Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa
File: 3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: BULWmlMKmvItDWSa8KBzbZeyjPxMM5X8e5a3GalgiDw=
Subject key identifier: 70:62:A3:4A:88:50:5A:AB:17:95:77:C3:BB:66:28:14:2E:2B:FC:1F
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 024B2EC00E3E1B6CFC0FBA077BEC6C57FDDF4888
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:19 +0000
ROA not before: Tue 25 Jun 2024 21:42:19 +0000
ROA not after: Tue 24 Jun 2025 21:47:19 +0000
asID: 204170
IP address blocks: 185.232.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4b:2e:c0:0e:3e:1b:6c:fc:0f:ba:07:7b:ec:6c:57:fd:df:48:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Jun 25 21:42:19 2024 GMT
Not After : Jun 24 21:47:19 2025 GMT
Subject: CN=7062A34A88505AAB179577C3BB6628142E2BFC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:09:51:66:ca:62:26:72:f7:fb:73:04:7f:
c0:0d:da:7d:f3:4b:17:64:3b:0e:42:5e:b0:36:e5:
0d:63:f9:22:dd:ad:69:61:ce:e2:bf:94:ee:2e:f8:
0c:74:76:c3:3c:2b:d6:c6:d6:94:23:86:e4:5a:ad:
39:e3:69:22:3d:42:62:86:4e:ab:62:90:a5:54:6e:
f9:8d:e2:dc:71:b9:f4:e7:26:4c:a8:ba:a6:13:36:
81:22:0c:ef:f7:a7:c8:1d:0d:d6:6b:9b:a9:d1:55:
83:bc:29:e0:ee:56:91:5d:af:fd:2d:b2:e8:38:f5:
07:70:4a:0e:7e:a9:8e:05:53:e8:83:6c:53:f3:e1:
36:9c:7d:f2:6e:91:e5:f4:2a:a0:53:ff:5a:d2:eb:
79:4d:f3:c9:7a:80:e6:73:3a:b6:cb:cf:45:6e:0b:
8d:09:0e:b9:88:4a:3d:9e:f0:ea:c4:ef:1f:47:71:
0b:4a:9e:7a:ce:71:73:4d:15:45:09:56:1f:4c:e3:
30:03:1e:18:3c:58:36:a9:bb:37:70:25:93:04:ab:
c5:41:50:31:94:e5:2a:d5:c5:27:a7:d5:bd:52:ac:
72:8d:d6:60:03:1c:42:59:18:48:0c:ef:d8:56:22:
7a:be:aa:62:ca:0f:6f:80:7b:c3:f6:af:a0:93:f9:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:A3:4A:88:50:5A:AB:17:95:77:C3:BB:66:28:14:2E:2B:FC:1F
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.15.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3c:17:e7:be:f2:a7:9d:04:87:a1:d7:b8:b8:88:64:0f:51:
6d:71:3d:da:00:96:9c:e9:aa:36:f4:e7:ac:ab:e8:e0:52:d4:
f6:d9:d5:36:6c:c2:b6:97:a2:c2:94:8c:a7:45:0d:57:21:3d:
5e:95:c2:a0:d9:03:f5:48:79:2c:fe:72:6b:6f:9e:0f:9e:1f:
a2:0a:5a:84:71:20:a3:b9:1e:f7:82:78:3d:11:3d:e0:a8:95:
53:b2:e8:1f:11:14:08:af:7e:28:11:e4:b7:c9:7e:aa:d0:36:
28:86:2e:e8:d1:d1:b8:d7:1d:c5:c9:29:91:80:51:50:a6:00:
d7:96:55:82:f1:7e:43:a4:63:07:45:2b:8b:cb:53:ee:a8:30:
ec:92:3d:cb:1c:c3:16:45:83:b8:16:f8:07:76:85:60:10:7b:
a6:13:9c:86:8f:c1:b5:61:ed:88:ad:cc:80:70:e7:a7:48:3e:
22:ae:fb:8c:8a:99:2e:a1:36:2c:cb:f4:b4:d6:3e:95:18:41:
e6:af:30:04:50:47:20:df:83:75:3b:2c:2e:e2:b4:20:68:57:
e0:be:c0:48:63:05:2e:fe:06:05:94:3a:ad:85:a0:cb:48:f6:
b1:61:47:09:37:56:69:43:73:8b:25:fd:75:fa:7a:12:a1:59:
73:29:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:28 2025 by rpki-client