Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e203432333636.roa
File: 3138352e3235302e3231352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 6jiCyQcTmyW+X6ku1BfFn9CF3oP3lUCTpKOijtKeUtE=
Subject key identifier: 94:18:13:D4:F7:5F:62:54:33:16:DA:75:C7:24:AD:B2:23:20:F5:9C
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 1946469F59CF294EB87D8472873EC03377AD960A
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:21:34 +0000
ROA not before: Mon 17 Apr 2023 11:16:34 +0000
ROA not after: Mon 15 Apr 2024 11:21:34 +0000
asID: 42366
IP address blocks: 185.250.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:46:46:9f:59:cf:29:4e:b8:7d:84:72:87:3e:c0:33:77:ad:96:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:16:34 2023 GMT
Not After : Apr 15 11:21:34 2024 GMT
Subject: CN=941813D4F75F62543316DA75C724ADB22320F59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:71:51:f1:d0:7d:9a:19:d3:36:ae:67:e5:
9a:85:7a:18:6f:2b:c8:bd:56:7d:f8:9f:11:94:c5:
85:e4:f8:82:60:c8:7c:82:bb:ff:8e:87:88:7d:f8:
75:f0:a3:fc:64:e1:4c:6c:35:b9:ad:62:0c:58:7f:
56:6d:d3:27:86:0e:5e:f7:1e:47:b1:2c:d2:15:ac:
9c:72:59:3a:21:f2:bc:b2:3f:b8:dd:96:a2:80:eb:
14:84:85:2b:db:0e:8a:b0:ff:d0:02:3e:4f:aa:39:
01:59:14:aa:33:95:13:9b:95:f5:46:2d:e8:60:34:
9f:40:e2:5b:a2:cb:67:87:68:ad:27:be:95:a1:ee:
49:39:ba:1d:18:54:bb:db:e2:fa:c1:a3:80:b1:3a:
a1:e5:dc:f2:4b:f1:3e:4f:00:ff:0e:4b:25:1f:9d:
77:ef:d0:5e:b9:60:58:fb:4d:c9:6e:51:e2:8b:32:
fe:e8:ca:67:71:d4:cf:c8:03:c6:00:30:14:5f:2d:
85:38:3a:95:9c:e6:06:4c:9f:21:23:1f:47:a7:42:
e1:03:42:f2:13:23:12:8e:31:85:a8:56:4e:24:dd:
e7:1a:22:73:13:da:cd:ca:fd:30:bd:7c:43:b1:d0:
62:2c:7d:ae:66:42:9e:ac:4f:00:31:0a:04:43:a0:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:13:D4:F7:5F:62:54:33:16:DA:75:C7:24:AD:B2:23:20:F5:9C
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.215.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4f:13:66:76:c8:73:fb:b3:71:30:db:a8:2d:b3:6e:7f:29:
bd:4f:aa:93:eb:c2:85:02:60:75:62:e6:ab:c4:6f:b8:d2:46:
0f:a6:82:d7:16:19:b4:86:75:34:cb:14:96:ea:a5:d4:dd:0a:
c0:92:91:a9:57:2d:0c:23:5e:bc:35:ec:43:49:cc:53:aa:d2:
69:49:85:ad:bd:cd:13:81:79:f1:52:44:2b:22:1b:94:f9:b1:
8e:64:ea:a6:87:9d:e5:66:c9:7d:c0:fe:3c:6f:ca:5f:81:a8:
a3:5a:4c:23:5e:3e:ce:e8:89:13:9e:78:68:41:29:f9:a1:02:
88:89:ef:e2:99:ae:c1:ba:b3:f1:bc:b4:d2:66:72:61:2c:c7:
fc:2a:3a:bf:46:04:93:ea:b5:c9:57:e2:4b:5a:4e:a7:0a:96:
dd:63:de:4c:92:36:80:ba:d3:2e:ac:c7:b3:8c:21:89:b9:2b:
e9:77:d2:f4:6f:6e:98:74:17:1d:e0:3f:e9:83:21:2e:95:72:
66:df:7d:b5:48:1f:a8:53:25:06:c7:19:46:65:74:6f:06:98:
ce:ee:5b:2d:d9:78:d7:b7:ed:94:64:36:64:c8:b5:a0:1d:5e:
2a:34:4c:47:b6:43:ef:26:85:53:cc:60:20:55:cd:2c:93:59:
93:05:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:08 2025 by rpki-client