Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203439353434.roa
File: 3138352e3234302e3130372e302f32342d3234203d3e203439353434.roa (raw, json)
Hash identifier: o+hzP90nSI+T3y9sTbshYXhWjocfA2wlZEaogIaY53I=
Subject key identifier: 11:F0:AA:20:9D:89:1E:87:E3:C8:62:AF:ED:7E:71:0E:DC:98:27:CC
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 64CFCEBFBDABCCCEBA1310DFD36E7B4E09E93E8B
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203439353434.roa
Signing time: Tue 17 Dec 2024 17:01:14 +0000
ROA not before: Tue 17 Dec 2024 16:56:14 +0000
ROA not after: Tue 16 Dec 2025 17:01:14 +0000
asID: 49544
IP address blocks: 185.240.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cf:ce:bf:bd:ab:cc:ce:ba:13:10:df:d3:6e:7b:4e:09:e9:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Dec 17 16:56:14 2024 GMT
Not After : Dec 16 17:01:14 2025 GMT
Subject: CN=11F0AA209D891E87E3C862AFED7E710EDC9827CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:24:cf:e9:f6:38:30:89:a8:65:ac:e1:62:
74:3e:5f:ef:19:1f:71:31:12:74:1c:c9:12:a2:ae:
6b:2c:9f:50:3c:73:17:11:88:6d:15:a1:d8:57:83:
75:5f:08:55:5e:e5:95:82:3a:54:99:f8:e8:34:db:
6a:e2:fd:4c:62:6a:16:be:d6:35:43:2a:f7:af:a5:
d7:ca:3b:b4:55:8d:d9:68:18:6c:a7:e2:74:2c:6b:
d4:45:2a:7b:f4:2e:22:9a:4c:f6:e8:46:b4:f9:d8:
2d:6d:b8:ac:ef:2b:1c:00:0f:ce:83:79:0f:b1:ad:
17:c4:ed:c6:ed:be:6c:63:d4:3f:01:45:50:f7:b3:
8e:5b:20:c0:a2:66:52:2e:f2:50:97:71:d1:c7:a1:
ad:df:5a:de:83:12:d5:4f:c1:b4:93:dd:f8:19:a5:
d5:a8:23:fd:20:a9:43:9e:99:40:9f:fe:97:52:ed:
61:b9:0c:69:0f:b5:fb:5a:27:06:dc:f4:e1:8c:66:
58:bd:a3:14:fa:9c:86:3b:91:a1:e8:b0:ad:28:7f:
bb:2e:5d:be:8a:6a:f9:fc:e1:62:f7:37:c9:97:66:
66:e2:e5:92:b4:7d:ff:84:5e:3d:3a:db:08:70:ec:
32:c1:8e:ba:c4:dd:87:e0:b7:b6:5f:f3:bf:62:19:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F0:AA:20:9D:89:1E:87:E3:C8:62:AF:ED:7E:71:0E:DC:98:27:CC
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203439353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f6:ef:86:aa:14:f8:80:e4:a3:a3:e7:95:67:68:a8:9b:71:
63:d5:24:cb:22:e8:a2:04:9b:96:83:f7:8f:42:6a:68:7c:2e:
a9:7f:39:58:97:cf:e6:41:65:d8:a6:a0:97:3f:6b:d1:6b:c4:
6b:2b:67:0a:d0:3a:ee:87:85:3f:c5:55:34:4a:f7:ad:fc:45:
9b:e2:37:20:df:97:20:b7:a4:5f:3e:e8:01:22:88:3c:9b:a3:
95:2b:34:1b:7c:66:9d:25:fd:18:d7:1a:08:27:40:9d:c8:23:
39:66:2f:22:6a:e4:6c:cd:44:52:e0:84:4a:1a:28:1d:38:ae:
9a:54:4c:00:9e:89:e5:fc:96:75:b5:69:62:b0:fd:90:48:5d:
eb:d5:7d:e1:14:16:7b:66:9b:88:85:14:09:1c:1b:f1:10:2b:
00:d3:37:4f:84:a6:3d:39:60:1f:11:64:aa:3d:da:c7:38:22:
0f:ae:51:80:82:41:70:71:fb:27:3c:80:ed:1b:34:ab:a8:53:
df:87:90:c0:23:4a:76:ab:32:19:8f:fe:e0:1c:5f:e2:9a:56:
c6:9f:0b:5d:2a:12:16:61:ec:81:e9:97:f7:f7:82:ff:4e:10:
c6:2f:94:33:be:18:45:d4:90:6c:55:0d:62:3a:7b:a1:fd:54:
21:6f:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:12 2025 by rpki-client