Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
File: 3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: UgopaKMCBOqQ+HbZC8ADH8OG99H6srNSfAJsG43OXBg=
Subject key identifier: A9:A3:0F:73:81:0A:2A:B2:B0:1F:38:93:18:80:86:30:8F:FB:CA:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5338681C267426D2BC57C05D3D0E84D8A3CD66A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
Signing time: Mon 27 Jan 2025 09:45:03 +0000
ROA not before: Mon 27 Jan 2025 09:40:03 +0000
ROA not after: Mon 26 Jan 2026 09:45:03 +0000
asID: 203380
IP address blocks: 185.173.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:38:68:1c:26:74:26:d2:bc:57:c0:5d:3d:0e:84:d8:a3:cd:66:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:03 2025 GMT
Not After : Jan 26 09:45:03 2026 GMT
Subject: CN=A9A30F73810A2AB2B01F3893188086308FFBCAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ce:18:4f:6c:3a:84:94:87:27:3a:74:b8:d1:
35:0f:f3:3e:ab:39:fa:b8:54:8a:d9:e5:fc:2b:e7:
14:02:11:3a:c7:1a:f9:3e:f1:e3:35:14:eb:88:79:
7a:8c:15:5b:fe:9c:b3:b0:dc:3f:c0:2c:68:94:7e:
a1:96:fa:45:c7:43:63:94:2f:3a:ff:33:5d:bb:cd:
1d:19:97:2e:bc:55:19:60:35:08:16:eb:7e:bc:b7:
ca:4d:51:b6:28:a0:d0:89:7c:d5:44:fb:9a:49:5c:
5c:e5:bf:81:55:b9:f6:c5:35:db:45:f9:a5:95:9c:
8f:61:0f:37:15:a5:b3:81:65:94:82:fa:3d:af:d7:
c1:0a:35:fa:2a:da:c8:54:17:1b:aa:67:b3:d1:bf:
f1:15:98:89:6c:89:9c:84:c8:f8:3d:66:4d:3d:f3:
ef:ae:68:35:54:ad:60:cb:16:76:92:dc:1e:6e:49:
30:32:d5:e3:e9:91:d0:d3:4a:5b:3d:d9:87:f4:0d:
5e:36:94:ce:56:5c:19:7d:ba:be:8d:4f:68:bc:c5:
34:a2:9e:59:78:45:4f:d4:d0:68:4b:17:b3:45:4c:
85:9b:6c:6c:df:ab:b6:14:ad:3d:b5:a7:ca:29:d9:
d8:58:ea:d6:6a:94:a1:04:75:84:62:04:1e:da:f5:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:0F:73:81:0A:2A:B2:B0:1F:38:93:18:80:86:30:8F:FB:CA:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.224.0/24
Signature Algorithm: sha256WithRSAEncryption
56:21:9c:26:04:40:f5:38:a8:db:09:83:93:06:48:3e:6f:09:
85:e4:7a:d2:16:11:9a:db:d2:01:93:c6:d2:25:86:53:90:da:
01:1c:7b:ef:eb:9c:5b:bd:1a:8f:88:12:bb:03:b1:ec:9d:a5:
f0:f4:4f:08:39:1f:a1:71:05:30:c9:bd:77:38:df:0a:21:44:
de:63:04:ab:0b:73:32:58:ae:72:a2:28:4c:82:0c:b2:8d:8c:
de:97:c7:c7:0f:49:3f:da:2c:e6:83:16:7d:25:0d:df:b6:99:
63:b0:68:d5:a9:15:f0:ef:10:59:26:cd:ee:7d:bf:61:69:6e:
c1:30:bc:2d:a6:af:44:c5:f6:ad:b3:1f:72:4f:1c:39:88:b8:
29:20:b5:30:36:7c:f2:df:01:95:ec:99:d5:f3:66:8c:ea:db:
7d:15:bc:01:83:2a:fe:72:b9:ba:06:ed:1b:c3:43:ed:04:8b:
14:4c:19:a6:28:33:23:dc:f7:17:74:04:56:1b:02:51:43:a0:
b3:b4:30:2b:9e:92:13:d2:c8:f6:97:7e:71:12:16:99:ef:22:
31:34:a1:74:51:7e:74:20:cf:43:74:30:52:a5:f3:81:6b:c0:
79:a0:b3:75:80:8e:96:1c:51:d9:80:59:7b:09:cc:5b:55:e2:
49:19:e7:4e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUzhoHCZ0JtK8V8BdPQ6E2KPNZqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDNaFw0yNjAxMjYwOTQ1MDNaMDMxMTAvBgNV
BAMTKEE5QTMwRjczODEwQTJBQjJCMDFGMzg5MzE4ODA4NjMwOEZGQkNBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2zhhPbDqElIcnOnS40TUP8z6r
Ofq4VIrZ5fwr5xQCETrHGvk+8eM1FOuIeXqMFVv+nLOw3D/ALGiUfqGW+kXHQ2OU
Lzr/M127zR0Zly68VRlgNQgW6368t8pNUbYooNCJfNVE+5pJXFzlv4FVufbFNdtF
+aWVnI9hDzcVpbOBZZSC+j2v18EKNfoq2shUFxuqZ7PRv/EVmIlsiZyEyPg9Zk09
8++uaDVUrWDLFnaS3B5uSTAy1ePpkdDTSls92Yf0DV42lM5WXBl9ur6NT2i8xTSi
nll4RU/U0GhLF7NFTIWbbGzfq7YUrT21p8op2dhY6tZqlKEEdYRiBB7a9RcHAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUqaMPc4EKKrKwHziTGICGMI/7ysIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM3MzMyZTMy
MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMzMzgzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmt4DANBgkqhkiG9w0BAQsFAAOCAQEAViGcJgRA9Tio2wmDkwZIPm8JheR6
0hYRmtvSAZPG0iWGU5DaARx77+ucW70aj4gSuwOx7J2l8PRPCDkfoXEFMMm9dzjf
CiFE3mMEqwtzMliucqIoTIIMso2M3pfHxw9JP9os5oMWfSUN37aZY7Bo1akV8O8Q
WSbN7n2/YWluwTC8LaavRMX2rbMfck8cOYi4KSC1MDZ88t8BleyZ1fNmjOrbfRW8
AYMq/nK5ugbtG8ND7QSLFEwZpigzI9z3F3QEVhsCUUOgs7QwK56SE9LI9pd+cRIW
me8iMTShdFF+dCDPQ3QwUqXzgWvAeaCzdYCOlhxR2YBZewnMW1XiSRnnTg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:16 2025 by rpki-client