Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa
File: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=
Subject key identifier: 2A:DE:BA:2E:70:D7:01:0F:AE:74:C4:04:7D:F4:F7:DA:B7:9F:82:D3
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2FFAD316F2BA7504920304CC7C139B977CDB857F
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa
Signing time: Tue 11 Feb 2025 01:53:44 +0000
ROA not before: Tue 11 Feb 2025 01:48:44 +0000
ROA not after: Tue 10 Feb 2026 01:53:44 +0000
asID: 22427
IP address blocks: 185.213.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fa:d3:16:f2:ba:75:04:92:03:04:cc:7c:13:9b:97:7c:db:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Feb 11 01:48:44 2025 GMT
Not After : Feb 10 01:53:44 2026 GMT
Subject: CN=2ADEBA2E70D7010FAE74C4047DF4F7DAB79F82D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:83:a0:46:fd:be:55:d5:c0:78:e4:fa:93:
b4:f1:0f:3c:6b:c0:66:8a:65:06:f0:22:64:e1:65:
d2:56:5b:e1:7c:5b:d1:20:aa:11:01:0f:dc:fa:a2:
10:64:e4:98:64:29:55:d4:db:83:4c:2c:e2:9a:1a:
09:2b:40:da:f4:cc:09:45:21:b2:66:22:1b:72:0d:
d8:53:9b:25:0c:60:d0:f1:de:98:1f:40:34:3e:aa:
1d:2d:93:f4:a4:5c:26:7a:c8:b9:27:44:14:37:d4:
09:c0:5a:9e:3b:9f:95:f7:a9:55:5e:f1:a3:ba:e0:
9b:31:52:07:15:58:32:d1:da:cf:c9:a6:f5:49:81:
b0:3f:24:a5:82:9e:f4:03:47:1a:41:3f:2a:55:09:
94:8e:81:06:e7:39:8f:01:8e:5f:2a:b4:09:e8:dc:
57:40:d0:83:96:1f:be:92:f3:dd:3d:25:db:13:d9:
4e:21:7f:9f:ec:33:a3:f6:81:6f:68:6c:c4:e0:bc:
49:c2:38:22:2a:cf:55:cc:e1:a9:8c:a7:7e:af:a8:
06:6d:3f:17:a2:98:89:8b:59:10:c2:78:db:34:b1:
51:de:db:70:c4:72:d9:c4:f2:24:c5:57:1e:75:4d:
7b:0f:4a:fe:d2:34:65:de:a0:20:a9:bc:59:b0:11:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:BA:2E:70:D7:01:0F:AE:74:C4:04:7D:F4:F7:DA:B7:9F:82:D3
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.242.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0e:cc:94:4b:fb:f7:84:9f:64:30:6e:2c:44:53:cc:b4:e8:
65:5f:62:e6:bd:22:b5:92:c4:0d:27:9e:37:4d:0c:b9:d7:28:
8d:e4:03:5c:b3:cf:c2:68:22:c6:b0:bc:18:b5:4e:1b:3d:74:
be:8c:1e:d0:5d:41:da:99:bf:57:b0:fb:9d:65:04:f2:b4:51:
8a:f6:af:9b:8f:bd:3d:07:b8:16:e6:b8:4f:1e:de:b7:7b:51:
6a:c2:a8:a4:1a:20:3c:db:ba:bc:99:9f:d7:59:95:32:59:ad:
a5:8a:62:4f:86:ff:22:fa:ae:d0:4b:a0:1e:c3:96:95:81:c0:
88:10:f3:c9:75:a6:dd:98:9b:3b:d3:81:8a:b3:b1:d7:1c:d8:
a0:f4:79:dd:16:55:48:50:47:c3:05:e7:5f:01:c4:b3:f4:09:
95:7a:2f:48:9f:dd:8d:c2:6e:0d:d8:3b:84:a6:81:da:bd:fc:
45:7c:7a:81:11:f3:52:af:12:ef:07:f8:73:e3:1a:c4:c3:83:
e2:e1:9a:39:3e:3b:ff:4b:06:52:fe:89:33:5b:71:c1:98:1f:
16:88:6a:15:06:bc:87:9f:cd:91:36:c1:85:57:be:50:f7:02:
5b:b6:1e:85:67:d2:6c:7a:2c:3a:64:85:d1:84:c2:fc:fa:f1:
93:ee:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:59 2025 by rpki-client