Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
File: 3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: dzq6W5DoiS0disig/QZN8uFkMeaJGGETkx8jTDfi3F8=
Subject key identifier: DC:1D:EB:3A:42:CB:2F:B3:68:F0:DC:CD:AC:B1:06:CA:34:86:D9:6E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7195A68ACC7F5DFCC78CBC6BAB27D5028AFF3690
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
Signing time: Sat 21 Dec 2024 12:39:45 +0000
ROA not before: Sat 21 Dec 2024 12:34:45 +0000
ROA not after: Sat 20 Dec 2025 12:39:45 +0000
asID: 29802
IP address blocks: 185.150.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:95:a6:8a:cc:7f:5d:fc:c7:8c:bc:6b:ab:27:d5:02:8a:ff:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 21 12:34:45 2024 GMT
Not After : Dec 20 12:39:45 2025 GMT
Subject: CN=DC1DEB3A42CB2FB368F0DCCDACB106CA3486D96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:0a:1d:8d:2d:fc:14:2e:f5:ad:83:df:cb:
2f:10:a0:6d:2e:99:b9:49:3c:33:c9:fc:96:7b:ec:
f7:d3:de:be:e4:ce:2d:7e:b0:0b:41:6a:ad:8d:a8:
02:9e:83:8f:f2:ab:2f:7f:22:3e:d6:64:6b:33:ff:
5c:ef:bf:07:30:f5:67:93:f2:69:03:aa:18:5a:1f:
6b:2b:67:75:fb:aa:b7:76:e1:db:17:91:8b:36:5c:
4d:46:f2:8a:66:8f:02:8a:29:42:ee:35:c0:99:b1:
5a:70:9d:e9:b2:b8:5a:d7:76:44:a8:f3:0e:2c:1f:
59:19:53:f2:94:43:2d:28:c5:b6:d3:33:8d:b2:6c:
fc:dc:0f:e2:19:d4:75:4d:13:0f:04:4c:6a:72:d2:
48:07:80:87:e9:53:4a:6f:dc:eb:bd:86:67:bf:f9:
cd:17:a7:43:79:e8:7a:63:12:97:8b:37:bf:94:37:
44:22:25:e3:14:01:49:96:46:47:7a:2b:a4:7b:c5:
f2:d6:eb:62:00:db:26:e2:44:06:da:b9:0b:c4:8d:
e0:dd:b0:46:7e:27:ff:5e:b5:50:2f:c0:74:7c:b7:
c6:4e:55:7c:c6:05:3d:ad:01:8b:1c:55:d6:3f:89:
a2:c2:19:20:4d:21:d3:1d:81:48:dd:0b:dc:00:94:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:EB:3A:42:CB:2F:B3:68:F0:DC:CD:AC:B1:06:CA:34:86:D9:6E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:28:5a:32:60:f5:53:27:f0:1c:74:dc:55:0d:a5:00:0d:17:
cd:c6:18:43:ed:b5:70:11:6b:bd:bf:8d:ae:af:bf:e5:5f:4f:
8e:94:63:23:81:36:b6:e5:46:91:71:3e:7b:7b:1b:58:62:ef:
20:d0:ac:e9:fa:98:29:6e:9f:01:19:30:e6:94:ea:9c:78:0f:
c9:e4:7f:40:e3:c2:0a:ee:37:2c:99:83:b9:e7:0f:f2:01:ba:
ab:05:ee:29:39:b0:a6:2e:54:b8:88:ca:29:50:ed:bb:48:ee:
34:00:b5:5e:86:80:6b:ce:94:72:08:32:51:6b:5d:94:0c:ce:
17:d7:92:5c:2e:05:94:9d:89:34:42:10:d4:fb:62:b8:dc:9d:
26:a3:32:b5:01:86:8e:2e:ef:f6:f4:0c:05:bb:51:fe:b6:5f:
92:a5:04:3e:36:51:c5:5c:77:b1:df:5f:e2:b3:3d:fa:6b:bd:
6b:22:06:3f:d3:ef:2d:e1:cc:77:17:9a:db:05:56:a0:38:cf:
72:d5:e8:ff:88:66:9b:41:ce:a5:80:dd:4e:9c:ee:8f:61:c1:
2f:a5:f6:13:bb:d4:62:0b:35:b7:9e:33:f9:96:2c:12:8c:4a:
b9:92:48:8d:2b:86:20:5d:b6:5c:c6:e7:79:5f:be:cb:22:3a:
39:68:5e:69
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcZWmisx/XfzHjLxrqyfVAor/NpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDEyMjExMjM0NDVaFw0yNTEyMjAxMjM5NDVaMDMxMTAvBgNV
BAMTKERDMURFQjNBNDJDQjJGQjM2OEYwRENDREFDQjEwNkNBMzQ4NkQ5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMAodjS38FC71rYPfyy8QoG0u
mblJPDPJ/JZ77PfT3r7kzi1+sAtBaq2NqAKeg4/yqy9/Ij7WZGsz/1zvvwcw9WeT
8mkDqhhaH2srZ3X7qrd24dsXkYs2XE1G8opmjwKKKULuNcCZsVpwnemyuFrXdkSo
8w4sH1kZU/KUQy0oxbbTM42ybPzcD+IZ1HVNEw8ETGpy0kgHgIfpU0pv3Ou9hme/
+c0Xp0N56HpjEpeLN7+UN0QiJeMUAUmWRkd6K6R7xfLW62IA2ybiRAbauQvEjeDd
sEZ+J/9etVAvwHR8t8ZOVXzGBT2tAYscVdY/iaLCGSBNIdMdgUjdC9wAlI4VAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3B3rOkLLL7No8NzNrLEGyjSG2W4wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx
MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5lokwDQYJKoZIhvcNAQELBQADggEBAH0oWjJg9VMn8Bx03FUNpQANF83GGEPt
tXARa72/ja6vv+VfT46UYyOBNrblRpFxPnt7G1hi7yDQrOn6mClunwEZMOaU6px4
D8nkf0DjwgruNyyZg7nnD/IBuqsF7ik5sKYuVLiIyilQ7btI7jQAtV6GgGvOlHII
MlFrXZQMzhfXklwuBZSdiTRCENT7YrjcnSajMrUBho4u7/b0DAW7Uf62X5KlBD42
UcVcd7HfX+KzPfprvWsiBj/T7y3hzHcXmtsFVqA4z3LV6P+IZptBzqWA3U6c7o9h
wS+l9hO71GILNbeeM/mWLBKMSrmSSI0rhiBdtlzG53lfvssiOjloXmk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:46 2025 by rpki-client