Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa (raw, json)
Hash identifier: C1sfhy0kHz4KeGBPeDI9Goa4m+1qymRafOqBjMLU2mk=
Subject key identifier: 4D:04:58:A9:E8:A5:9E:63:95:E6:B9:9D:A0:5D:4A:AA:20:12:E8:56
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3AFACBC348388C0BAEF1DD918300FD1AD0C83170
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa
Signing time: Sun 26 Jan 2025 11:56:15 +0000
ROA not before: Sun 26 Jan 2025 11:51:15 +0000
ROA not after: Sun 25 Jan 2026 11:56:15 +0000
asID: 47263
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:cb:c3:48:38:8c:0b:ae:f1:dd:91:83:00:fd:1a:d0:c8:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 26 11:51:15 2025 GMT
Not After : Jan 25 11:56:15 2026 GMT
Subject: CN=4D0458A9E8A59E6395E6B99DA05D4AAA2012E856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:7d:01:17:7d:3e:a2:48:37:09:2c:90:89:
75:6b:d8:58:d3:64:2e:e9:16:33:46:a0:86:ed:dd:
12:26:2f:e2:94:16:53:8f:40:78:07:8b:43:e1:a6:
94:22:7e:b2:92:02:b7:f8:3f:c7:dc:7d:84:6a:21:
01:35:4f:71:ac:df:e3:83:ff:5d:f5:4f:0a:9d:39:
9a:5f:18:a8:a8:fc:41:11:89:96:d4:a2:99:00:6b:
38:d8:56:08:6b:3f:38:78:8c:0d:ce:a7:6e:2a:22:
4a:49:a7:a1:46:d3:b4:67:26:fe:84:81:c4:39:e7:
c9:60:23:c5:6d:25:89:29:a1:3b:4d:da:d4:c3:80:
b4:15:20:ca:30:88:c8:89:d8:36:8a:a5:ee:6f:bb:
b8:88:d5:fb:22:08:2a:73:a6:59:79:92:2b:59:a4:
80:36:93:06:97:de:66:9f:97:12:e4:02:7b:70:ae:
7d:29:e6:29:9e:c2:59:11:b0:d7:e6:44:9f:2d:12:
37:61:c7:54:a8:97:82:f7:fb:2e:67:d4:3e:47:5a:
ce:2d:76:f8:21:b3:8a:c0:37:11:dc:76:9f:b8:ff:
18:57:33:f7:dd:f5:ea:c5:cc:04:2d:3e:28:1d:7d:
6d:8a:f9:b0:61:07:7f:8b:5f:fd:81:e3:ed:59:5e:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:58:A9:E8:A5:9E:63:95:E6:B9:9D:A0:5D:4A:AA:20:12:E8:56
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
82:23:cd:d0:5e:a6:7d:7a:48:f5:3e:d1:e8:9f:c2:c9:49:21:
2f:98:c3:ea:d9:2b:81:7b:4c:60:a5:cb:f0:49:78:36:64:f0:
93:af:a3:1f:9b:19:5b:1e:45:dd:8e:20:b4:96:d8:cc:2c:8e:
61:ba:90:f7:56:64:40:a0:eb:00:25:4b:9e:fb:28:5f:73:2b:
dc:2a:ab:09:15:27:b7:c2:36:01:d7:93:b2:41:f0:50:fa:b5:
cd:c5:ad:c3:dc:0c:9b:3b:ef:09:d5:bd:c0:2e:92:8d:3e:01:
44:eb:84:39:25:3d:9c:b2:30:62:1a:64:37:d8:65:ad:35:99:
2d:a1:aa:7e:ee:b0:b6:72:ba:37:20:42:7c:c6:e1:fb:a1:04:
cc:1f:fe:d0:3e:fc:33:4a:99:a6:5a:65:a4:40:c2:1d:c5:db:
40:96:31:9f:da:95:04:42:0d:5d:58:f0:b0:a5:4c:d4:1b:3f:
bd:af:0f:36:7d:83:c1:d3:0e:d6:3e:45:c0:f8:3c:94:86:b9:
fc:39:0c:03:c9:01:c1:83:23:5a:c9:e4:45:b6:5f:eb:f4:21:
32:f6:e3:4d:5d:96:0b:4d:bd:58:d1:46:70:84:a2:84:e3:c8:
66:8e:67:a4:c3:35:52:f3:f1:04:d1:8c:8a:f1:21:26:9f:9a:
96:11:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:27 2025 by rpki-client