Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Vlg9CWEeELUvY6okP1eoLaoCvX2jwIpkn7c3Hym62BQ=
Subject key identifier: 2F:FA:48:45:64:C4:3D:56:97:54:50:77:2D:94:AE:22:2C:56:CE:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A8E18EDAB33B8090A115AB6EFFBA1F839941022
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Dec 2024 18:44:30 +0000
ROA not before: Sun 15 Dec 2024 18:39:30 +0000
ROA not after: Sun 14 Dec 2025 18:44:30 +0000
asID: 136787
IP address blocks: 185.184.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8e:18:ed:ab:33:b8:09:0a:11:5a:b6:ef:fb:a1:f8:39:94:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 15 18:39:30 2024 GMT
Not After : Dec 14 18:44:30 2025 GMT
Subject: CN=2FFA484564C43D56975450772D94AE222C56CE93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:4b:b4:0b:b4:48:8e:72:be:bd:75:ba:f5:
58:7d:a8:24:08:59:8f:22:1a:1e:0c:62:39:93:6b:
3e:62:30:63:02:3b:d2:c4:03:8c:52:61:f6:84:a0:
e4:80:5e:bd:77:98:bc:9a:62:9e:bb:1a:b9:9b:55:
7f:be:d4:cd:26:92:35:ba:04:62:f1:d6:4e:36:c1:
a1:31:cb:73:54:9e:48:6b:32:8f:0a:0e:eb:45:9a:
14:5c:e8:8e:c6:fa:a0:af:83:63:4a:85:82:ad:5f:
37:c1:35:e4:f7:b2:63:1b:6d:e1:0d:6d:a0:8e:52:
ce:9f:c4:b7:4c:37:9a:b4:a9:a2:ae:f8:6f:0e:e1:
0c:7a:11:fd:6e:e2:49:bf:16:e3:8e:ae:a9:d3:08:
b9:c0:6d:92:a7:b2:23:de:65:78:36:28:d4:71:56:
b2:c9:69:e7:b6:2b:4a:29:0a:a2:d5:61:1c:c8:63:
b9:ea:2b:6d:2b:a6:56:09:da:e1:b2:d9:52:13:d1:
c5:5f:36:da:37:66:7c:b0:47:ba:e4:ed:58:a6:37:
9b:37:d0:5e:5d:78:8f:e8:c1:f3:10:59:07:5c:6b:
07:a0:69:18:db:3d:4b:e0:48:6d:38:bf:25:74:26:
2c:a6:5b:c8:af:6c:2f:44:76:77:44:c4:2e:ab:87:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:48:45:64:C4:3D:56:97:54:50:77:2D:94:AE:22:2C:56:CE:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.190.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ab:ee:b0:ee:ca:ff:ca:62:de:1a:8c:cc:ee:b8:f1:bb:3f:
c6:8f:e9:f1:3e:47:e6:e7:ef:16:8d:df:af:65:5a:23:72:ea:
57:b8:41:73:36:e1:04:c1:3b:65:ae:39:52:41:06:e5:58:22:
c8:85:9f:b8:b6:76:33:8a:54:c8:df:64:99:88:0e:7a:15:ab:
4a:6a:e3:56:b0:db:26:15:1f:d0:4d:d5:b2:14:bc:62:82:94:
e7:8f:58:ed:ea:c9:1a:f8:cf:1b:f7:e4:05:14:c7:b3:21:9c:
68:22:93:b2:ac:50:ff:cc:c9:a3:66:dc:a3:89:14:b5:a9:c7:
dc:e6:54:b3:49:0a:5a:fa:8c:d3:d3:90:c8:86:d2:48:2b:54:
bc:5f:8b:59:54:db:8a:0e:ac:85:07:20:be:cd:4c:b3:27:c8:
2f:b3:b4:be:e0:ca:66:64:da:ce:88:35:14:85:e0:44:c1:c4:
df:76:f7:32:6c:14:9c:8a:1e:79:de:e7:ae:57:3f:c7:0b:49:
7e:87:54:d8:fa:42:49:4e:28:4a:13:79:7a:19:39:ab:66:15:
d8:ea:58:1a:39:2b:5f:ab:60:cf:98:84:da:83:a5:c5:be:b0:
91:bb:ea:f5:05:e4:92:79:f0:7b:8e:ca:19:13:da:9a:af:ef:
0b:7e:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:14 2025 by rpki-client