Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa
File: 3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: uRGaVPN8GQxR/Ul9TLPfv+nLyssG9udtvhMA7mf43X4=
Subject key identifier: BE:7C:DB:6E:76:53:43:2E:37:BB:DF:90:76:10:24:B8:2D:08:38:BB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 245E0B6481AE85612AC31C02F577D50411AA9AAE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 49981
IP address blocks: 185.185.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5e:0b:64:81:ae:85:61:2a:c3:1c:02:f5:77:d5:04:11:aa:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=BE7CDB6E7653432E37BBDF90761024B82D0838BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:b5:2b:2f:9a:b1:6f:23:b6:40:3d:5e:c5:
b0:8f:28:61:d7:74:23:32:db:61:3d:57:7f:4d:0f:
26:f7:cc:24:72:29:ef:ff:b8:73:00:0e:f8:81:e3:
46:39:6e:58:3d:fb:e7:4c:e0:54:53:01:94:3d:ed:
90:6f:ea:98:0b:fa:cb:d0:d8:6f:a1:53:72:34:87:
3e:d6:ee:34:b4:0c:3f:06:08:d0:70:69:74:97:a6:
51:89:9c:c0:04:32:2d:1e:21:89:f8:cc:e4:a3:a5:
1d:24:7d:24:50:17:ff:7e:b6:39:7f:26:96:1a:a4:
e1:af:22:1e:cb:d3:f6:4b:18:df:c7:c4:2a:a4:af:
95:80:41:9e:16:87:ff:bc:77:0c:9f:5b:df:70:37:
40:a4:e9:0b:bd:9d:8d:b4:0d:25:b5:32:b5:e5:e3:
9b:e6:a9:ef:bc:5d:c6:3a:c6:9f:4d:1b:88:b3:74:
c9:bb:b1:e7:44:0d:29:66:6f:be:18:88:fb:2c:e6:
83:17:d5:68:5c:23:76:80:c7:96:ed:86:ef:ee:42:
3f:9b:96:0b:4c:9b:7e:d6:1c:45:65:05:4f:72:ec:
76:31:7b:56:84:14:bb:1a:6c:fe:75:5c:48:5b:e1:
54:18:9b:9d:46:5b:23:f5:be:f9:85:f1:4c:a7:21:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:DB:6E:76:53:43:2E:37:BB:DF:90:76:10:24:B8:2D:08:38:BB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.127.0/24
Signature Algorithm: sha256WithRSAEncryption
42:00:a6:ff:34:90:f8:d1:8a:51:52:d6:27:a1:91:ba:77:6d:
68:57:6e:c2:c4:64:d1:72:f7:58:9c:0b:f4:ad:97:cc:10:b0:
3d:be:81:1b:3d:68:c2:ea:f5:d5:f9:b3:f7:a5:f4:fe:31:86:
28:be:a4:12:07:30:7d:15:79:97:a2:46:b2:23:e9:0c:49:e2:
cc:b9:76:62:44:c9:5f:5b:56:02:33:67:c2:e4:d6:37:fb:b0:
a8:8c:18:b9:db:37:21:a7:b2:8a:5d:c3:b9:28:2a:92:35:7b:
54:38:05:14:28:5c:19:a2:36:50:a1:f4:64:59:e4:a8:f4:d0:
5f:b0:fb:88:8d:29:52:0f:aa:44:6a:84:2c:77:44:a9:b9:0d:
0d:a2:3c:57:93:ec:17:ac:13:9a:b7:9f:52:dd:c9:57:26:e4:
f2:48:42:a5:4d:ec:e5:18:1d:66:ff:99:c9:07:c0:15:63:dc:
ca:f8:4d:a2:2a:f7:f2:20:01:3e:d7:31:29:c1:08:5d:22:be:
c9:57:56:a1:a9:c6:d6:2a:49:cf:40:2a:a0:a0:d9:69:e1:9c:
b7:c8:46:cb:60:24:69:0d:70:86:40:04:24:c4:da:b0:55:ca:
1e:71:5f:97:d5:bb:57:0b:3a:dc:2f:e6:05:05:b5:db:bc:29:
2e:de:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:30:18 2025 by rpki-client