Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e2039333034.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: zxHvRrwpAxJjJj06Z0w/e2sQG+cA+VP+6PAATQddqbM=
Subject key identifier: 1D:42:0A:A6:BC:DE:24:36:24:20:DA:CC:CD:3E:2C:A9:2F:08:46:4D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 774FBD7CFC8E730061612992887EF0F69FED8E66
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e2039333034.roa
Signing time: Mon 17 Mar 2025 06:01:17 +0000
ROA not before: Mon 17 Mar 2025 05:56:17 +0000
ROA not after: Mon 16 Mar 2026 06:01:17 +0000
asID: 9304
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4f:bd:7c:fc:8e:73:00:61:61:29:92:88:7e:f0:f6:9f:ed:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 17 05:56:17 2025 GMT
Not After : Mar 16 06:01:17 2026 GMT
Subject: CN=1D420AA6BCDE24362420DACCCD3E2CA92F08464D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:6e:b9:55:88:e7:3c:db:90:d0:6c:fa:e4:
b7:e0:c8:36:bc:5f:66:9b:c4:c7:ee:7a:15:6b:93:
04:95:22:e1:ae:a3:ef:7e:25:4d:a5:90:05:7d:68:
06:ec:ab:56:c6:3f:ad:7d:47:f1:e7:b5:d1:e7:ac:
71:d3:86:38:a8:dd:cd:9f:e3:a0:b6:a4:eb:eb:a3:
07:00:ec:8a:f5:96:b5:d4:b1:6b:ca:97:86:6e:4f:
17:d3:21:28:38:48:5b:a4:23:1e:e5:04:89:f7:5f:
29:17:e2:0d:00:3b:4f:00:07:e3:c5:7b:51:68:e4:
82:f4:9a:3e:79:cf:24:1a:e9:83:f1:c2:2f:0c:3e:
a3:3c:e5:8c:cd:f2:48:bd:49:31:1f:52:3b:8f:c2:
26:c6:dd:b8:61:6f:d4:6a:3c:52:8d:1b:04:bf:f8:
74:ce:d3:79:27:4c:4b:63:5c:6c:b3:27:c2:6b:f7:
24:81:4f:0d:dd:30:a9:7c:d4:16:88:e5:39:9e:db:
fb:1e:59:55:77:19:ae:a7:42:26:8c:78:65:d8:ff:
56:0a:55:01:f3:66:0e:62:e9:e6:1f:5e:0f:76:ca:
00:08:24:dc:61:3a:d9:b6:27:b0:b4:ef:47:ce:9c:
fe:2c:6e:1f:3f:30:6c:78:b1:43:4f:2e:ed:14:ff:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:0A:A6:BC:DE:24:36:24:20:DA:CC:CD:3E:2C:A9:2F:08:46:4D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f0:00:a3:d0:83:33:1b:4f:72:a2:9d:fc:6a:cc:96:46:9c:
ae:29:54:a7:e9:e6:78:04:c4:c4:b3:88:64:cc:13:0f:83:3f:
12:2f:b0:49:76:f4:b2:c0:8f:ce:7a:d1:b3:23:55:10:1e:4b:
8e:2e:8b:60:0e:9a:c7:3d:4b:c2:38:f0:20:e4:4f:fc:e8:44:
99:bd:93:12:7e:71:eb:cf:78:19:d1:9f:93:d8:c3:f9:db:1d:
fc:73:15:1f:15:9f:0d:6e:48:27:f0:af:71:28:44:84:ad:48:
86:10:26:7f:25:59:73:a0:c9:f7:6d:80:c8:80:5d:4f:d6:d9:
0a:b2:1e:59:f9:01:d6:3f:17:b9:68:8c:a1:98:e3:32:68:6a:
52:6d:1d:4c:9f:30:d0:93:46:b0:c6:08:6f:8b:67:57:32:5b:
7d:a3:8b:2c:49:42:49:41:bf:ba:55:11:98:2a:37:61:dd:48:
bb:65:01:72:37:77:26:e0:6d:be:f5:0b:65:f3:3e:b3:5d:95:
65:50:55:38:f7:2a:49:f2:09:fb:9c:9c:0b:65:c4:70:2f:6c:
75:b1:32:75:3a:60:0e:04:24:f2:16:b1:9c:d5:b2:b1:f5:2b:
bb:c7:38:7c:c9:63:ed:69:e9:7b:85:b3:38:9b:49:47:21:5b:
c6:e8:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:45 2025 by rpki-client