Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20313937353337.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: 03PfV6Ucz5NG10dQtzt5rZEcuQUkw3XaOx7v303k/48=
Subject key identifier: 9C:D1:16:4D:8A:D2:76:D8:0E:28:13:CC:F2:23:B1:28:FF:0C:27:1D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2531DAB7CDEF265CE9C99D32D047E731195228FC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20313937353337.roa
Signing time: Mon 17 Mar 2025 06:01:18 +0000
ROA not before: Mon 17 Mar 2025 05:56:18 +0000
ROA not after: Mon 16 Mar 2026 06:01:18 +0000
asID: 197537
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:31:da:b7:cd:ef:26:5c:e9:c9:9d:32:d0:47:e7:31:19:52:28:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 17 05:56:18 2025 GMT
Not After : Mar 16 06:01:18 2026 GMT
Subject: CN=9CD1164D8AD276D80E2813CCF223B128FF0C271D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:06:7d:11:26:a3:bf:62:6a:27:f4:4e:f8:
db:35:0e:65:cd:6b:0f:b5:29:33:10:08:c3:2a:30:
9f:de:80:aa:a2:8e:5f:d2:11:70:2e:dc:3f:ab:c9:
77:99:7e:26:9d:27:ea:81:64:82:ad:ad:f5:26:f6:
d6:9b:20:bb:b9:ab:4d:9a:de:af:d9:da:8d:c4:23:
48:41:89:58:5a:40:fc:f3:8a:7f:d4:d6:3b:e3:59:
93:36:ee:2f:68:f3:eb:e2:a4:98:48:f5:28:1b:19:
54:74:cf:88:4a:98:52:27:bb:a5:fc:42:c3:9a:57:
a6:82:16:4e:5b:07:61:46:cb:ba:42:c6:a3:39:50:
7b:09:e2:ed:3d:3f:61:74:bc:d7:d6:22:06:79:b1:
c8:dc:d2:8c:88:af:34:01:cf:e8:df:3a:32:de:d8:
09:b2:b7:65:bc:b2:27:58:59:f3:18:26:74:35:ae:
94:3f:82:df:61:01:77:b7:43:d1:bc:15:bc:c2:63:
29:50:cd:0a:27:ed:2d:87:fd:88:24:a1:dd:1b:ec:
e1:e3:61:c4:c0:a7:60:45:0c:83:f6:29:07:7a:ac:
69:2b:22:a4:2a:33:f6:e0:c3:e2:68:bb:0e:bd:1a:
59:ca:ad:99:74:e1:28:f3:9e:6b:2a:2c:ed:e9:d3:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:16:4D:8A:D2:76:D8:0E:28:13:CC:F2:23:B1:28:FF:0C:27:1D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
36:37:c7:5e:0d:a3:22:da:78:18:80:a1:fd:21:97:0e:e1:8f:
13:e1:a9:cd:53:8f:bd:ae:41:9e:e7:49:0d:c5:2c:6c:ea:81:
25:5f:06:b6:2e:51:12:c7:93:6d:e7:d6:19:1d:bd:87:8e:f0:
69:28:4d:7c:be:84:6b:97:f7:17:69:03:04:ac:47:9a:ce:8b:
73:7f:c6:78:88:4c:77:f8:bb:4d:f9:bc:d2:2c:70:0a:ba:1c:
a3:65:45:f8:45:3d:31:94:9e:1b:a9:96:1c:b1:5b:53:44:16:
85:fa:47:75:c9:59:e8:66:f9:f1:be:84:f1:60:ac:17:5d:f8:
3f:bc:80:51:b5:ef:20:fb:59:ee:2b:94:d5:00:9c:ab:9e:f2:
a3:8b:d8:f1:4c:27:76:56:e5:c2:86:6a:19:78:02:7f:e5:c2:
00:5c:f8:4e:e8:de:fa:56:d4:c2:61:25:ef:c7:83:8b:c1:36:
24:f6:90:c2:d0:76:e3:60:36:a9:e2:52:cb:b7:00:df:0e:1f:
2b:4e:16:33:46:51:fd:59:a6:97:c5:e0:d2:dc:b8:c4:79:fe:
75:27:d3:e2:37:22:c1:f2:b1:b5:38:27:a3:a8:24:6a:12:a4:
70:4d:b4:4d:31:12:7f:61:7d:8d:4f:c8:75:ff:b8:cf:1a:fb:
70:a4:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:34 2025 by rpki-client