Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6M4rql/jLPyMJH99RQhwlAIUtisQSt2ksYHMzxq09Sg=
Subject key identifier: 32:78:66:75:E5:DD:5A:21:67:12:0D:D9:99:32:6A:60:17:76:9C:5A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 401A0BBCF3471BF7CD3FD96F73DC63CE4F465B22
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 136787
IP address blocks: 185.250.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1a:0b:bc:f3:47:1b:f7:cd:3f:d9:6f:73:dc:63:ce:4f:46:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=32786675E5DD5A2167120DD999326A6017769C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:a2:f7:ed:4c:d1:cc:aa:fc:cc:b2:9a:ba:
86:4f:b6:7e:20:70:77:19:f6:a7:4c:eb:13:10:7f:
d5:8e:97:42:8a:77:bc:0a:3b:56:06:0f:ce:39:c3:
9a:26:53:52:d3:7e:10:58:e3:8f:b5:35:44:07:42:
e8:16:4b:f0:02:a3:7e:fa:fc:21:79:d4:c3:17:dc:
b0:42:00:9f:95:e0:eb:ec:eb:3b:15:cc:6f:28:bd:
36:76:0b:1a:dc:31:50:1c:e6:54:4a:51:0e:1e:ee:
42:ae:e7:d9:7b:7d:f7:52:7a:e2:51:70:8b:63:1e:
9f:87:ae:8d:99:cb:d3:db:50:3b:65:ff:61:95:35:
cf:bd:71:85:73:33:3a:3b:67:ea:cc:a9:7c:fa:12:
ef:7a:dd:a9:c3:df:d5:64:2d:89:f2:d0:3f:d9:37:
45:a2:76:f6:6a:6c:8e:98:a7:5f:16:7b:de:df:20:
df:ca:fe:34:20:2f:ac:5a:52:20:38:46:68:a6:4a:
00:f7:ce:36:c6:d2:5f:19:ce:8b:01:d7:a7:cd:7e:
25:46:02:fe:10:3b:dc:1e:a1:67:13:22:e6:94:0e:
cd:44:16:28:15:48:60:42:de:48:2d:5e:63:a4:9f:
9c:7c:b5:cf:11:b2:77:8f:0f:8a:da:4c:d9:65:2f:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:66:75:E5:DD:5A:21:67:12:0D:D9:99:32:6A:60:17:76:9C:5A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.212.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1c:bb:73:3f:53:af:03:4a:e5:7a:79:4b:d2:a1:86:70:67:
54:94:ba:dd:0e:ac:f3:94:35:dc:8c:9c:3b:8d:b1:68:fa:41:
02:02:e1:d5:bb:87:0e:69:ac:5d:f2:cf:ec:f7:91:35:fd:c9:
c7:be:44:7d:2d:29:b7:88:b4:49:dc:5e:94:78:14:28:4f:89:
1c:b1:c4:20:a9:8d:65:ea:77:2c:83:04:6d:fc:15:ea:c5:5e:
d2:72:b6:10:c1:d0:85:61:73:61:7b:ad:92:5d:5d:99:03:7a:
61:0c:dc:5b:bd:0d:68:64:07:c9:d4:07:f6:3c:52:46:5b:86:
d3:43:7c:30:24:05:e1:87:c2:5b:ba:cd:75:c1:d8:81:ac:78:
09:a0:15:3f:4e:3c:68:2b:eb:c5:79:cc:d9:95:99:8b:50:4a:
14:d5:1b:1d:2d:a3:32:b2:3e:35:66:56:4b:81:99:4b:30:dd:
88:80:96:6a:78:e1:ed:1e:31:a2:74:25:a8:6e:47:f7:2c:79:
41:f3:2c:fc:f6:c2:00:cc:93:c4:fb:31:1b:dc:e8:cc:78:44:
a6:6d:cb:e5:5f:10:af:4f:3f:9c:8f:7f:ab:c4:f0:dd:bc:13:
ac:98:63:2d:1d:df:17:83:5f:28:06:16:7e:14:25:75:82:d2:
93:8a:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:05:50 2025 by rpki-client