Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203130313033.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: 35+weshepKpCIEYx4ECpyP8tcWXGtwA5ZUMP3YQvT8w=
Subject key identifier: 09:FF:BF:A9:BD:BD:C9:D0:D1:3D:14:F5:DB:CA:86:E8:3E:B4:A7:90
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4B94593C4A4AA464D91E28110051F8793A7391C2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203130313033.roa
Signing time: Mon 03 Mar 2025 12:32:04 +0000
ROA not before: Mon 03 Mar 2025 12:27:04 +0000
ROA not after: Mon 02 Mar 2026 12:32:04 +0000
asID: 10103
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:94:59:3c:4a:4a:a4:64:d9:1e:28:11:00:51:f8:79:3a:73:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 3 12:27:04 2025 GMT
Not After : Mar 2 12:32:04 2026 GMT
Subject: CN=09FFBFA9BDBDC9D0D13D14F5DBCA86E83EB4A790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:55:bf:ef:77:15:7e:05:95:39:24:d9:91:26:
60:56:01:77:52:19:c7:d6:cd:8c:e0:ce:e9:e5:4a:
c7:cd:cb:36:5c:53:3f:84:db:7a:1f:ef:d8:ba:d7:
af:27:07:64:14:38:a9:6d:8b:40:67:72:dd:53:84:
60:c7:b4:83:10:52:dd:8c:04:c1:cb:ba:19:c4:e3:
6b:42:42:ae:bb:d8:89:8b:f6:3a:b2:0e:da:7f:90:
c5:f7:00:c6:83:fa:f4:07:5f:34:18:9b:53:83:0e:
38:88:06:a6:c8:b1:6e:be:ed:ff:11:3e:15:9b:47:
75:a6:00:49:55:f1:d2:a0:17:7f:93:60:08:28:a1:
f4:65:bc:78:59:9d:ae:c6:b8:b2:89:63:00:64:3f:
ea:6e:6c:67:8f:b5:a3:d9:70:65:d6:bc:95:92:f0:
75:7a:b9:64:6a:eb:b7:7b:2b:cb:f3:e0:3a:71:5f:
ab:b1:68:e4:5e:fc:7e:71:c2:0f:0f:fc:94:85:0d:
22:35:4f:6e:ac:13:e4:f3:33:71:bd:1e:38:49:5e:
5b:37:72:18:7b:62:03:58:59:b2:a0:7f:ed:75:c4:
9a:62:b0:a1:34:2b:46:21:b5:81:c0:16:1f:8b:98:
47:8d:f8:c1:21:9d:5b:9d:50:36:12:93:db:d7:1b:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:BF:A9:BD:BD:C9:D0:D1:3D:14:F5:DB:CA:86:E8:3E:B4:A7:90
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
26:03:e5:24:e4:d7:e5:49:6e:2e:74:26:67:5b:c3:a4:9f:fa:
71:a3:cb:e4:b1:d8:a9:36:c4:db:19:89:58:90:64:eb:3b:e8:
fc:1c:d0:0c:55:a3:32:ef:31:c5:7a:7e:be:16:37:d7:71:e3:
3a:15:ab:e6:12:3c:d4:28:1e:79:87:f4:11:e2:a6:2e:af:90:
e3:d4:d2:c6:4c:6b:4c:33:d5:34:65:b6:ef:6d:89:be:f0:50:
66:ff:d1:de:83:84:3e:30:35:8b:b3:0f:35:2c:98:3a:43:a6:
01:27:36:2d:ad:98:1a:b2:99:41:f5:8e:a9:4b:70:d8:f5:a6:
02:97:27:45:bc:c9:ca:94:02:0e:47:47:2a:28:62:82:8f:ba:
f2:ca:ac:e6:33:93:c9:00:f5:3a:79:a1:b8:bd:44:ad:e2:51:
98:0f:53:29:9c:b5:00:f3:9d:34:c0:4d:fc:48:ee:4d:23:68:
ae:22:c2:8a:ee:9e:99:fd:fa:39:49:b4:a6:35:17:1b:44:61:
e3:f5:d2:4a:e6:9d:03:f2:0a:e3:10:4b:e9:8d:8e:10:a9:99:
88:de:bf:6c:2c:70:fa:ec:b0:80:1b:9f:e9:9a:0e:33:f6:07:
0a:00:b3:7e:be:6f:49:0f:ac:f3:e5:15:03:8f:05:f7:6b:3c:
73:ca:f6:b6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUS5RZPEpKpGTZHigRAFH4eTpzkcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTAzMDMxMjI3MDRaFw0yNjAzMDIxMjMyMDRaMDMxMTAvBgNV
BAMTKDA5RkZCRkE5QkRCREM5RDBEMTNEMTRGNURCQ0E4NkU4M0VCNEE3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrVb/vdxV+BZU5JNmRJmBWAXdS
GcfWzYzgzunlSsfNyzZcUz+E23of79i6168nB2QUOKlti0Bnct1ThGDHtIMQUt2M
BMHLuhnE42tCQq672ImL9jqyDtp/kMX3AMaD+vQHXzQYm1ODDjiIBqbIsW6+7f8R
PhWbR3WmAElV8dKgF3+TYAgoofRlvHhZna7GuLKJYwBkP+pubGePtaPZcGXWvJWS
8HV6uWRq67d7K8vz4DpxX6uxaORe/H5xwg8P/JSFDSI1T26sE+TzM3G9HjhJXls3
chh7YgNYWbKgf+11xJpisKE0K0YhtYHAFh+LmEeN+MEhnVudUDYSk9vXG+aDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCf+/qb29ydDRPRT128qG6D60p5AwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzAzMTMwMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy0LwwDQYJKoZIhvcNAQELBQADggEBACYD5STk1+VJbi50Jmdbw6Sf+nGjy+Sx
2Kk2xNsZiViQZOs76Pwc0AxVozLvMcV6fr4WN9dx4zoVq+YSPNQoHnmH9BHipi6v
kOPU0sZMa0wz1TRltu9tib7wUGb/0d6DhD4wNYuzDzUsmDpDpgEnNi2tmBqymUH1
jqlLcNj1pgKXJ0W8ycqUAg5HRyooYoKPuvLKrOYzk8kA9Tp5obi9RK3iUZgPUymc
tQDznTTATfxI7k0jaK4iworunpn9+jlJtKY1FxtEYeP10krmnQPyCuMQS+mNjhCp
mYjev2wscPrssIAbn+maDjP2BwoAs36+b0kPrPPlFQOPBfdrPHPK9rY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:24 2025 by rpki-client