:13:64:c2:72:6a:fc:c6:0a:29:33:be:
0c:9d:d5:be:3d:47:d4:41:43:0c:45:7f:d1:f3:a9:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:74:91:3D:CE:C6:C8:5F:93:25:83:14:ED:E2:FF:9B:9F:63:80:69
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.169.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ad:5c:d9:c9:52:72:d5:af:18:b4:da:16:d1:b4:c2:18:48:
2f:4b:9b:62:48:95:93:17:47:a6:6b:fa:2f:04:b8:61:c8:11:
5d:65:fe:a6:05:a3:78:f2:94:08:b2:27:c4:f3:18:53:85:69:
e3:31:8b:df:5d:8a:35:e7:4a:76:93:1b:4b:a7:1c:ae:ff:76:
63:1f:76:a3:40:96:9b:97:3b:2c:fe:59:f8:2f:a8:41:8e:f9:
5f:e0:c5:95:8a:1c:7f:cd:4d:73:9e:02:89:44:a7:89:80:34:
df:e1:ab:41:b8:64:38:33:5a:80:53:f5:75:ef:73:a8:1a:49:
5e:c6:5d:3a:ed:ba:fe:ff:7e:f7:db:07:5b:38:c4:ae:6f:70:
18:9e:16:ef:6f:2a:0e:f0:6d:b8:11:00:a6:95:66:67:a9:c4:
9c:3f:a5:a9:ce:70:f1:36:63:d2:fe:a7:6b:c0:94:5a:37:c8:
74:12:12:83:8b:58:8a:16:b9:51:76:c6:12:dc:a3:ba:ec:c1:
29:b1:a2:dc:95:da:3b:85:61:ce:c4:7f:5e:cf:87:2c:71:c4:
75:a6:75:dd:65:b6:a8:4b:53:c6:f1:e9:62:e0:7c:8c:7a:79:
79:79:96:71:a5:6c:26:43:08:40:78:38:33:d1:39:b8:7f:a1:
4b:31:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:46 2025 by rpki-client