Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 1jNVT4UROVAwdG6Jj2ok7ZAIYmsi6KxWbjnKB+FzoxQ=
Subject key identifier: DA:6D:64:87:88:51:92:5B:3D:3B:EC:5E:F0:43:EA:0B:4D:64:E4:CA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 070FBFB8F281B7EEFB66931FE46909B73148439D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 204170
IP address blocks: 185.185.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0f:bf:b8:f2:81:b7:ee:fb:66:93:1f:e4:69:09:b7:31:48:43:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=DA6D64878851925B3D3BEC5EF043EA0B4D64E4CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:8a:26:40:f4:db:09:b6:b8:ba:b1:d2:4e:
01:e1:65:0f:ec:69:7d:fd:39:ab:ac:aa:51:de:4f:
ce:67:b9:7c:78:12:03:e3:8d:93:97:61:9c:7c:88:
e5:cc:00:f8:cf:ab:2f:9f:d8:77:aa:b6:05:0d:6a:
fb:de:eb:97:f9:44:b2:ff:9e:32:0b:00:00:d0:8b:
a5:5a:59:90:71:41:da:28:95:bd:64:83:e8:c8:b0:
a4:5b:88:b1:0c:99:1f:61:39:80:3c:2c:df:4e:ca:
cc:b8:ee:d3:06:77:e2:20:82:55:95:4d:ad:47:42:
be:37:53:96:3e:d2:c1:c3:7f:34:5a:de:eb:f5:bd:
d9:9a:41:e1:cd:b0:24:a2:c8:42:7d:42:51:f4:4d:
9e:78:50:2e:aa:9d:cb:1c:de:a8:23:8c:98:83:d6:
26:98:56:66:41:7f:47:da:a2:69:66:56:88:f6:27:
f0:38:f1:56:e8:40:33:6c:fa:aa:9f:99:39:7b:7f:
60:96:30:1d:3f:1b:e5:6b:83:32:5a:06:da:c4:0f:
a8:ba:3f:97:d3:69:ee:37:c1:0b:6c:26:a8:db:70:
13:56:08:4c:b0:fe:e8:10:5f:3b:d4:d2:45:e8:dc:
37:83:12:9a:1c:9f:2b:1d:6e:61:9c:be:ba:da:47:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:64:87:88:51:92:5B:3D:3B:EC:5E:F0:43:EA:0B:4D:64:E4:CA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:62:fc:ae:bf:c4:1f:c6:fb:47:78:87:03:c6:7c:f7:ba:6d:
89:e0:3c:20:f0:eb:1b:56:6d:dc:ff:f4:f9:ec:44:91:a5:d7:
91:6b:dd:46:11:df:2c:69:da:1b:63:48:cc:56:ae:bb:4d:97:
7d:d6:ab:59:83:bf:9f:52:b2:07:10:01:6e:aa:6b:fe:38:ce:
a0:ee:30:a1:6e:87:a2:4e:d6:94:28:f5:d6:3b:77:73:7d:51:
e0:63:4e:5c:1c:2a:df:f4:87:b4:b5:ab:70:c2:b2:9c:70:06:
eb:76:89:06:97:92:7d:f7:0f:b6:e6:14:0b:f6:67:3a:88:04:
e1:6a:77:ce:bb:62:8a:47:22:51:81:b3:b8:a6:c5:0a:61:eb:
da:1a:eb:47:78:4e:a8:12:83:88:fd:22:7f:1f:ae:86:11:2d:
32:39:bb:45:98:2e:81:82:45:a5:9c:ea:69:e9:9d:77:fb:30:
1c:1f:f5:67:52:94:d2:4c:77:c5:12:60:bc:f1:c2:9e:97:b4:
9b:3c:65:26:03:64:b2:c8:91:42:4d:ff:b7:de:20:12:9d:b7:
4f:73:43:f7:e0:b0:32:21:e0:fa:6e:38:b2:32:ca:c0:c6:cd:
41:d9:17:9c:97:11:cf:df:9d:c0:df:eb:37:4b:ed:c3:3b:4a:
d4:77:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:11 2025 by rpki-client