Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z+syHwYb/ucuIvGjH3IwHYO05RN8qSGiVbWJ47VhXT4=
Subject key identifier: 7D:D5:8B:96:FE:38:9B:56:BA:9D:C4:27:73:03:20:42:8D:EE:69:1B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2021614B90D0C51AE19E24FE770B06D1F70FB949
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 Jan 2025 00:02:57 +0000
ROA not before: Wed 29 Jan 2025 23:57:57 +0000
ROA not after: Thu 29 Jan 2026 00:02:57 +0000
asID: 834
IP address blocks: 178.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:21:61:4b:90:d0:c5:1a:e1:9e:24:fe:77:0b:06:d1:f7:0f:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 29 23:57:57 2025 GMT
Not After : Jan 29 00:02:57 2026 GMT
Subject: CN=7DD58B96FE389B56BA9DC427730320428DEE691B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:6c:67:53:49:c7:ac:d6:b5:12:5b:97:d9:
58:c5:c8:58:4d:a9:61:3e:6d:ac:5f:6d:f2:d4:65:
8c:cd:b5:19:5d:8f:ed:6f:2d:fe:94:b9:b7:c3:e3:
27:37:f3:98:7b:ae:bb:aa:ed:b9:91:70:a3:25:89:
91:b9:48:8d:e5:85:7d:1f:79:10:07:79:5d:92:d8:
7e:fd:b8:d5:52:d8:fe:b2:7b:17:0e:1e:e9:cd:c5:
de:e6:72:0d:4e:c2:77:9c:e9:d5:78:88:09:cf:81:
ee:d6:0e:ed:c1:ac:d7:ac:d7:7f:73:bd:3c:76:9d:
61:03:c2:8e:0c:76:03:79:d3:21:6e:d9:9f:d6:a4:
ca:c4:44:20:db:08:64:7c:e1:4d:af:95:a6:4a:4b:
4f:d3:c3:4f:f2:c8:fc:91:1f:39:6b:8c:fe:d8:c2:
bb:d0:d9:59:97:79:07:2a:52:be:4e:01:8c:bb:0a:
3d:29:e3:c9:d6:02:4e:26:dd:9e:37:b0:f3:38:47:
e2:44:6c:c1:b9:f1:4b:2b:0c:55:07:a7:8b:98:4d:
1e:3a:80:41:b3:e9:00:97:46:ed:50:6f:e6:8a:52:
b4:21:be:4a:2a:aa:ed:bd:96:38:1a:d5:5f:e6:bc:
5c:3c:23:e0:54:34:d6:05:69:b9:6f:55:11:cd:e3:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:8B:96:FE:38:9B:56:BA:9D:C4:27:73:03:20:42:8D:EE:69:1B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:9d:05:7d:d2:cb:6e:3b:4d:bf:be:81:28:aa:61:7b:6a:
30:03:69:a8:d6:c2:2e:da:69:65:ba:43:66:07:73:b4:a3:0c:
60:82:d6:61:58:84:94:69:5a:95:bd:5f:08:fa:6b:17:34:0f:
6f:d3:2d:d8:d1:89:f1:ac:1a:6d:03:1b:a7:51:4b:c3:9a:05:
cf:69:56:88:21:8f:ea:e1:9f:d3:8a:75:0c:82:7c:d9:5f:c5:
65:0d:d6:5c:bb:83:98:3d:42:51:32:14:b5:3a:e1:59:be:b8:
88:a3:5b:0a:76:ed:e1:61:1f:01:48:1f:ef:bf:8c:89:8a:3e:
03:cc:b3:2a:3d:20:54:99:a4:57:c9:b1:a6:90:33:45:d8:58:
10:b4:7d:50:56:e0:54:fe:ad:0f:38:6a:ab:3f:45:fb:8b:7b:
3e:79:15:2d:a9:57:d7:0e:06:57:e8:16:e8:85:a9:5e:24:cc:
09:dc:47:d8:93:23:09:0a:7d:7c:83:55:e4:c9:2b:0a:dd:45:
dc:7f:94:0f:82:72:c1:9f:e2:0b:99:e9:3c:fa:bb:32:70:7a:
22:3b:84:c1:cd:10:35:b6:a6:07:47:1c:78:1d:c8:68:13:05:
99:f4:ac:97:25:4c:65:d4:ae:5a:1a:7f:c4:b1:84:c9:12:96:
c2:3d:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:57 2025 by rpki-client