Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa
File: 3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: y3e+I1M0fieMI8ejjSQOoZh7S4PaRMNSIJVUQAU2x+k=
Subject key identifier: 8F:1A:0C:7A:34:87:06:12:A8:4E:C4:23:2B:5C:39:BC:2E:29:F6:09
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 69339F806A5DDD707F88E3051982AEB07EEAA4D3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa
Signing time: Tue 31 Dec 2024 05:46:41 +0000
ROA not before: Tue 31 Dec 2024 05:41:41 +0000
ROA not after: Tue 30 Dec 2025 05:46:41 +0000
asID: 61317
IP address blocks: 178.208.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:33:9f:80:6a:5d:dd:70:7f:88:e3:05:19:82:ae:b0:7e:ea:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 31 05:41:41 2024 GMT
Not After : Dec 30 05:46:41 2025 GMT
Subject: CN=8F1A0C7A34870612A84EC4232B5C39BC2E29F609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:e5:12:b9:87:0b:b4:d2:e3:8f:8f:7b:e8:
41:a2:fa:99:c2:55:8b:8b:4b:54:ae:93:f4:40:6f:
ee:b7:32:7e:72:ed:31:02:4a:56:93:2c:c9:23:b5:
f7:7f:e7:69:79:5a:28:17:ef:e1:d0:26:d9:b3:1e:
cc:df:38:3b:9a:f0:ff:7a:72:a3:82:ab:69:12:3e:
5e:9c:7c:55:e9:43:60:de:56:d2:37:39:38:8c:a8:
d9:7e:a9:e6:ad:50:8f:0d:fa:6b:f3:05:18:4d:ef:
a2:34:18:d8:19:eb:f0:32:35:29:c4:cc:7a:c4:fe:
d2:8a:46:72:82:0e:7b:1d:6e:16:80:2a:16:20:73:
78:02:04:29:b2:ff:c5:af:dd:d2:bb:d5:b7:ca:c7:
9b:b2:09:d0:20:fb:3e:d4:2a:48:e4:55:82:72:d6:
a3:93:b2:37:9e:b7:27:32:94:95:f0:a3:2b:56:39:
42:cb:19:3b:02:af:92:2f:06:a3:68:f9:96:4f:b1:
f2:71:48:9a:41:c6:17:2d:a8:ca:61:c8:85:8b:45:
e1:2f:d3:0d:3d:3e:60:6d:ef:b3:dd:b8:c7:cb:02:
d8:3f:b8:55:d5:c2:3a:fa:48:96:49:81:07:50:ec:
3a:6e:b1:55:ba:23:96:b7:c7:2d:4b:45:f8:93:cd:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:0C:7A:34:87:06:12:A8:4E:C4:23:2B:5C:39:BC:2E:29:F6:09
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.185.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cf:71:fc:b3:fb:70:79:8b:21:36:97:9c:ba:99:8c:80:a4:
dd:1b:04:df:16:08:07:4a:eb:f8:30:d6:c1:83:9c:ad:e9:d0:
f1:e1:13:3c:51:91:45:bc:3f:01:29:1c:e5:a9:b9:fd:03:43:
f3:c2:68:be:42:b9:2a:17:78:c4:e2:77:64:4a:c2:7d:02:1c:
8e:2d:0c:f6:22:bc:90:ae:37:27:2d:e3:a0:64:bb:a8:9f:80:
d2:8a:07:98:e3:26:2c:16:41:c1:80:39:1f:e0:37:16:e9:e8:
24:e6:ba:90:12:f0:9c:e9:dc:99:d4:27:40:4c:0d:5e:9f:52:
5c:97:bf:8d:a5:32:4b:c8:57:78:74:80:5c:82:90:98:3e:60:
7b:5d:d3:86:9f:9a:f5:2b:d7:98:6e:a2:db:2e:96:21:5f:33:
ea:56:c6:dc:7a:6e:50:1e:21:6b:3f:a1:09:98:c1:32:9b:a1:
94:11:06:98:08:40:52:b6:28:f1:17:ff:11:d8:7a:c6:6d:c6:
f6:b4:a7:fd:35:0f:2d:05:86:9c:c5:5e:71:af:1d:a8:f8:33:
7f:1d:6e:35:a0:30:a3:ae:d9:5c:23:70:6a:5d:c4:7b:d3:d6:
b9:0e:30:99:17:b0:1c:b3:e8:35:b4:f6:e1:dc:25:36:25:4e:
f7:b8:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client