Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=
Subject key identifier: 18:77:1A:F3:BA:1E:97:20:FA:40:CE:48:C0:00:16:96:39:F5:92:38
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 6EB73219303B6179C75C2DF2B1B2B2BA1A699529
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa
Signing time: Mon 17 Mar 2025 06:01:20 +0000
ROA not before: Mon 17 Mar 2025 05:56:20 +0000
ROA not after: Mon 16 Mar 2026 06:01:20 +0000
asID: 197537
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b7:32:19:30:3b:61:79:c7:5c:2d:f2:b1:b2:b2:ba:1a:69:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Mar 17 05:56:20 2025 GMT
Not After : Mar 16 06:01:20 2026 GMT
Subject: CN=18771AF3BA1E9720FA40CE48C000169639F59238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:8e:d4:79:47:06:f4:5b:34:f6:32:37:0b:
57:b3:73:59:c7:de:26:2f:9c:4e:e5:fa:7d:6d:9c:
b5:fd:61:73:44:da:cb:e9:cc:10:36:e8:f3:5f:39:
72:d8:7e:ee:d3:91:46:e8:36:f3:fd:37:e2:0a:23:
96:aa:a8:4f:d8:42:41:58:f2:0c:84:17:00:4b:d0:
49:71:f9:0f:52:3e:6d:ec:8f:e3:19:d0:70:d0:33:
3b:72:5f:28:f7:90:ad:11:ae:d1:39:22:94:15:f9:
af:e2:d7:91:82:cc:6f:bd:3b:1f:6f:ce:46:c3:2e:
73:af:b1:18:ad:30:2e:66:69:74:df:b4:dc:c2:7f:
8d:02:91:ca:2d:d2:6d:18:83:cb:c9:75:c5:8c:0d:
41:eb:55:bc:e1:6e:9c:07:34:2a:62:5e:04:91:eb:
fc:5d:e0:9f:da:50:11:f8:30:6b:04:5b:86:33:79:
3c:2b:c0:29:1b:fc:24:7c:a3:56:5a:c3:f3:a8:32:
3e:e3:aa:34:90:67:ad:6d:7a:8b:0b:d2:27:10:c2:
63:c8:7d:02:88:a3:25:10:c7:9f:60:5d:1b:eb:b6:
60:53:5c:7e:79:8e:63:1b:6f:2b:c0:ee:c1:de:6f:
e5:3a:ae:9f:ca:1c:42:cc:28:d2:82:67:8f:7d:59:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:1A:F3:BA:1E:97:20:FA:40:CE:48:C0:00:16:96:39:F5:92:38
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
32:75:b1:b5:3a:ba:5f:07:f9:63:d7:c8:01:29:2f:fa:ab:4e:
e6:d8:b2:41:85:15:a5:50:40:05:30:3e:98:48:1c:cf:80:58:
b7:03:76:a9:3e:6d:a0:50:f0:46:7c:2a:64:c7:a0:74:69:36:
17:38:30:ce:8a:24:5d:7c:19:b4:8d:99:7d:ff:36:6b:0e:b3:
58:6a:50:da:d7:5d:eb:f6:75:a0:4f:9e:9a:e5:e9:5a:11:7d:
a9:e8:e5:92:15:81:e0:5d:20:38:bf:c1:58:fa:4d:64:52:d7:
04:90:7d:d9:ff:82:4b:eb:4a:28:7e:a5:ee:17:83:27:f9:92:
41:e8:a0:3d:76:d8:b9:93:48:12:ba:e2:4d:23:fb:86:e0:ee:
94:fb:95:f3:04:6e:ee:a7:aa:95:fd:9e:d6:e5:a3:bd:3c:18:
09:d6:2c:53:6c:3c:2b:00:79:c8:a3:43:be:ac:b2:07:c3:0e:
bc:95:c6:3d:01:24:a1:63:06:46:ec:2d:80:81:e5:d9:f9:93:
08:a9:08:b1:8f:e5:7d:be:7a:90:72:4a:b6:81:eb:0e:82:f1:
16:f0:58:08:95:f7:e2:ee:9a:ca:ab:38:2e:4f:13:4f:3e:24:
cf:02:5e:be:79:9d:8c:7f:7f:d5:58:ff:41:d5:79:ba:2b:fa:
b0:e9:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:16 2025 by rpki-client