Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3233203d3e203437353833.roa
File: 3138352e39372e3134342e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: nfXUU55jvztjoEA9w0YyJqMx89sWC69odzZ+BPeyoxw=
Subject key identifier: 27:1B:E8:F9:7F:B3:70:99:B1:95:6C:84:2B:18:EB:B2:10:2A:3B:96
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 1320D056C32D47261462A14C0968F8860997A647
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3233203d3e203437353833.roa
Signing time: Thu 06 Jun 2024 13:54:11 +0000
ROA not before: Thu 06 Jun 2024 13:49:11 +0000
ROA not after: Thu 05 Jun 2025 13:54:11 +0000
asID: 47583
IP address blocks: 185.97.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:20:d0:56:c3:2d:47:26:14:62:a1:4c:09:68:f8:86:09:97:a6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 6 13:49:11 2024 GMT
Not After : Jun 5 13:54:11 2025 GMT
Subject: CN=271BE8F97FB37099B1956C842B18EBB2102A3B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:be:0a:33:20:43:d2:a8:ca:16:e8:8a:4d:
af:8e:db:ed:11:a2:ae:ca:a9:23:67:10:ff:a4:68:
5a:9e:e3:ba:24:be:21:08:95:66:09:72:c7:7f:c3:
71:ce:6b:05:b7:29:db:a4:8b:63:0c:f6:33:9c:52:
eb:d2:5b:04:eb:8e:d2:5c:a8:1c:50:0d:3e:35:78:
f8:35:b9:17:62:d9:1a:c4:12:78:7c:6a:aa:f3:54:
a2:f8:41:3f:60:ae:4a:c8:73:87:09:19:03:1b:30:
4f:e8:70:a6:83:ae:a6:43:a4:d6:23:c2:ec:aa:c1:
8a:9b:9b:e2:0a:cd:51:de:ba:46:68:f9:ce:6e:f9:
63:18:bd:61:1d:d5:50:bc:b6:fd:bb:8f:58:9d:3c:
57:45:1d:bf:d3:57:69:53:5b:12:3c:9d:01:f0:d8:
77:18:84:3c:0e:b9:1c:a2:a1:9d:04:f5:d1:3b:c2:
3e:e8:3b:c1:9e:02:f1:2d:d2:30:bd:3c:8e:a7:3d:
b7:d9:88:ed:1f:bd:72:ff:76:96:8b:36:9c:7b:0a:
0c:e0:33:20:93:a8:8a:9c:6b:7d:00:09:a3:fb:63:
7f:65:68:95:3c:f9:ef:c6:d7:f8:3d:5f:62:f9:37:
66:78:10:e0:9c:c1:59:20:4c:a7:dc:4c:4c:44:07:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:E8:F9:7F:B3:70:99:B1:95:6C:84:2B:18:EB:B2:10:2A:3B:96
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.144.0/23
Signature Algorithm: sha256WithRSAEncryption
88:2d:b2:a6:8a:15:5e:d3:b8:6f:06:55:22:59:6a:a7:2b:f2:
62:b1:17:af:33:b9:77:40:14:ff:cb:34:b9:89:17:6e:a2:60:
38:94:85:ae:c4:21:7d:f9:a2:15:2f:a7:56:4d:5b:79:56:14:
6e:45:5b:c6:a6:cf:37:97:4e:97:4d:e2:35:e0:25:70:e0:5a:
00:d8:20:47:c0:b5:3d:8a:16:cb:3f:c6:9a:00:7e:e1:ad:f2:
ea:83:c7:80:37:f0:99:9e:5f:b0:88:fd:cf:37:73:0e:45:66:
d6:80:c2:ce:35:c5:93:47:e9:08:5f:de:b6:ab:7e:00:29:08:
46:de:17:d8:df:3a:ad:75:97:98:e3:85:40:8b:02:16:83:c8:
56:60:d4:02:3e:49:5e:e8:02:14:6b:7f:1b:08:ac:4c:20:a7:
be:2d:08:7f:20:ce:b9:2d:de:ed:5e:41:51:9e:10:7f:8b:4e:
3f:61:d8:f9:4e:f0:58:6b:bf:19:52:02:d5:03:ff:4f:b4:e0:
ad:a5:f9:5d:b3:81:5f:f9:88:d7:83:7c:19:a4:9d:be:cb:98:
1a:a3:cd:0a:a6:64:19:25:94:be:c0:8b:c9:cd:1b:3a:76:0c:
b2:23:d4:7f:f5:44:16:f1:14:68:33:e5:20:1b:0b:81:fa:cb:
71:ff:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:52 2025 by rpki-client