Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa
File: 3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa (raw, json)
Hash identifier: Lt0WhOz12HNWS6H5SVJ04FYbiYN4vQpZErRIlbocPmw=
Subject key identifier: 1B:48:36:EA:78:57:C3:81:59:B1:91:4D:EA:6E:D3:2C:C8:CF:76:6E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3AC3057561433FB7BCA03263D8C99A647411878C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa
Signing time: Mon 30 Dec 2024 15:41:23 +0000
ROA not before: Mon 30 Dec 2024 15:36:23 +0000
ROA not after: Mon 29 Dec 2025 15:41:23 +0000
asID: 33182
IP address blocks: 185.185.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c3:05:75:61:43:3f:b7:bc:a0:32:63:d8:c9:9a:64:74:11:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:23 2024 GMT
Not After : Dec 29 15:41:23 2025 GMT
Subject: CN=1B4836EA7857C38159B1914DEA6ED32CC8CF766E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:7f:2d:03:80:91:ed:c5:43:2c:6a:fc:39:
56:68:f7:e7:34:28:13:69:8b:19:a2:a6:92:71:c2:
9f:ff:7d:48:63:dc:32:22:4c:2d:09:76:67:a3:3c:
60:79:10:2a:4f:1b:f4:50:1f:ab:86:3f:ef:52:a2:
36:73:0a:0f:19:60:8f:5a:ae:cb:80:1c:fb:68:7f:
47:f1:1b:75:70:6a:d9:d5:76:7a:4e:9d:52:93:da:
ec:63:3b:60:99:33:a3:f2:54:07:8c:55:b1:06:5d:
61:9e:6b:26:63:f8:7e:2b:fc:1b:7b:32:4c:68:06:
3c:2e:58:cc:61:62:f5:b7:6c:f6:4a:bf:84:3a:4d:
03:68:c3:79:a4:fc:b6:d1:a8:f0:2d:8a:64:a1:8e:
e3:4c:9c:bb:ec:7c:e0:0b:ab:8c:cb:54:01:63:72:
8c:2b:65:7c:1e:13:93:ad:b8:67:41:95:85:bd:37:
18:54:13:cd:84:ef:2a:f4:f8:28:05:bf:86:02:a5:
00:0f:70:c9:cd:18:63:33:08:0b:35:13:89:9a:d4:
95:dc:b7:9b:0e:ac:c3:50:b7:58:6b:42:59:23:df:
15:95:fc:6e:94:8d:a6:0e:63:82:8d:e0:fa:64:64:
30:56:39:35:2a:d5:88:dc:96:4c:3b:e5:1e:69:b0:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:36:EA:78:57:C3:81:59:B1:91:4D:EA:6E:D3:2C:C8:CF:76:6E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:24:79:13:ac:91:6b:09:2a:d8:2d:36:e2:85:f9:25:3b:74:
b7:13:47:85:1d:ad:e8:cc:99:ec:03:5b:2d:05:e8:0c:95:ce:
00:be:c0:e5:1e:7d:27:e5:22:94:1e:15:de:a6:2a:ef:0f:8f:
cd:f5:7b:95:b3:41:68:ed:1b:cf:fb:9d:77:96:f4:41:05:78:
9e:3b:cc:80:0f:e0:54:1f:b2:35:fc:72:10:ec:90:9f:12:40:
d8:52:44:64:d2:5c:18:70:89:3e:a7:45:9a:61:49:5c:7b:7f:
17:bc:2b:fc:ea:47:66:c7:ce:e9:2e:0e:36:81:54:53:ec:1f:
97:5d:dc:0a:1f:24:ea:c8:e8:c0:b0:7b:de:1f:b1:d0:f6:64:
31:ff:47:34:a9:e6:9b:5e:11:39:a8:e1:2c:05:8f:7e:90:db:
ed:24:fb:38:8d:9b:70:0c:dc:77:61:64:13:4e:63:ab:29:50:
c5:53:45:73:a2:20:70:81:aa:6d:7a:dc:f6:bb:ad:fc:60:d5:
0f:51:41:ae:08:c3:3c:f4:6e:35:f1:4f:45:02:de:1e:55:c8:
2d:b3:d6:f0:12:7d:47:5e:63:f8:63:51:13:f0:98:35:1d:34:
a4:39:4f:11:5c:fa:94:17:a4:0a:0e:b1:aa:7e:8c:46:93:f0:
29:aa:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:28 2025 by rpki-client