Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa
File: 3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier: 7DC//SUkUJAOH0z88MU14q3jpmAgMVqwGbik1GcY6+8=
Subject key identifier: 02:E2:94:97:78:92:CA:6A:2E:2D:29:FB:FD:F5:EA:8E:38:5A:A6:57
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 14B103FC70D20DA4DBED61201BBA6B36C111E88B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa
Signing time: Thu 26 Dec 2024 02:25:55 +0000
ROA not before: Thu 26 Dec 2024 02:20:55 +0000
ROA not after: Thu 25 Dec 2025 02:25:55 +0000
asID: 135402
IP address blocks: 185.150.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b1:03:fc:70:d2:0d:a4:db:ed:61:20:1b:ba:6b:36:c1:11:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 26 02:20:55 2024 GMT
Not After : Dec 25 02:25:55 2025 GMT
Subject: CN=02E294977892CA6A2E2D29FBFDF5EA8E385AA657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:d1:90:3a:05:85:1d:1e:3d:ce:d7:7e:c9:
81:13:5c:df:ed:2f:da:b8:f5:8a:2f:7a:0f:99:c6:
fa:72:69:59:4a:2c:f4:02:43:5d:3a:01:3a:ba:81:
33:1b:24:32:4f:cb:38:50:1a:f4:53:e3:71:57:62:
ee:e6:52:40:aa:61:73:0e:47:65:1c:48:9f:93:6c:
22:35:b1:ba:27:c1:9c:3f:74:11:b2:f4:82:47:b3:
fa:86:e0:f4:29:fe:7a:e6:3a:c3:7f:f3:09:1d:11:
69:86:22:e9:cb:4d:bc:85:a6:bf:a8:f9:97:de:45:
22:ac:89:ec:a7:db:1b:7b:32:49:bc:a5:66:3e:e2:
7c:c6:d5:e4:3b:7e:9a:c6:87:6f:41:c5:90:a5:97:
73:f2:83:fc:2d:e0:8b:2b:e0:c1:d0:3d:74:f5:f4:
d8:ae:27:87:33:bb:21:f2:bf:0c:f9:8b:e1:64:97:
21:f2:f2:6d:9f:4b:e6:08:4c:b3:cf:5a:4a:92:8e:
f0:a9:c4:29:ce:fb:f9:55:6b:a1:58:82:db:73:47:
ca:64:fc:16:84:ee:41:a4:01:5a:9a:23:49:e7:32:
1f:3e:70:1d:c3:74:d4:9c:db:90:90:fc:88:7f:b2:
1e:7d:89:89:3a:b1:b9:2f:d4:d2:a2:02:86:b3:1b:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:94:97:78:92:CA:6A:2E:2D:29:FB:FD:F5:EA:8E:38:5A:A6:57
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.139.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e9:d1:e8:db:34:e7:d7:38:e9:6a:d5:98:3f:78:3a:6e:7f:
59:63:01:de:30:54:24:19:ea:b0:79:d1:43:18:d1:8d:38:e9:
47:00:b5:c6:99:fe:6b:54:86:07:02:3c:16:0e:24:e2:f3:be:
d9:a8:de:53:87:df:58:e7:7d:da:31:12:3c:27:ec:b4:c7:ed:
e1:5c:f3:56:f8:29:e2:5e:7b:12:53:b4:52:2e:06:8c:de:b7:
60:c2:2e:e9:89:a3:57:d2:69:03:f7:75:95:ba:f3:43:21:12:
2f:a1:03:fb:a5:e0:1f:0a:0a:2d:df:d5:e1:fe:a2:6d:2c:70:
f8:1d:8e:2a:d6:57:fb:79:cd:6b:eb:e7:1b:e0:85:a6:89:a5:
84:f6:01:82:d1:f7:28:6e:1d:8f:2f:9c:5b:79:d5:bd:73:35:
76:d2:b7:f7:70:7d:02:fb:3b:7e:f0:39:08:3b:85:28:92:36:
ee:05:67:fc:a6:b4:14:6e:52:31:2e:1a:c9:0a:b6:30:be:e9:
bf:55:72:90:87:fc:d9:79:d1:47:9d:bd:36:45:a0:9f:88:bd:
b9:77:f2:87:22:13:b2:a8:7e:c3:63:2a:fc:83:37:21:3f:28:
d0:3a:56:d3:3c:85:8d:e8:1a:6b:ee:35:07:ac:2c:19:d0:4c:
ee:f8:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:26 2025 by rpki-client