Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e203633313530.roa
File: 3137382e3230382e3138382e302f32332d3234203d3e203633313530.roa (raw, json)
Hash identifier: VhhPLmW1aXcNyYfw+j1GvM62mGcQgOfDAyZT2T4KRIw=
Subject key identifier: EB:06:73:C6:DA:13:BD:F3:94:FB:0F:94:99:34:B2:16:BC:1C:41:F1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1BD980EBE6EFDF29748C32CA6D7B7E874D58FD7E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e203633313530.roa
Signing time: Wed 01 Jan 2025 10:43:34 +0000
ROA not before: Wed 01 Jan 2025 10:38:34 +0000
ROA not after: Wed 31 Dec 2025 10:43:34 +0000
asID: 63150
IP address blocks: 178.208.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d9:80:eb:e6:ef:df:29:74:8c:32:ca:6d:7b:7e:87:4d:58:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 1 10:38:34 2025 GMT
Not After : Dec 31 10:43:34 2025 GMT
Subject: CN=EB0673C6DA13BDF394FB0F949934B216BC1C41F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:ee:94:32:12:98:47:37:ca:9a:ec:b3:50:
35:59:08:5f:c8:1b:6c:d1:4e:15:94:7a:32:41:fa:
26:96:bd:3e:d4:ee:d4:b2:8b:4c:cd:bd:bf:3c:55:
c1:6c:90:53:95:91:44:9a:07:39:e9:36:3b:ca:e7:
b2:90:94:1b:76:c1:a5:71:c9:fe:27:6a:bc:5b:8e:
3e:9e:63:fb:a9:9f:7b:63:e7:51:56:da:67:a4:95:
05:e9:7e:d6:8b:00:b6:d2:26:7d:0e:c3:e2:8f:64:
13:f3:dd:ab:4e:d6:28:5f:e7:50:d1:fc:90:6e:f9:
5e:77:87:1d:14:66:eb:00:80:02:e1:e6:73:da:1d:
86:88:62:32:99:3e:92:72:76:89:2e:86:96:33:c1:
cf:dd:e1:32:be:01:6a:f9:aa:32:e2:ba:d6:9d:13:
db:80:28:a6:53:63:47:16:4b:c2:87:b3:57:76:60:
5b:45:c9:45:30:91:4c:55:da:c8:48:b3:7c:48:ac:
74:fe:40:e2:bb:fc:49:b7:e4:df:cb:18:a9:9f:8f:
a7:a4:9c:f7:3a:dc:ea:97:65:ba:e6:3d:0c:79:50:
06:5d:84:4c:24:bc:a9:86:fd:20:68:06:46:42:50:
a8:cb:a5:ab:f9:d5:30:4f:07:73:36:89:c7:a6:78:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:73:C6:DA:13:BD:F3:94:FB:0F:94:99:34:B2:16:BC:1C:41:F1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32332d3234203d3e203633313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c8:2b:a8:01:67:a9:3e:79:3e:bd:2f:b5:55:5a:93:42:db:
2f:7a:49:f8:20:74:4b:96:ed:3d:82:df:b2:ac:8b:e9:61:db:
c9:49:f7:42:e5:a0:bc:f4:ce:34:28:38:93:d7:e1:24:6a:ba:
7d:ec:a4:9c:86:83:1e:0f:e1:e3:df:b0:7e:25:fa:58:d9:d9:
51:55:db:51:fd:ea:23:7d:14:eb:6a:8e:13:ed:69:b1:fd:04:
d6:1f:83:c2:0b:d4:94:ca:46:a1:65:90:2e:26:3e:b4:e8:0b:
fa:5b:2d:f3:7b:d3:ac:65:46:dd:cf:77:77:18:88:10:93:71:
7f:dc:62:83:f7:69:c2:d0:9f:d6:95:60:b3:c4:ed:56:dc:fa:
75:1d:36:e2:66:6a:12:77:e8:ae:e3:bd:50:8a:81:79:bd:39:
7f:41:94:52:16:d4:0c:ef:03:57:f6:41:0f:74:b3:a0:dc:88:
e7:63:81:fb:e0:ba:db:41:11:34:e8:9b:f8:e1:5e:d4:fc:a2:
32:4f:29:19:ef:22:0d:0d:14:63:3b:62:37:85:d2:92:6a:ef:
7f:e1:69:2d:69:35:a3:5c:2b:44:f4:13:11:65:2b:d3:95:00:
64:ef:8e:3b:dd:76:40:3b:6e:ae:c2:11:41:a8:42:12:5b:c2:
ea:23:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:31 2025 by rpki-client