Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa
File: 3138352e3137352e35382e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: yzgXrHPokCuumyW84LLqj+6Pxp0BlK9KvYIvtoJeZ9s=
Subject key identifier: 50:6C:69:01:74:FD:00:65:DF:0F:2C:2A:55:1E:1F:24:01:29:21:EE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 73DA21E6EF1E83023E55AFAA9A401E6F5E27BB5F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa
Signing time: Mon 30 Dec 2024 15:41:23 +0000
ROA not before: Mon 30 Dec 2024 15:36:23 +0000
ROA not after: Mon 29 Dec 2025 15:41:23 +0000
asID: 63473
IP address blocks: 185.175.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:da:21:e6:ef:1e:83:02:3e:55:af:aa:9a:40:1e:6f:5e:27:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:23 2024 GMT
Not After : Dec 29 15:41:23 2025 GMT
Subject: CN=506C690174FD0065DF0F2C2A551E1F24012921EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:d9:43:9a:01:79:67:7c:d1:bd:87:1f:be:
d9:a9:95:16:22:5c:1b:d0:4a:c1:aa:ef:74:20:bc:
57:1c:50:de:7e:0e:a6:37:7f:42:ec:4a:3e:a9:e6:
67:f2:a0:33:18:6f:d1:63:27:9f:9e:7a:1f:c2:ea:
88:4e:f7:3a:11:72:a9:5f:4e:f1:8d:81:55:3d:ad:
18:9b:d6:8c:f4:a7:99:93:59:5e:53:7f:ce:ca:2b:
aa:92:e2:bd:51:5d:49:7b:ae:a4:d2:44:68:ac:47:
16:13:14:3d:68:05:3a:0a:b0:9f:cb:50:05:8e:8b:
38:4c:a0:f7:f9:b6:a8:6e:0b:83:6c:d6:03:96:36:
36:70:7a:ae:a1:57:cf:ac:3e:51:2a:52:e0:72:75:
11:b4:3e:b5:ff:e2:0f:3d:b1:ad:59:24:12:f6:9a:
d4:9b:eb:8f:00:19:91:68:90:6e:ba:4b:0a:26:45:
5e:ee:30:11:fd:67:04:ec:19:24:08:28:b7:73:df:
27:fd:11:00:43:b6:d0:c4:85:b2:cf:8a:98:25:64:
b8:36:c9:fa:08:17:31:0c:8b:a0:ff:ac:7b:88:47:
e3:31:4a:ee:49:dd:27:83:1e:b2:13:03:89:f3:62:
30:05:65:63:e4:13:49:10:47:fe:d6:34:2d:8b:df:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:69:01:74:FD:00:65:DF:0F:2C:2A:55:1E:1F:24:01:29:21:EE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35382e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.58.0/24
Signature Algorithm: sha256WithRSAEncryption
17:70:54:53:e1:09:e9:63:71:8a:74:3a:13:84:d5:f5:59:f1:
01:38:7b:7b:57:ca:fc:46:6a:9e:df:1d:90:11:d2:18:e2:b8:
4a:16:7c:1e:0c:9d:04:58:85:76:ca:31:8b:3a:9f:fd:9d:c5:
c7:02:78:dd:6a:43:e8:f6:22:cf:27:5a:f1:64:6e:a9:04:97:
a5:41:81:16:4d:ee:cf:4e:8d:52:40:20:92:fe:34:5c:fa:2c:
ea:45:a8:9c:35:b9:42:2e:3f:e0:5f:f8:ab:ef:85:7f:8c:70:
20:31:26:8f:93:2c:f3:3c:af:63:2c:49:c8:fe:64:12:48:3c:
1e:1c:d8:51:a1:96:1f:4a:50:62:3f:e7:56:0c:c8:c5:be:d2:
a2:27:09:18:ea:31:d8:c9:ee:04:f5:15:6f:4c:26:dd:20:b1:
37:a4:66:19:75:09:a6:9e:f0:57:33:fa:01:61:3c:f8:43:11:
a8:9f:28:e4:3f:bb:38:d0:28:fe:41:3f:23:3b:51:a5:13:34:
fd:03:28:33:39:54:3b:f9:bd:d8:e5:95:e0:cc:9f:e6:49:7e:
cc:d2:1b:66:91:c2:82:9c:e5:22:5f:c1:33:68:b8:c5:c5:bb:
d1:f7:75:b3:6e:ad:e5:ad:26:39:ac:75:22:d6:8a:a3:63:1b:
1e:29:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:20 2025 by rpki-client