Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138342e3139312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4S1gce4UsKsQTEVgME3qoEyS8shAliol1ge7j5lu7M8=
Subject key identifier: 12:B6:79:80:CC:BF:1C:DA:9B:19:69:A4:E9:8B:C7:B7:29:94:8A:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4057A8756EC6D33D102898518D98192491FAF6B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Dec 2024 18:44:30 +0000
ROA not before: Sun 15 Dec 2024 18:39:30 +0000
ROA not after: Sun 14 Dec 2025 18:44:30 +0000
asID: 136787
IP address blocks: 185.184.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:57:a8:75:6e:c6:d3:3d:10:28:98:51:8d:98:19:24:91:fa:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 15 18:39:30 2024 GMT
Not After : Dec 14 18:44:30 2025 GMT
Subject: CN=12B67980CCBF1CDA9B1969A4E98BC7B729948A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:29:98:45:8f:f8:28:e3:60:7d:e1:78:f8:
19:63:b0:76:fd:86:54:d0:4d:a7:66:c7:41:6c:23:
64:42:d9:5d:b7:1a:41:35:be:8f:5b:06:e3:65:e8:
2a:91:7f:9a:35:2c:83:42:1c:b3:40:fa:c3:78:d5:
82:60:95:be:b7:9d:36:c1:ad:db:1d:79:b0:fc:5c:
c3:a5:65:7e:34:81:8c:df:bb:8d:f6:4e:ef:b2:bd:
3b:58:e1:8e:32:1a:39:a7:b9:dd:3c:eb:48:a4:be:
13:d2:2e:dc:0e:6d:12:73:00:09:63:5a:b4:09:70:
6c:e8:dc:a8:9a:b6:f4:37:90:7d:f7:e3:62:a4:5c:
9e:cc:68:67:44:cc:f0:13:62:18:27:58:86:34:c6:
26:bc:28:d4:1a:65:15:31:23:c4:65:dd:ab:81:90:
cb:4b:bc:05:f1:b9:5b:85:30:5e:d0:8d:84:c2:7e:
c9:f7:13:3d:d4:c4:c2:2d:90:fb:29:12:66:8a:70:
53:9d:53:97:c8:86:95:57:fc:82:e6:da:a3:6a:c2:
f3:66:58:06:dd:ce:ff:e0:16:99:ec:7e:17:f5:c1:
b5:1c:35:42:1c:26:22:1a:26:74:b8:98:36:18:23:
a6:8c:fa:e7:86:fe:b4:20:68:1e:d8:8b:35:b6:39:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:79:80:CC:BF:1C:DA:9B:19:69:A4:E9:8B:C7:B7:29:94:8A:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b4:4b:96:29:9a:18:e5:29:52:6c:46:07:91:6d:f1:98:47:
5d:96:d0:d3:92:38:6a:fc:37:3f:55:6c:f8:ec:28:f1:26:a8:
9a:15:c3:c8:22:5b:38:a5:c0:2c:01:06:77:68:01:84:53:9e:
62:26:91:f4:86:90:6f:e9:9f:47:c2:3c:44:9c:e9:80:2b:8a:
4b:04:63:91:b2:0f:b0:d6:95:26:7a:6a:30:b3:1e:c0:66:f9:
96:d9:dc:a5:ef:a7:19:87:69:a1:38:fd:09:84:11:bd:a8:d0:
a7:47:2c:0f:0b:7f:62:43:60:72:dd:3b:c8:ac:af:ef:0b:f7:
bf:b6:f8:64:25:e9:4b:e9:6c:34:25:af:8c:6d:8f:df:0e:fb:
21:e6:50:55:0c:e3:13:28:e6:0e:82:09:28:80:3a:75:6d:6d:
d1:da:bb:2a:7c:03:8a:e6:26:f5:fb:c8:dc:33:22:43:c6:ed:
9a:0a:ca:55:6a:e3:9c:3f:34:1a:07:37:a0:a7:f8:56:05:1c:
8c:a3:d4:7b:ce:fe:73:55:5f:79:dd:e6:23:90:44:af:7a:00:
55:26:ae:17:36:9a:b8:28:c0:08:34:1d:db:53:b0:00:e8:a8:
1e:ca:f7:d6:57:e4:dd:bc:91:34:cc:f2:92:b7:1c:1f:4c:81:
eb:be:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:16 2025 by rpki-client