Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203231383539.roa
File: 3138352e32392e3136352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: VOJ2RyOjr+V+rxkYsM9NXyuQS+a3wToGEA9wg/7ZVBU=
Subject key identifier: E8:B6:F6:F1:A8:FD:56:19:80:88:0C:35:B1:1D:70:4C:6E:EF:D7:52
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 686CD85839FCD15D42D1D910CE425B65392B030A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203231383539.roa
Signing time: Mon 13 Jan 2025 03:15:53 +0000
ROA not before: Mon 13 Jan 2025 03:10:53 +0000
ROA not after: Mon 12 Jan 2026 03:15:53 +0000
asID: 21859
IP address blocks: 185.29.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6c:d8:58:39:fc:d1:5d:42:d1:d9:10:ce:42:5b:65:39:2b:03:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 13 03:10:53 2025 GMT
Not After : Jan 12 03:15:53 2026 GMT
Subject: CN=E8B6F6F1A8FD561980880C35B11D704C6EEFD752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:fd:36:6b:7e:d9:38:f9:ea:0e:e0:51:77:
6f:18:c1:70:a1:8f:c6:a9:11:01:c2:57:41:b6:2a:
e9:d2:a6:14:01:ff:52:64:88:04:b7:e4:82:49:95:
11:36:5f:6e:db:21:1d:2a:a1:56:70:c9:dd:d3:36:
40:b8:bb:3d:90:31:6d:e1:2f:ab:6e:6a:04:4b:0d:
96:16:97:c1:12:47:b0:49:07:71:12:24:9e:c5:d1:
79:53:4b:44:1b:06:6b:08:48:75:29:04:ef:d6:40:
1a:5e:2f:ff:ac:62:e7:2d:64:79:30:33:a4:8a:24:
bc:7d:51:49:6c:9a:64:b7:80:e6:4a:ad:0b:99:44:
22:f6:41:4c:28:3e:ba:ac:21:1a:a9:a1:e8:46:8f:
bc:32:af:32:8b:dc:07:24:49:89:b0:c8:e2:c3:fe:
8d:96:c4:14:73:6d:87:fb:6f:3e:78:8e:7a:f5:43:
51:b0:d1:ad:26:81:97:56:6b:4f:f2:20:93:c6:62:
85:98:43:82:83:a9:53:99:4c:65:61:51:71:07:be:
66:f6:11:e3:ba:e7:75:59:b5:b7:ec:14:6b:b5:d0:
7a:91:f7:0f:90:1d:d3:c5:90:ef:4d:88:4b:bf:17:
eb:38:4b:aa:2c:e7:5f:4c:60:bf:f4:6e:87:64:63:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:F6:F1:A8:FD:56:19:80:88:0C:35:B1:1D:70:4C:6E:EF:D7:52
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.165.0/24
Signature Algorithm: sha256WithRSAEncryption
98:66:dc:40:65:f0:f7:30:5c:c6:5e:c6:90:88:84:0e:87:fb:
36:e8:38:3e:da:8f:a7:7b:db:d7:70:e2:bf:80:f4:64:ba:7f:
ac:88:35:3e:9a:3f:18:bd:2f:33:78:7d:5e:c1:e0:af:cc:99:
36:a2:36:b5:39:7f:d0:da:ba:c5:cd:82:09:bd:8d:c4:59:08:
ad:08:2b:8e:da:ea:4d:ab:05:0b:ad:76:81:36:74:e8:e3:4f:
b0:e9:71:5e:2c:8e:c2:9a:ce:b5:2e:73:df:0d:57:25:0a:8e:
a5:e3:9f:8f:1d:cf:cc:f0:4d:cf:dc:16:64:bc:21:cd:56:92:
3a:92:d7:df:90:1d:3e:d4:a3:0e:81:a5:37:d5:e3:e9:f6:a9:
ea:24:95:30:83:f7:59:c7:6e:6d:67:f7:d1:29:29:24:f3:90:
8b:41:cc:46:34:05:bc:a4:ee:3c:34:61:85:3a:37:1f:d5:70:
de:7b:ad:1c:bd:b9:c2:ae:f4:8d:96:63:33:6a:ee:59:cb:fb:
30:95:90:86:42:27:89:91:bb:8d:9b:97:6c:a4:ec:71:48:83:
b8:9f:28:bb:d3:93:f4:5c:a5:c3:3f:1c:55:36:49:2f:1b:3c:
ea:3d:85:b5:e9:25:86:41:dc:c3:96:8f:37:c4:bd:f0:3f:b9:
62:79:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:07 2025 by rpki-client