Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ABe4TzbF47ZtCp8GGtZIYsiyreTZJI3HD+ILSA3eirw=
Subject key identifier: D0:AB:56:E5:3D:5C:A4:9C:F1:EE:5C:31:0F:8E:3B:94:9E:60:EF:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66F432F4F88841982DF089F7E5A1CE4C779333E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:11 +0000
ROA not before: Mon 27 Jan 2025 09:40:11 +0000
ROA not after: Mon 26 Jan 2026 09:45:11 +0000
asID: 136787
IP address blocks: 185.215.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f4:32:f4:f8:88:41:98:2d:f0:89:f7:e5:a1:ce:4c:77:93:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:11 2025 GMT
Not After : Jan 26 09:45:11 2026 GMT
Subject: CN=D0AB56E53D5CA49CF1EE5C310F8E3B949E60EF7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:e6:c8:31:59:a9:a6:c6:10:4f:60:8a:08:
06:2f:1e:6d:53:1d:48:b9:44:43:3d:45:d6:7c:11:
13:81:24:e8:e6:d4:f1:a9:c8:61:64:0d:97:cb:96:
89:f8:02:8b:b0:1e:42:3a:6b:f6:06:be:b9:0a:f0:
2d:75:51:ce:7d:29:cd:18:50:32:8a:0c:dd:73:53:
0f:8d:78:b7:b3:bc:2e:53:d4:61:fa:c0:23:39:a6:
de:46:8a:42:33:8e:e3:22:e8:c6:76:86:21:ba:64:
22:d2:b6:9e:7e:f9:3d:c9:1a:dc:f8:89:a2:08:ff:
e1:fa:3f:c2:55:44:6c:19:ea:42:f6:5b:c3:ff:17:
d9:15:9f:0a:f0:bd:5c:df:5b:83:8f:11:76:19:3c:
93:c2:f8:d0:5a:3a:2c:48:2f:e2:0d:ad:59:c6:41:
1e:0d:30:3b:22:94:ed:7b:42:db:92:5b:8d:7a:aa:
fd:02:3a:a5:5a:fb:08:ae:0f:0f:64:66:28:b8:14:
59:41:b0:05:0c:cc:12:93:7b:a8:01:ab:ac:ce:6e:
bd:96:c8:28:1a:b3:3c:09:87:a3:8f:ce:a9:f9:ea:
a2:de:56:c1:a3:5d:d0:97:8d:d5:73:1d:dd:af:d1:
5d:64:c2:72:74:53:4c:c5:9a:83:01:92:69:ca:da:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:56:E5:3D:5C:A4:9C:F1:EE:5C:31:0F:8E:3B:94:9E:60:EF:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.182.0/24
Signature Algorithm: sha256WithRSAEncryption
93:aa:6a:e5:bf:63:e0:16:5f:41:f7:ef:f3:2d:37:0c:ef:ea:
a8:05:04:95:d8:61:e0:07:c5:0d:b2:41:da:7a:7a:6c:d4:09:
38:f4:f2:02:db:ab:cf:54:ec:df:40:fd:64:48:69:e1:63:c8:
69:dc:c7:77:da:97:6f:c8:c4:40:6a:57:21:70:5b:a5:6d:70:
11:1e:c8:27:ae:dd:3f:db:a0:ba:97:66:52:2f:ac:ad:71:6f:
d7:5e:21:84:67:69:ae:f8:ff:c9:82:8c:f3:82:74:b1:f9:9e:
ce:87:08:fb:b1:0c:79:31:d8:8b:43:34:1d:63:78:3c:6b:72:
72:e7:54:0d:85:f5:b2:21:0c:f7:5a:02:4e:8f:24:1c:fc:99:
17:2c:95:58:a6:8f:38:c1:51:e8:87:6b:30:fe:2f:de:e4:1b:
bd:12:25:69:be:1b:c8:8e:5d:11:d5:09:7b:b5:9c:ca:7b:cf:
a0:6c:59:fc:7b:5d:12:99:91:0b:15:60:72:e3:3b:aa:8d:65:
84:bf:14:0c:3f:61:67:2a:e5:85:4b:2e:47:10:12:5a:a2:e1:
b6:92:d0:2a:db:e7:0c:27:e7:91:c9:c7:fe:f5:86:ba:31:ec:
5e:a0:8f:a8:aa:db:8f:1b:99:26:31:89:02:db:90:c1:78:05:
b3:6d:f1:8c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZvQy9PiIQZgt8In35aHOTHeTM+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMTFaFw0yNjAxMjYwOTQ1MTFaMDMxMTAvBgNV
BAMTKEQwQUI1NkU1M0Q1Q0E0OUNGMUVFNUMzMTBGOEUzQjk0OUU2MEVGN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyebIMVmppsYQT2CKCAYvHm1T
HUi5REM9RdZ8EROBJOjm1PGpyGFkDZfLlon4AouwHkI6a/YGvrkK8C11Uc59Kc0Y
UDKKDN1zUw+NeLezvC5T1GH6wCM5pt5GikIzjuMi6MZ2hiG6ZCLStp5++T3JGtz4
iaII/+H6P8JVRGwZ6kL2W8P/F9kVnwrwvVzfW4OPEXYZPJPC+NBaOixIL+INrVnG
QR4NMDsilO17QtuSW416qv0COqVa+wiuDw9kZii4FFlBsAUMzBKTe6gBq6zObr2W
yCgaszwJh6OPzqn56qLeVsGjXdCXjdVzHd2v0V1kwnJ0U0zFmoMBkmnK2topAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU0KtW5T1cpJzx7lwxD447lJ5g730wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzUyZTMx
MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnXtjANBgkqhkiG9w0BAQsFAAOCAQEAk6pq5b9j4BZfQffv8y03DO/qqAUE
ldhh4AfFDbJB2np6bNQJOPTyAturz1Ts30D9ZEhp4WPIadzHd9qXb8jEQGpXIXBb
pW1wER7IJ67dP9ugupdmUi+srXFv114hhGdprvj/yYKM84J0sfmezocI+7EMeTHY
i0M0HWN4PGtycudUDYX1siEM91oCTo8kHPyZFyyVWKaPOMFR6IdrMP4v3uQbvRIl
ab4byI5dEdUJe7WcynvPoGxZ/HtdEpmRCxVgcuM7qo1lhL8UDD9hZyrlhUsuRxAS
WqLhtpLQKtvnDCfnkcnH/vWGujHsXqCPqKrbjxuZJjGJAtuQwXgFs23xjA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:16 2025 by rpki-client