Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa
File: 3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: EB7iz5mRHr/ukPt6ZjYM6SeRHOBZVi8vYUmbvB6tXOk=
Subject key identifier: 3C:F3:98:09:8E:B3:8F:01:02:6A:42:F6:88:80:4D:CA:B9:0D:02:63
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 14941C9B9843D597F3092FA84AC695A8C4B00815
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa
Signing time: Fri 27 Dec 2024 11:47:23 +0000
ROA not before: Fri 27 Dec 2024 11:42:23 +0000
ROA not after: Fri 26 Dec 2025 11:47:23 +0000
asID: 206283
IP address blocks: 185.243.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:94:1c:9b:98:43:d5:97:f3:09:2f:a8:4a:c6:95:a8:c4:b0:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:23 2024 GMT
Not After : Dec 26 11:47:23 2025 GMT
Subject: CN=3CF398098EB38F01026A42F688804DCAB90D0263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:84:8d:30:0b:8d:8a:dc:76:fc:cd:f7:7d:
1a:25:5d:83:a5:ea:fe:d6:fb:26:9f:c4:ce:16:f2:
6e:8c:0a:83:df:be:b2:78:e7:0c:70:ae:d0:04:ff:
33:e3:d9:90:e1:ef:e5:ed:34:75:68:65:c1:00:6c:
c0:ca:67:b8:6b:a4:80:83:34:f0:c2:5c:10:66:f7:
7f:e4:c2:2a:6d:60:7f:39:9b:69:35:26:c0:20:29:
30:d5:0d:2d:34:9e:cd:c9:79:69:f8:cb:51:f9:25:
e3:ca:36:89:c0:ee:44:b8:e9:09:18:d1:79:e6:ff:
2a:1d:61:e7:30:56:ee:2d:bc:15:00:dc:88:80:63:
df:69:7b:8b:f8:e3:53:1d:2f:8f:92:1a:5b:55:0c:
17:be:92:e1:a6:c9:c6:00:13:34:34:4f:e7:2d:fa:
ec:e4:09:64:be:a6:1d:b0:ec:42:2c:b8:af:0c:a2:
f4:94:16:57:d1:9e:40:f8:e2:80:07:4c:0b:5f:e1:
49:a9:b7:af:9a:45:27:af:fd:30:9f:f1:e1:82:f8:
59:64:fc:5a:2b:7b:2c:41:ed:a8:88:6f:ae:89:38:
29:51:2f:f4:d1:14:4c:bd:38:b1:01:86:32:87:55:
21:28:a9:b7:e4:bf:d3:b7:f8:7d:c5:9f:d9:26:28:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:98:09:8E:B3:8F:01:02:6A:42:F6:88:80:4D:CA:B9:0D:02:63
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:97:02:41:d8:3e:e7:4e:ab:44:27:21:c5:ea:bd:ae:ee:f7:
1d:90:89:c6:ca:04:f9:22:7b:04:0d:ac:7f:f9:b1:1c:bb:18:
52:c1:30:d6:c9:17:de:78:b8:4f:a2:60:c0:2a:56:4d:10:24:
9f:3d:1b:02:34:83:91:60:2c:f9:92:c9:87:78:82:65:ab:f8:
d8:61:03:c5:08:11:ef:92:83:94:81:89:55:7b:d6:39:81:a0:
07:62:1a:c1:dd:8e:f2:b8:47:ab:14:d5:4c:75:9c:7a:08:c8:
62:79:3d:5f:2b:29:cb:31:11:1b:60:df:26:95:8b:af:8f:d4:
7a:cb:fe:6c:d5:88:d4:68:aa:61:53:b6:3c:0f:c8:0c:e1:c6:
f2:17:43:91:bb:f7:13:05:8c:f4:b8:84:de:ff:6b:8f:2c:d1:
8b:3b:c5:4e:26:9a:dc:37:9a:94:03:77:2e:22:72:62:03:b0:
2d:54:23:70:80:03:81:fd:96:cc:12:42:7e:79:03:e6:a6:32:
9c:e9:ac:64:b1:f9:03:77:57:63:f9:ba:42:e8:72:1a:8f:1b:
f5:d1:73:76:ff:fe:d9:4a:b1:f7:7a:67:86:a4:0c:17:0b:44:
33:36:ad:cc:6c:af:54:97:28:79:ef:d3:18:92:fe:c5:c0:93:
c2:fc:4f:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:50:54 2025 by rpki-client