Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
File: 3138352e32392e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TNCbp61dlPnfA6+aJED604zUPf3jIzBsIS0k1AwZ2xE=
Subject key identifier: 58:FA:77:5E:FF:26:3C:E2:64:7D:E3:0C:83:5A:A3:8D:F3:30:5C:EF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4A8E7D12D05C1A80ADD543B17139B978A80BBD8C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
Signing time: Mon 13 Jan 2025 03:18:22 +0000
ROA not before: Mon 13 Jan 2025 03:13:22 +0000
ROA not after: Mon 12 Jan 2026 03:18:22 +0000
asID: 834
IP address blocks: 185.29.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8e:7d:12:d0:5c:1a:80:ad:d5:43:b1:71:39:b9:78:a8:0b:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 13 03:13:22 2025 GMT
Not After : Jan 12 03:18:22 2026 GMT
Subject: CN=58FA775EFF263CE2647DE30C835AA38DF3305CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:02:77:ab:e4:cb:12:00:5d:1a:21:70:e9:
e2:a4:05:ee:8d:c8:c4:ba:cd:79:90:71:0c:99:f4:
ee:f7:ed:8a:19:bb:d1:c1:96:b7:ec:bc:d1:37:55:
ee:dd:43:7d:7d:c3:5c:e7:9f:a2:7a:51:bc:42:11:
52:05:0c:d6:8c:61:2d:04:37:9a:77:6f:40:c4:b4:
40:56:e4:bf:9d:89:09:07:c7:2a:43:a8:9b:e1:c2:
d0:90:31:a2:cb:c1:17:01:b3:6d:13:94:b9:9d:fc:
d0:ff:75:92:07:40:23:c1:41:1d:d9:8f:00:eb:75:
c0:7e:5e:0b:b2:54:29:9d:8a:e5:37:bd:50:cf:67:
8d:8e:11:5c:64:68:82:db:73:e6:91:34:69:81:b4:
3c:7c:87:0d:0b:35:51:5e:65:d3:b4:34:6d:db:21:
40:3e:c2:f7:eb:d3:c4:a3:ef:7f:b2:8d:d5:ea:e3:
c3:b1:ec:4f:40:38:8c:c3:c6:04:55:bc:91:e2:64:
72:16:ab:77:94:11:fc:60:07:06:5e:50:6b:a2:ae:
e3:a9:ff:04:7a:da:fb:91:85:55:a2:60:8f:ee:57:
82:c7:ee:a8:02:5b:1f:57:63:24:7d:a1:e3:39:32:
de:cd:0c:3f:fa:1c:c0:3a:9c:4d:13:db:65:99:09:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:77:5E:FF:26:3C:E2:64:7D:E3:0C:83:5A:A3:8D:F3:30:5C:EF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.164.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e6:e2:cc:39:ea:a0:bf:c4:75:4c:ef:32:f6:a5:7d:71:7d:
1c:21:71:49:aa:df:79:f7:ae:b9:52:95:d2:46:c0:c6:d5:e8:
b9:10:3c:94:3f:01:06:31:27:c4:f4:b5:1b:9e:bf:ea:8c:f9:
8c:af:12:e0:0b:7e:ce:41:e0:09:35:d2:4d:ec:89:38:3b:30:
57:50:9c:d3:be:27:2a:f0:8b:82:51:e6:33:1a:57:e9:ab:91:
23:00:65:4b:b9:57:48:40:cb:5f:ef:05:08:2c:74:28:8b:c3:
2f:d4:b8:36:e7:76:b4:b7:46:7e:b6:b1:0e:32:dc:49:8d:ff:
2f:e3:45:c9:e4:08:84:50:11:55:95:c1:2b:64:cf:df:88:90:
85:f8:dd:38:a9:e7:1b:2c:09:7e:ec:88:f2:25:0e:eb:4f:9e:
3f:1e:1c:98:48:12:7e:2f:59:8c:7e:c6:a4:75:f8:e9:b6:24:
74:d4:33:12:39:45:bc:2c:a6:13:e3:6d:bd:4a:33:7e:64:66:
cb:f0:a6:86:71:b9:ff:b6:5b:ef:6b:87:d4:05:e0:2a:a3:c7:
09:a3:c7:f6:2e:ca:82:93:a5:7e:63:ee:0d:97:44:58:30:44:
39:77:ab:cc:2b:f2:12:c5:77:60:66:65:74:34:b3:d8:1d:9c:
13:54:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:47 2025 by rpki-client