Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20383334.roa
File: 3137382e3234382e37342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9USYip6Ge1wdGFRu4fuxUX5LVOrfAvQ+fpoosZl+dvc=
Subject key identifier: 30:3B:6F:15:81:44:54:F0:7C:0A:44:B4:F6:DC:FA:45:03:0C:BF:20
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 6420A2F3C864BFADB748E807F2DC8EC4A18594D8
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20383334.roa
Signing time: Tue 18 Feb 2025 17:34:34 +0000
ROA not before: Tue 18 Feb 2025 17:29:34 +0000
ROA not after: Tue 17 Feb 2026 17:34:34 +0000
asID: 834
IP address blocks: 178.248.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:20:a2:f3:c8:64:bf:ad:b7:48:e8:07:f2:dc:8e:c4:a1:85:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:29:34 2025 GMT
Not After : Feb 17 17:34:34 2026 GMT
Subject: CN=303B6F15814454F07C0A44B4F6DCFA45030CBF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:e8:1b:4c:27:e4:3e:bd:fa:07:26:56:83:
44:cc:f5:b1:16:0b:ad:16:fe:54:54:9d:cc:4d:1b:
dc:f4:bb:4a:c6:14:d9:82:16:5f:ad:1e:1b:01:ad:
9e:35:60:2f:9a:15:0c:72:27:b3:01:23:82:cf:23:
32:3c:eb:19:19:6d:ba:81:39:f6:9a:c9:8e:b1:54:
f5:06:83:84:a6:f8:7c:64:9f:16:a1:e4:63:6e:dd:
94:f0:35:4b:ef:68:5c:33:6d:48:c6:1b:a9:88:7d:
cd:da:9e:f0:e3:16:ba:36:92:7a:88:ef:9f:09:eb:
56:84:ee:49:18:7e:63:c2:11:84:51:f6:28:7f:ad:
ab:0c:91:1f:0c:34:58:03:b5:50:cd:30:6b:ce:f1:
44:c7:c9:51:7f:f6:50:13:ac:bb:62:40:86:6e:81:
09:78:74:25:ea:7b:24:49:7e:e9:e4:11:a3:6e:95:
e2:bc:a4:58:bb:14:4c:21:23:19:55:34:a2:82:93:
a0:ca:25:c8:93:29:2c:58:ea:98:4c:54:d1:e6:00:
12:32:5c:c3:60:d5:97:35:69:28:0d:53:90:5b:d1:
6d:43:d3:15:8b:1c:c1:76:94:32:24:1a:78:0c:58:
71:5b:32:76:1c:79:43:78:b3:e9:0f:4b:0a:25:46:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:6F:15:81:44:54:F0:7C:0A:44:B4:F6:DC:FA:45:03:0C:BF:20
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:40:da:4b:86:6d:4b:55:f2:3e:f6:bb:00:35:11:be:8b:07:
ec:2f:79:b4:8d:e2:9e:ee:52:ee:64:7e:56:d2:96:49:c4:94:
eb:66:d8:cc:37:93:90:3e:47:04:70:a8:66:16:7d:c6:f3:ee:
b3:4c:4c:e7:5d:62:8d:5f:73:07:fb:be:df:b1:ce:d0:f1:07:
07:4f:37:e4:97:34:be:90:f0:12:cd:c6:aa:36:39:b5:22:36:
4f:4f:6c:31:4b:ab:4d:31:c8:d4:39:65:a0:9e:b9:07:cd:5f:
9f:69:1d:40:7d:ea:10:ec:b0:b3:f7:49:cf:ce:fa:f1:54:42:
31:d5:79:f1:65:5a:6c:8c:f2:b9:4a:76:c8:e0:6c:8c:6c:b5:
ed:63:a4:b6:96:6c:9b:30:90:c3:61:11:0f:78:41:35:fb:e8:
1d:bc:96:4f:f3:c9:dd:df:fc:b2:18:5e:75:a8:d8:b6:b4:5e:
c3:38:7d:29:c0:bf:4a:ba:0f:57:27:1d:e9:b1:ba:90:87:55:
40:e4:31:fa:bc:5b:47:9b:4b:18:2e:d5:a4:b8:d9:7d:5c:6d:
4e:7a:5a:7a:56:41:70:ad:31:64:1e:e9:76:d5:38:b6:fe:d8:
5b:7a:58:1d:9f:78:c1:71:c8:cd:c6:9f:62:5e:11:ee:11:26:
7f:1f:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:51 2025 by rpki-client