Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: v1mPC69MuV+D7RM68MIh74eW5pmPEnmizgQyWcJBpTk=
Subject key identifier: A7:E6:8D:5D:5E:15:87:BA:96:46:97:9D:33:BB:DB:51:3C:0D:BC:C5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E3E07C648CB1FB7883DD40335202B337876247D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
Signing time: Mon 03 Mar 2025 10:36:57 +0000
ROA not before: Mon 03 Mar 2025 10:31:57 +0000
ROA not after: Mon 02 Mar 2026 10:36:57 +0000
asID: 61317
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3e:07:c6:48:cb:1f:b7:88:3d:d4:03:35:20:2b:33:78:76:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 3 10:31:57 2025 GMT
Not After : Mar 2 10:36:57 2026 GMT
Subject: CN=A7E68D5D5E1587BA9646979D33BBDB513C0DBCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:db:7d:22:01:71:91:7a:de:a4:50:18:51:
c8:8d:cb:0a:c4:93:11:93:7d:fe:c9:72:cc:10:f1:
45:4c:31:90:fe:e2:7d:6a:e7:b8:3f:db:d8:fb:41:
4b:06:e8:15:bd:d0:b0:64:76:a7:6b:4e:18:b2:99:
df:08:2f:af:20:40:ca:f1:ea:9e:9e:cf:04:36:41:
dc:d4:21:91:a7:12:29:2b:29:0c:a0:f9:a5:c7:5b:
e7:5a:7f:47:94:c4:76:59:eb:4e:5d:2b:5c:26:01:
b2:91:76:29:23:f0:2b:a6:bc:61:60:c9:38:86:9d:
c1:b7:b0:14:98:1a:8c:cf:0b:d3:6b:63:82:d3:86:
45:67:94:6d:82:3c:93:39:3a:98:98:c0:4c:9b:b1:
25:cc:16:56:04:14:74:0a:c9:6c:a9:8e:70:6b:b9:
d6:2a:37:4b:0b:16:47:1e:c9:4d:fb:b6:5b:5d:ed:
1d:e9:2d:08:ca:03:6c:b8:76:97:b5:60:0d:8a:8d:
07:f8:24:ea:08:df:1f:80:b3:82:d5:c8:87:90:3e:
9b:dc:86:19:e8:05:71:1c:be:1f:c3:4b:b0:c1:b3:
63:db:15:86:e0:1c:05:a8:88:d4:8b:d9:0e:25:10:
4c:53:cf:1e:a1:93:eb:cb:73:d3:35:35:43:6b:17:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:8D:5D:5E:15:87:BA:96:46:97:9D:33:BB:DB:51:3C:0D:BC:C5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
46:81:96:ec:e9:87:3f:c7:69:ac:e2:aa:da:52:d6:54:91:60:
a6:98:48:5e:b5:47:5e:e4:be:e2:c0:67:3c:0f:af:cb:e9:c9:
4f:01:ed:3a:b5:09:1f:ce:9b:7e:c8:07:56:84:31:6e:8c:bb:
a3:d3:39:40:2e:14:80:a9:50:d7:0e:3d:ec:eb:ed:a8:4a:ca:
88:37:ad:b4:a5:4c:88:cb:76:da:f0:db:65:bf:d7:14:37:96:
8a:ed:82:47:08:49:44:b9:9a:4b:73:47:5c:0b:52:1c:ac:8a:
c6:c1:53:1d:6a:32:44:7a:63:fa:53:18:83:2c:26:1e:9c:24:
e5:6c:bf:83:7b:3c:bc:bd:6c:81:aa:a0:d4:0f:68:04:b0:d8:
5c:eb:9c:25:13:05:0e:9d:7d:12:f6:e2:93:b8:cd:d7:1a:47:
e1:4f:3f:19:6d:13:cb:17:23:eb:4c:bb:cd:04:ca:2e:02:82:
af:7b:67:81:30:1d:6f:7b:15:08:17:a9:66:b7:c2:c1:25:83:
d9:a4:9b:0a:24:bf:31:6f:09:d4:19:b1:bd:0a:51:59:5a:09:
33:05:27:e3:4d:f3:82:dd:1e:fa:b0:b5:67:d2:71:ec:d5:a9:
9f:41:e8:a9:c7:ae:bc:04:aa:9a:07:05:ee:26:a7:a6:f3:c7:
d3:74:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:22 2025 by rpki-client