Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa
File: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (raw, json)
Hash identifier: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=
Subject key identifier: C9:B4:CA:AD:2F:B4:1A:32:82:15:B7:D6:EB:68:F3:E4:F0:3B:8F:E6
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 18B2E4182C472C1627E18D0455E74AB706024FB1
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa
Signing time: Mon 24 Feb 2025 03:04:54 +0000
ROA not before: Mon 24 Feb 2025 02:59:54 +0000
ROA not after: Mon 23 Feb 2026 03:04:54 +0000
asID: 11878
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b2:e4:18:2c:47:2c:16:27:e1:8d:04:55:e7:4a:b7:06:02:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 24 02:59:54 2025 GMT
Not After : Feb 23 03:04:54 2026 GMT
Subject: CN=C9B4CAAD2FB41A328215B7D6EB68F3E4F03B8FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:6b:ed:ce:d9:4f:39:c5:97:17:58:44:70:
2d:2c:19:9e:ea:02:00:f1:59:ce:14:90:d4:08:a6:
05:75:78:95:ef:97:5a:f6:4f:ae:6c:e4:02:e2:95:
c9:87:f1:6c:f6:ab:15:9e:45:4d:0d:ed:c8:ff:94:
63:54:a4:9a:23:34:19:a7:a6:bc:aa:b6:e5:a0:8b:
f7:53:5e:4c:44:7f:1c:32:61:8d:66:33:55:d1:5c:
b7:d6:5f:a9:a7:6b:0e:cf:3c:36:c8:da:07:e5:18:
07:a0:3f:22:70:db:a7:3f:fa:d1:d8:df:e7:11:c5:
75:16:74:ef:26:05:a6:8c:b6:27:cd:4f:41:aa:6a:
92:56:93:df:1f:a1:16:c6:a1:84:09:54:00:ac:f8:
9e:21:cb:e2:80:11:74:ac:8c:8c:f7:d2:98:a7:0f:
c4:3e:ac:cf:fa:09:b5:41:14:c0:a3:3b:6d:a3:e4:
1b:ab:02:52:d8:6c:94:1d:a9:0f:2e:43:8e:6d:c3:
0d:c0:4c:bb:20:77:56:e6:ae:36:37:87:9d:e1:6e:
ac:39:04:e2:b0:b3:ed:26:2b:a1:b1:47:80:1b:38:
1e:3b:5c:73:6e:52:39:8c:0f:13:51:5d:ba:8f:ea:
63:d9:7d:bb:b8:bb:7c:93:1b:ff:e0:b6:6a:29:e6:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:CA:AD:2F:B4:1A:32:82:15:B7:D6:EB:68:F3:E4:F0:3B:8F:E6
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b7:81:58:bd:d4:38:fb:17:09:c6:16:b8:aa:85:2f:40:bc:
80:5b:60:76:76:0c:1f:c2:f4:14:3e:55:f8:68:5b:d6:f6:3e:
ba:e7:fc:17:7c:bc:e5:4b:b6:8f:c5:85:09:f4:40:8e:0b:a1:
88:66:8d:22:a3:96:3a:ba:1c:b6:b6:88:12:87:69:08:11:5d:
9a:18:2b:42:cd:62:73:11:a7:44:b6:fc:3e:80:1e:8d:d8:5a:
1d:bc:77:d9:63:05:bb:94:23:d6:e7:fc:bb:ee:b2:48:e8:49:
89:71:cc:e0:30:9a:90:e0:d6:a7:af:0e:dd:e3:d7:a1:a5:1a:
98:fd:0d:f7:29:a4:3d:bb:e6:ee:aa:93:2c:b8:60:61:4b:44:
09:df:00:31:87:b5:29:5e:21:48:3d:42:7e:de:7b:9f:b4:91:
db:4d:e2:38:60:4e:63:4b:f0:74:ae:04:5e:ac:f1:4a:12:a7:
ec:b7:f7:39:d3:99:ea:72:d3:2d:b8:45:d8:be:03:01:48:ae:
25:53:70:5a:89:7b:e4:4d:3d:82:c3:73:30:01:25:7c:d3:cc:
ea:ab:3e:76:05:20:9e:12:b4:d9:09:60:9d:e5:77:00:03:bb:
49:af:50:67:dd:ae:b5:75:b4:b5:9d:91:12:63:57:84:fa:f9:
33:02:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:12 2025 by rpki-client