Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +FmGL6TchS7jpmjHqCGTx9US6W9z4kCfYLIftzLe5Qk=
Subject key identifier: B9:67:27:C4:E4:B7:51:4E:7A:8C:6F:C3:C4:60:15:26:32:3C:12:C8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 229E1142C588B937854ACA285B35A356F04301EC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Mar 2025 03:46:40 +0000
ROA not before: Mon 03 Mar 2025 03:41:40 +0000
ROA not after: Mon 02 Mar 2026 03:46:40 +0000
asID: 834
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9e:11:42:c5:88:b9:37:85:4a:ca:28:5b:35:a3:56:f0:43:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 3 03:41:40 2025 GMT
Not After : Mar 2 03:46:40 2026 GMT
Subject: CN=B96727C4E4B7514E7A8C6FC3C4601526323C12C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:8d:83:27:62:8a:3d:fc:eb:43:c5:e8:d8:
e8:35:ca:18:89:5d:b8:e7:83:4b:48:8b:80:5f:fd:
60:94:cb:4f:34:a2:5c:b8:d4:4d:69:cb:64:6f:e8:
a9:1d:60:1f:a0:f3:41:ed:80:b4:94:75:cb:ad:3c:
08:e1:c8:2a:39:55:a9:ed:af:d4:ad:11:41:a1:fe:
92:7b:08:17:da:4d:00:d1:b2:d4:3b:f3:7e:e5:ba:
ed:77:2a:e0:80:b4:36:7a:00:21:d5:58:88:a7:19:
49:d6:25:14:0d:e4:86:54:7c:17:19:4e:91:69:12:
25:62:35:99:e1:b6:9c:49:f6:6e:8f:95:5e:0f:d2:
27:0f:27:df:d4:bb:9b:00:a9:12:51:46:3e:8c:7b:
b9:60:48:b9:17:51:47:24:14:91:74:f9:04:7d:d0:
68:e8:5b:c5:b4:3a:93:6a:31:fa:b8:1e:f6:22:dd:
73:5a:b9:5f:0d:35:ed:6b:f2:50:b0:b5:0d:50:d6:
c8:a9:8c:ac:76:f9:8d:77:70:00:29:c1:0e:e0:6c:
89:8e:fe:b3:e6:d3:6f:e4:3e:fc:57:15:43:0f:df:
cf:84:72:62:6a:8f:6e:9b:b6:a2:70:d8:42:fa:65:
ea:c6:9d:3b:ff:ee:d4:95:47:1f:dc:34:fd:86:2c:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:27:C4:E4:B7:51:4E:7A:8C:6F:C3:C4:60:15:26:32:3C:12:C8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7a:fe:50:77:7c:2c:df:92:d6:5c:c9:3e:ac:ca:60:17:31:
4b:5e:44:da:7c:62:8d:97:bf:37:11:19:91:4f:1a:46:dc:ef:
a0:fc:5f:e7:04:db:c6:9a:36:71:09:c8:6a:5a:2f:98:90:7f:
8c:fc:50:fa:64:8e:f6:34:3d:70:df:80:49:2d:ca:f1:7f:49:
72:61:dd:9e:dd:26:63:28:a2:aa:28:f4:2f:41:c7:ed:cb:c4:
7a:d6:a7:6b:ce:88:ca:9c:6e:33:78:5b:b4:d3:9b:cd:b5:d7:
4b:46:29:ce:88:dd:74:86:7e:dd:7f:55:dd:f6:d0:83:62:d0:
87:d1:f9:66:2a:84:65:90:dd:2c:d9:c0:84:bc:3a:b9:d1:46:
bd:0e:66:5d:ff:98:f5:10:62:e6:d6:f4:ea:41:a9:97:ef:d3:
90:a6:2f:03:e3:9e:5d:3d:b7:99:c1:91:3f:e1:74:46:7e:20:
5f:51:e7:e6:e0:46:9e:98:64:e8:cb:fc:5c:73:5e:3b:7d:ad:
e7:cf:82:91:c5:96:da:79:4d:11:a9:ff:0f:f2:b8:37:3c:cc:
2e:96:30:1b:11:fe:b4:44:3f:80:53:4e:e0:d7:9d:fb:a8:8f:
b8:8e:a5:58:67:0a:1f:1d:f0:42:24:60:2b:ea:85:26:9e:d8:
f2:8e:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:30 2025 by rpki-client