Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e2035303635.roa
File: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=
Subject key identifier: 20:B5:C8:A9:C2:C1:47:FB:A8:D9:92:EE:A7:79:AE:19:F5:4E:C6:1F
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 325E15C484DCD8CE683115DF2DF8122C86EEA471
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e2035303635.roa
Signing time: Wed 12 Mar 2025 12:53:21 +0000
ROA not before: Wed 12 Mar 2025 12:48:21 +0000
ROA not after: Wed 11 Mar 2026 12:53:21 +0000
asID: 5065
IP address blocks: 185.181.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5e:15:c4:84:dc:d8:ce:68:31:15:df:2d:f8:12:2c:86:ee:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 12 12:48:21 2025 GMT
Not After : Mar 11 12:53:21 2026 GMT
Subject: CN=20B5C8A9C2C147FBA8D992EEA779AE19F54EC61F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:6e:bb:08:79:11:b6:66:d9:9d:8a:2f:5d:
fa:9d:83:a1:8e:f5:95:cf:a8:4e:8f:42:fe:e3:0f:
3e:d3:97:f3:1b:02:20:28:f8:c3:fa:df:bc:9c:9c:
cc:dc:b1:55:f5:2b:1e:69:ab:bd:e4:d9:f1:1f:6c:
2b:a5:53:cf:4b:f8:24:10:39:69:56:62:25:80:d3:
45:5a:62:10:2a:6c:23:52:97:67:3d:6f:80:a2:50:
32:eb:c5:b2:25:f4:c3:6f:9c:0b:90:86:dd:42:30:
48:e3:30:49:1a:ce:d4:e6:53:59:fc:f7:c1:c5:6f:
cc:5c:e1:fe:9f:57:a8:ac:ae:1a:9f:18:80:03:f1:
df:b6:71:87:42:74:fe:c4:29:a8:a4:fe:07:38:f1:
44:16:1f:46:c9:fc:74:97:bd:84:bc:3a:ee:9d:eb:
c6:f6:3b:9f:31:ae:89:2e:5a:3d:67:cd:c3:46:79:
c9:76:0d:28:f1:37:12:f6:27:23:34:79:62:35:99:
eb:79:a4:38:9e:84:f6:2b:5f:3e:e4:9f:ad:d3:73:
c5:a0:3b:17:17:ba:84:48:0d:bc:c5:37:e5:b4:47:
56:85:62:7e:46:be:c8:8c:d1:15:1c:b7:f2:c1:f1:
5a:1d:95:72:98:34:87:b7:18:ea:2e:dc:42:83:da:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:C8:A9:C2:C1:47:FB:A8:D9:92:EE:A7:79:AE:19:F5:4E:C6:1F
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e302e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6b:8e:88:59:33:fe:d8:4f:2a:b2:a1:ca:9e:00:f6:6c:12:
8b:fc:23:0c:eb:c5:22:09:86:ea:52:e1:f9:cb:8d:67:d1:59:
d2:df:4e:ae:3b:c2:fc:26:17:d8:81:b8:b8:62:6e:7e:b2:f9:
ef:b0:e1:1c:46:9c:14:87:4c:8e:f3:4e:40:3b:5d:2e:bd:81:
40:e1:18:ed:20:d5:08:73:48:0e:30:85:08:af:8f:ae:42:fd:
89:e1:c2:22:3e:30:32:82:64:fc:eb:57:2f:b6:89:5b:63:80:
16:df:1c:16:74:4b:be:19:79:21:c5:d8:c2:ec:0b:10:21:5e:
3b:55:6d:77:c3:2b:51:d6:59:18:43:f6:7a:aa:04:86:2e:11:
fb:e9:30:d7:88:95:cf:00:db:93:37:37:ff:9f:c9:44:5b:7b:
be:6c:05:4a:f1:1d:71:3f:a3:d4:8f:c0:2b:45:70:7d:ba:f0:
0b:a0:07:ea:72:f3:6d:d3:c6:00:f2:3e:b9:b0:4f:fd:2d:3b:
93:c3:55:2d:e6:3c:9d:81:04:d8:65:33:4e:93:32:4c:36:91:
90:56:48:21:cb:a1:34:1c:b1:f0:87:6b:bc:55:cb:2a:0a:92:
77:da:d8:5b:cd:fb:56:61:54:bf:7f:f4:6d:52:b5:ad:24:b9:
9b:0f:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:29 2025 by rpki-client