Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lsIJUCEZ4e3VTs3EtyGucC+HYUU7hnMKuokRCEQ8fjI=
Subject key identifier: C8:0C:15:32:2A:E4:F8:10:17:30:13:38:F8:19:5F:9A:F1:61:6A:66
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5B6E779C41A5BCA39F14D95E3E4911B47CB8354E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
Signing time: Sat 15 Mar 2025 00:05:05 +0000
ROA not before: Sat 15 Mar 2025 00:00:05 +0000
ROA not after: Sat 14 Mar 2026 00:05:05 +0000
asID: 834
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6e:77:9c:41:a5:bc:a3:9f:14:d9:5e:3e:49:11:b4:7c:b8:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 15 00:00:05 2025 GMT
Not After : Mar 14 00:05:05 2026 GMT
Subject: CN=C80C15322AE4F81017301338F8195F9AF1616A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:9a:13:02:a0:23:bd:86:05:91:55:bc:5d:
bd:35:89:45:0c:1d:6a:99:5f:a1:89:39:4f:3f:44:
53:2d:16:03:d2:45:04:74:10:0b:f0:05:0f:1e:df:
39:6b:5f:6e:30:26:47:72:f2:9e:33:fe:84:9f:d4:
5c:65:57:67:f9:fd:8e:d9:46:23:c5:cd:40:b8:21:
24:53:d6:33:6f:bd:bb:88:50:9d:91:03:cb:29:f2:
0a:cf:38:75:50:42:99:b3:9d:b9:aa:e8:dc:bd:66:
af:78:d8:05:e8:ab:d4:8f:8d:4c:7e:db:6c:26:b1:
25:1c:b1:f0:36:b3:44:00:89:12:18:5f:45:9c:ae:
a4:7f:17:4f:42:74:dd:3e:05:a4:e5:08:88:e8:53:
4f:23:8f:45:4c:f6:89:51:9c:e1:22:f7:32:bf:a2:
eb:4b:98:be:5a:f7:dc:a2:95:7d:85:05:e4:1b:31:
4f:23:8e:77:93:19:0e:25:ad:60:d7:f2:a5:b5:f0:
b7:22:2c:c2:9e:f0:e9:45:6b:2b:8d:8d:a4:df:1b:
98:d8:fb:99:12:82:02:7a:c2:85:f3:b8:4d:9a:1d:
47:14:10:43:b4:e3:33:c8:f9:9f:3a:03:cc:f1:3c:
3f:0f:9f:28:85:05:5c:5e:7b:8c:a9:2b:ad:3e:4e:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0C:15:32:2A:E4:F8:10:17:30:13:38:F8:19:5F:9A:F1:61:6A:66
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:95:d1:db:b7:c2:20:0a:3f:fe:f3:7d:e4:87:db:e4:32:38:
c6:1a:18:9e:3a:29:0e:62:47:28:7e:bf:7c:86:a2:c5:ae:e6:
e9:d7:bb:6e:92:05:55:63:93:96:a5:19:4b:f4:19:b1:e1:f3:
8c:b6:69:1a:a3:9f:9f:90:be:c8:c0:3d:3c:06:52:f3:8c:e6:
2a:4c:22:a6:d0:36:d9:8e:bf:57:ae:a9:0c:d2:ef:ee:1b:53:
fb:d4:36:bc:74:88:ea:5f:b0:b4:c2:81:6e:2b:15:83:d8:14:
12:a8:f2:83:41:09:12:63:80:af:87:9e:fa:26:cd:05:80:9f:
bd:6f:3d:54:54:7e:42:0c:9d:3b:4b:26:e2:09:bc:70:e0:b6:
21:d5:e6:4b:c9:b3:2c:6e:4d:a8:92:68:b4:99:e0:6c:f1:91:
44:43:1b:04:aa:a9:57:7b:46:d4:e7:f8:5a:c8:a4:b6:e4:da:
07:15:e7:03:cd:49:33:32:fe:17:b7:18:cd:ef:a5:6a:75:9b:
16:10:49:de:35:87:a0:2f:16:11:81:7c:ed:33:e8:9c:57:92:
48:9d:d7:80:e4:b9:69:0f:b4:2b:63:c4:e6:35:87:af:7c:84:
c6:5e:f2:db:e5:de:16:ff:1c:29:c0:96:15:7b:ac:a6:f4:26:
d2:d8:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:40 2025 by rpki-client