Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e203631333137.roa
File: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=
Subject key identifier: C0:51:51:E3:1A:97:0A:11:C0:88:2C:6E:A5:7C:4C:57:B1:0B:3E:FB
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 2BF681F2D97F93CB78B8BD5270B40D0DED792FB6
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e203631333137.roa
Signing time: Tue 24 Dec 2024 06:53:48 +0000
ROA not before: Tue 24 Dec 2024 06:48:48 +0000
ROA not after: Tue 23 Dec 2025 06:53:48 +0000
asID: 61317
IP address blocks: 185.13.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f6:81:f2:d9:7f:93:cb:78:b8:bd:52:70:b4:0d:0d:ed:79:2f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Dec 24 06:48:48 2024 GMT
Not After : Dec 23 06:53:48 2025 GMT
Subject: CN=C05151E31A970A11C0882C6EA57C4C57B10B3EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:2c:9e:1d:6e:63:e7:41:56:c4:38:ea:74:
a8:5e:eb:73:8a:7d:92:49:72:7a:b1:c5:eb:91:04:
9a:e3:93:bc:6a:4e:e0:d7:f2:5c:6d:f1:49:67:4d:
60:79:e3:ac:3b:f2:23:a4:1d:90:18:75:9a:b4:0f:
39:f7:5b:68:8d:6a:86:3d:44:44:62:6c:eb:62:6a:
31:7e:15:59:ac:6c:ad:74:cc:d2:5c:7b:b1:5a:e9:
cc:e7:df:2b:46:bb:89:f6:c1:65:19:ed:95:bc:76:
63:97:9e:f8:81:b1:51:23:ad:8d:a7:a9:32:ce:b4:
82:e5:02:c0:ed:7c:93:b8:92:c2:d4:dc:75:3a:60:
d4:de:63:94:b0:71:33:bf:6a:70:f2:d8:56:e8:25:
b1:12:0b:14:a4:8c:e7:66:31:34:7f:7d:73:e0:e2:
87:47:90:13:f3:81:d2:f4:4e:4c:16:c2:90:62:d2:
21:02:9b:d0:18:37:a7:1b:f9:7f:a0:00:be:f3:02:
49:09:b4:ce:9a:38:b7:ae:50:92:44:2e:d6:28:82:
94:43:1c:6f:83:55:c8:f4:20:1f:b7:bb:6c:9c:d5:
03:80:9f:f8:3d:80:a6:f5:74:45:c9:8b:87:63:43:
08:08:23:2f:20:ff:8f:32:af:b6:c1:90:97:39:82:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:51:51:E3:1A:97:0A:11:C0:88:2C:6E:A5:7C:4C:57:B1:0B:3E:FB
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cc:94:24:d1:00:d2:fe:fd:24:92:ed:78:60:ec:21:44:1b:
d3:ea:08:fd:b7:9d:ff:a0:e7:fe:4e:4c:f5:18:fc:c6:6a:ce:
e2:42:12:e0:bf:4f:c7:3b:57:88:1f:87:2a:55:7e:89:db:e7:
45:3c:fa:ce:13:ef:f0:f0:c4:bd:f0:29:e1:69:b0:f6:5e:eb:
68:20:48:0a:07:0d:de:5e:0b:58:ad:40:21:83:92:0a:2c:92:
6d:d4:c5:e4:8f:40:3c:02:cd:76:22:81:d5:1d:1e:88:c5:7e:
e3:4f:7f:9c:af:1f:81:cc:71:89:7a:d2:6c:34:2c:d1:ba:bc:
65:86:f4:ae:72:d1:b7:e5:ae:67:53:47:bb:20:98:d4:94:4a:
e4:8c:c1:1b:f4:a0:bd:f8:e6:57:9f:34:83:05:df:eb:32:50:
ef:e6:63:d0:bb:0f:e7:6a:42:f8:8e:ac:e2:7e:f4:9e:90:97:
cf:e4:5d:94:e8:d9:e0:01:5f:5a:32:3e:17:cc:8c:8e:c9:26:
ff:b7:95:9c:82:f2:1c:cc:dd:05:b2:94:8f:97:50:32:06:a4:
76:10:35:7e:94:fa:6b:37:92:fa:93:7e:e8:a2:62:81:19:5c:
7c:d4:a6:2f:37:cc:1b:0c:7f:63:e2:08:d1:25:4c:fc:66:51:
a7:79:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:17 2025 by rpki-client