Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa
File: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (raw, json)
Hash identifier: Jwdi//fPxewEqnA7O6IEmtLIG4RVeyoi6OUkCB8cEJ4=
Subject key identifier: 5B:89:3E:C3:6B:59:14:8C:23:28:03:CB:6B:47:BA:7E:01:D1:B9:08
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 71A1951DF560CE672A574ACB56F248BCE9CECA3D
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa
Signing time: Mon 02 Dec 2024 16:56:59 +0000
ROA not before: Mon 02 Dec 2024 16:51:59 +0000
ROA not after: Mon 01 Dec 2025 16:56:59 +0000
asID: 51847
IP address blocks: 185.2.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a1:95:1d:f5:60:ce:67:2a:57:4a:cb:56:f2:48:bc:e9:ce:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Dec 2 16:51:59 2024 GMT
Not After : Dec 1 16:56:59 2025 GMT
Subject: CN=5B893EC36B59148C232803CB6B47BA7E01D1B908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:4e:e6:31:d8:d1:0b:b7:9f:25:3e:d7:c7:
06:0c:5a:1d:d5:f1:33:9b:18:19:7e:9e:d4:b3:7d:
bd:e4:db:2c:eb:84:88:7f:da:79:8e:2a:8a:c3:93:
11:6c:da:8b:9f:fb:c0:c2:a7:f1:29:72:01:df:70:
eb:85:72:f2:1d:4f:5f:84:84:6d:58:f1:89:e4:18:
da:b6:8d:1d:e0:b3:8c:75:55:79:b3:76:31:57:9a:
9f:8b:3b:03:34:39:c5:37:46:21:90:69:ed:6e:21:
83:25:a9:8c:10:c1:83:ea:4e:76:bf:8d:27:95:47:
7a:35:21:e2:6a:71:f1:85:48:7a:78:c1:b7:7a:6b:
ef:3c:e1:32:a5:7e:03:d1:f6:ee:d2:f8:f1:40:8e:
c7:c3:73:bc:7e:0c:b3:8b:14:64:55:55:48:f0:ac:
42:2d:3b:db:47:e3:25:c9:4d:0b:a1:d5:9c:d1:a9:
1e:2b:c9:b5:89:7a:32:2e:22:a1:3a:d7:cd:97:da:
fb:22:f7:76:8f:be:3f:75:35:8c:0d:d5:b5:3b:4f:
e5:80:dd:b1:7b:77:5d:98:b5:ad:6f:a4:2c:c6:06:
54:74:88:29:b2:e6:58:f6:43:57:b4:4a:9b:65:65:
0b:20:f8:1e:1f:5a:40:c8:9d:7a:4b:c0:69:eb:a5:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:3E:C3:6B:59:14:8C:23:28:03:CB:6B:47:BA:7E:01:D1:B9:08
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
90:44:24:55:6d:d5:75:04:2d:d1:fc:12:09:b1:2f:c8:32:42:
f6:d8:0c:68:da:9d:c2:e3:50:57:d7:e1:c5:c5:50:02:82:1a:
e1:a5:26:3c:35:16:ee:78:b6:41:f4:12:2b:61:a7:7a:fa:b9:
cc:57:3b:2f:49:c1:63:e4:b3:16:8c:7d:4f:55:98:f5:61:db:
13:f0:49:8f:80:f6:a6:62:14:f3:6f:fe:fd:8e:86:3c:ef:e2:
6d:54:08:04:dd:9a:8b:58:0a:87:84:2a:80:86:69:98:28:1c:
20:b8:b2:f6:07:ac:23:20:46:42:a6:95:17:26:30:10:76:58:
b6:37:43:98:79:fb:12:af:79:a8:5e:18:17:08:82:63:ec:c1:
9b:a7:42:da:1d:c0:01:af:90:d7:de:9c:8c:6f:ac:e3:de:51:
ca:8a:41:43:5c:da:46:6a:61:a1:d6:9b:de:78:b9:9b:99:38:
d4:b0:83:f5:88:4c:8b:0e:59:bf:74:04:34:d3:b3:89:e3:04:
f6:2e:fe:1d:06:eb:c5:37:e2:a3:74:5e:30:a4:e2:27:31:e4:
3a:61:61:e0:1e:a4:31:c1:dc:e7:28:53:89:4f:9b:d1:21:db:
0a:ee:05:88:1f:d4:73:61:06:a8:69:b4:6d:5c:b0:b1:c6:2a:
aa:eb:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:30 2025 by rpki-client