Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa
File: 3138352e3231332e32362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: ToTCTZ6lBGALU9GYBTELfVheQLpPZwzRs/1Mte6CGTE=
Subject key identifier: 45:A5:E5:E4:46:82:A2:DF:F6:C7:A8:B4:81:53:C2:3A:C3:CC:A6:73
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 313EC37D447BEAA96AE3E8F1887B79E7675574A5
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa
Signing time: Tue 10 Dec 2024 09:44:26 +0000
ROA not before: Tue 10 Dec 2024 09:39:26 +0000
ROA not after: Tue 09 Dec 2025 09:44:26 +0000
asID: 63473
IP address blocks: 185.213.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3e:c3:7d:44:7b:ea:a9:6a:e3:e8:f1:88:7b:79:e7:67:55:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Dec 10 09:39:26 2024 GMT
Not After : Dec 9 09:44:26 2025 GMT
Subject: CN=45A5E5E44682A2DFF6C7A8B48153C23AC3CCA673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:63:42:16:7b:97:2d:2d:33:c7:39:c5:60:
25:8a:03:5c:52:91:f4:ce:bc:76:99:57:fe:83:81:
ac:24:ce:48:03:af:15:e8:b3:03:69:e7:27:7a:5b:
03:44:5d:68:e7:aa:ff:63:8f:a8:8d:16:2c:5f:cb:
dc:de:44:88:83:08:df:8e:ef:23:49:78:d6:36:53:
0e:04:1c:db:96:dd:f3:81:20:4a:00:2b:f6:98:71:
8a:74:7f:8e:aa:e3:8d:a1:cd:29:19:19:9f:a3:ea:
85:3b:8a:58:08:91:c4:7d:c3:28:2a:f1:9d:68:7d:
b3:55:ac:10:e7:45:71:62:02:89:f7:10:0f:04:88:
ad:9a:55:f0:e8:3b:a1:9b:6b:c3:2d:5b:69:e6:98:
2a:b1:7a:05:1f:25:6d:57:3f:93:31:7c:bd:e6:f0:
07:13:67:ff:df:20:64:23:5f:fa:75:cd:99:ce:6c:
9c:a7:26:cd:6a:68:2f:6d:54:79:62:20:b6:3c:4e:
67:0c:50:fe:9a:7e:0e:f0:80:94:3e:6b:eb:0a:38:
0e:3d:aa:fc:82:a1:eb:d5:77:7c:96:eb:00:84:eb:
7c:f6:e4:48:22:77:f5:18:0a:ed:49:1b:60:53:3d:
2b:3d:93:25:88:4b:e6:18:6e:72:67:45:17:b1:1d:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A5:E5:E4:46:82:A2:DF:F6:C7:A8:B4:81:53:C2:3A:C3:CC:A6:73
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.26.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ac:61:ad:15:56:39:73:6c:5c:15:d9:4b:ae:3d:dc:85:f2:
ed:b4:2f:a6:32:4f:f3:7e:7b:b9:ad:62:39:50:e4:6d:9b:12:
f4:53:14:7f:f2:e8:01:cc:9f:e7:0c:1f:d7:c7:42:c6:f1:1f:
2f:f2:72:5a:92:a7:fd:23:37:36:9d:6c:c6:d4:10:90:0e:2a:
14:9f:09:ae:da:3f:f4:c8:b8:99:f1:51:68:43:4f:cc:28:6e:
8a:d9:10:65:22:86:b4:6d:9c:f9:d8:3a:57:80:90:90:4e:84:
5d:e3:44:01:b2:5a:a4:d1:c7:99:db:4d:53:4e:85:b9:b8:a8:
a3:51:fa:1b:30:6f:8d:b5:b2:94:4a:45:06:b9:77:45:24:eb:
3d:95:42:00:a8:63:0e:bc:1d:b0:54:5e:05:34:58:57:34:d4:
42:b4:8c:13:f3:d3:45:9f:40:a5:91:4b:9f:c9:38:04:a2:70:
d5:2b:66:84:8c:38:57:d0:f2:90:e9:e6:07:2a:67:b0:db:6a:
9f:ab:9f:44:cb:21:8e:d1:ab:cb:d6:20:41:23:be:8d:31:cf:
36:29:3b:01:62:cf:6e:01:ff:6f:86:01:2c:90:0c:df:f7:6c:
1d:a5:11:d5:1a:0e:8a:58:52:ed:9a:fd:6a:dd:69:cb:90:d5:
36:3f:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:15 2025 by rpki-client