Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa
File: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=
Subject key identifier: AA:E1:9D:79:0D:B4:B4:43:E9:63:76:29:48:09:A9:7D:71:DB:2C:D9
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 0C844F9487E92C79C313BE6B878EBFD8A24CBF08
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa
Signing time: Wed 05 Mar 2025 13:24:34 +0000
ROA not before: Wed 05 Mar 2025 13:19:34 +0000
ROA not after: Wed 04 Mar 2026 13:24:34 +0000
asID: 209181
IP address blocks: 178.248.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:84:4f:94:87:e9:2c:79:c3:13:be:6b:87:8e:bf:d8:a2:4c:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Mar 5 13:19:34 2025 GMT
Not After : Mar 4 13:24:34 2026 GMT
Subject: CN=AAE19D790DB4B443E96376294809A97D71DB2CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:d3:15:e1:98:79:96:7f:36:1f:7b:79:06:
de:67:0a:31:dc:9b:44:c8:3f:5c:5f:e9:8e:3a:8c:
8e:c7:06:ae:19:13:b6:91:8e:b0:d9:67:26:fd:ca:
c1:bd:3e:60:56:bd:fa:00:b4:1d:d6:c7:e4:f4:c2:
75:f1:ff:2a:e6:5b:b3:68:8f:2f:10:55:a4:d1:a8:
aa:f2:f4:4d:01:bb:f7:09:a2:75:dc:e1:5b:f0:59:
f1:ea:ee:43:56:41:73:0f:6b:d3:46:6e:d9:06:3e:
11:c8:a3:00:2a:19:63:e7:6a:f5:01:bb:01:88:fd:
46:6c:cc:b2:df:f5:8d:eb:a2:7b:64:9e:27:1e:a9:
9a:72:0c:6a:a4:9d:e0:10:17:62:30:05:22:1d:12:
00:d0:c2:2c:5b:2e:a3:54:28:3b:83:be:c4:75:7f:
62:7a:a9:77:97:97:63:5f:db:7d:be:c3:96:55:ab:
d7:59:86:4b:19:7a:cf:c1:7c:84:37:b6:a5:8c:12:
6e:58:d9:b6:c0:73:a4:5b:d7:4e:cf:61:1d:df:a4:
21:f7:4d:bd:12:00:30:53:1a:ce:35:ee:db:c0:44:
c2:4f:fc:85:4a:94:3b:43:20:11:65:ac:02:92:be:
fa:d9:af:85:b4:cc:f1:34:a9:a7:0c:6e:4e:84:d8:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:9D:79:0D:B4:B4:43:E9:63:76:29:48:09:A9:7D:71:DB:2C:D9
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
07:99:b4:a2:39:22:50:37:52:70:ec:2a:e9:ec:68:cb:0e:e0:
f3:8f:b5:ef:4f:c0:c7:14:72:a1:32:e0:51:28:51:9d:d0:70:
c9:14:16:b7:13:71:af:75:37:12:42:60:c1:f7:06:0f:58:1e:
74:2e:b6:8e:7b:1d:49:49:b1:28:cf:9a:a2:d2:1a:52:47:b2:
25:13:72:83:e4:98:84:9c:e2:0a:8d:6b:cb:38:83:41:05:6f:
07:e8:8a:f3:97:46:fd:b6:62:82:f8:75:db:16:0e:d4:f0:2c:
85:31:09:45:33:6f:ee:0b:b4:6d:00:b0:24:33:37:9c:74:e9:
7a:11:b3:35:9e:93:cf:6d:74:de:77:e2:34:a9:a7:47:dd:95:
eb:f8:a0:10:12:e1:c2:00:9b:48:c0:41:39:b7:d7:9b:20:38:
ba:03:aa:8f:2b:be:39:59:41:6c:3b:57:34:09:5a:a6:48:fd:
a5:e5:92:47:81:4b:87:b0:96:f0:9d:ed:63:65:22:ac:32:8b:
11:9a:15:f6:54:33:62:bb:d6:13:e5:52:14:e5:b9:50:50:cd:
c3:89:f7:b6:b3:c0:3e:3d:c9:08:47:5c:b8:c2:8f:55:5e:f7:
1b:80:44:bb:80:5a:3d:c7:bc:8b:d9:fa:ba:af:ee:ee:a7:61:
21:a6:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:37 2025 by rpki-client