Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
File: 3138352e3133302e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0BS4WVTJCq/4oQCC3tdxTh3zqO7LG6dY2qqmJF2tXYo=
Subject key identifier: BA:E8:C0:1F:66:52:32:AF:58:73:20:2F:F9:3D:66:02:96:B4:86:7B
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1932FF8BDAEF936F12D9795B5A69968ED893363B
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
Signing time: Mon 24 Feb 2025 00:00:59 +0000
ROA not before: Sun 23 Feb 2025 23:55:59 +0000
ROA not after: Mon 23 Feb 2026 00:00:59 +0000
asID: 834
IP address blocks: 185.130.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:32:ff:8b:da:ef:93:6f:12:d9:79:5b:5a:69:96:8e:d8:93:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 23 23:55:59 2025 GMT
Not After : Feb 23 00:00:59 2026 GMT
Subject: CN=BAE8C01F665232AF5873202FF93D660296B4867B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:e8:60:07:56:25:1e:53:2a:36:87:5c:0b:
5e:b2:46:81:ae:e5:09:c3:50:d1:de:95:18:f1:d5:
f8:2d:a8:1c:bb:3c:a8:e0:94:d3:6b:d5:09:4d:b0:
b8:16:5e:9c:41:36:52:41:93:76:7d:4f:e1:c7:4a:
2f:61:ae:01:6e:5e:91:3f:ea:33:02:10:7f:f7:e1:
6e:17:af:81:fc:ed:e9:32:99:e1:c7:76:f3:f2:65:
5c:7b:f1:9e:72:3c:dd:b2:83:f0:ca:02:35:5f:ae:
70:fa:64:68:6c:b5:fa:f4:2f:ab:af:76:88:b1:54:
42:7f:d6:d2:69:c2:6a:f1:9c:b6:b2:c7:ff:e6:5a:
d3:ec:3a:1f:51:2d:cf:3e:99:cb:52:eb:9f:05:cb:
23:76:4b:51:52:85:84:7f:b2:8d:1a:1d:ff:ef:8b:
fa:7f:02:f8:25:31:e1:35:a5:81:10:76:7c:72:82:
41:ac:aa:0e:05:c7:e2:b1:63:d5:9f:95:ea:47:70:
dc:33:da:03:4b:9f:f7:67:c5:e9:4d:fe:bd:9f:63:
db:83:d6:86:4b:3a:29:98:a7:b2:27:a2:49:bb:01:
9e:e0:4b:cb:eb:90:c7:9b:d1:91:cb:a5:44:dc:8d:
97:81:cd:0c:b0:84:e1:36:a6:43:74:b1:27:23:be:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:C0:1F:66:52:32:AF:58:73:20:2F:F9:3D:66:02:96:B4:86:7B
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:51:27:dd:b6:76:ef:15:df:58:f4:4b:a6:03:60:dc:c4:f6:
fc:d4:73:fe:93:2d:fb:2e:80:38:ee:ac:3e:e1:e7:1e:4e:36:
e9:8e:be:6c:e0:d0:cf:d8:a9:0b:86:38:b0:44:e4:8f:fc:89:
59:34:e2:e7:25:6f:4c:a2:55:82:73:7d:03:48:cb:ae:1a:3e:
5d:9f:89:d4:df:ed:d5:06:bf:72:e8:69:d5:4d:4c:f5:28:70:
01:cb:13:7d:e3:bb:b7:e2:13:28:bf:65:98:a1:d1:7a:10:98:
1d:02:3b:0a:1d:a3:a4:b2:90:2d:32:dc:9f:ef:5f:91:66:81:
4d:54:76:f7:dc:05:55:e3:1c:81:b6:41:ce:5a:71:f6:cb:0c:
fe:cd:3f:d4:c6:d8:9d:d5:3f:9c:54:f9:42:10:73:b3:f1:9f:
87:2f:ab:5f:81:2b:6e:19:87:e5:db:35:ba:6c:37:7b:3f:7f:
ec:6e:af:59:f2:f9:af:73:c5:9d:40:a6:14:12:bc:6e:f3:f3:
d4:d3:54:82:db:0c:73:eb:d6:de:d6:51:74:9b:03:d7:e5:64:
e2:67:25:d6:87:3f:4d:5c:84:aa:2e:99:5c:8c:cc:b6:10:4b:
a4:ba:4e:19:1f:71:f4:b1:88:1c:e2:16:25:06:93:b1:64:22:
48:28:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:25 2025 by rpki-client