Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CQQGI3ZWnM/4nXnvRC8lKoO8+iAYHgG//4jxpf5a3L8=
Subject key identifier: AE:16:E6:AF:92:A7:23:F3:D0:4B:B5:51:56:C0:1B:16:FB:3D:EB:07
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 20FB261B6BEE4AEE85529664039329934D01B9AF
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:24 +0000
ROA not before: Mon 30 Dec 2024 15:36:24 +0000
ROA not after: Mon 29 Dec 2025 15:41:24 +0000
asID: 136787
IP address blocks: 185.189.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fb:26:1b:6b:ee:4a:ee:85:52:96:64:03:93:29:93:4d:01:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:24 2024 GMT
Not After : Dec 29 15:41:24 2025 GMT
Subject: CN=AE16E6AF92A723F3D04BB55156C01B16FB3DEB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:28:d5:1c:e5:80:35:c3:2f:2e:d8:a0:e6:
e5:9a:11:4e:49:34:4e:0e:47:45:1c:33:cd:73:67:
7b:9f:64:08:14:c0:a0:c4:56:57:51:81:c7:d4:00:
ce:94:46:d9:63:1c:45:b1:82:93:89:89:68:70:92:
32:a7:4a:7e:fc:47:96:21:03:6a:5e:63:54:2a:15:
82:2f:50:33:9b:93:1e:c7:8d:08:a2:a5:e0:24:ab:
4d:b9:05:be:94:7f:5a:9a:d3:a5:d2:da:a5:00:af:
c4:cf:05:96:9d:9a:40:87:f8:d3:fb:02:eb:18:15:
a5:fb:b1:32:71:71:e3:2b:99:ae:c2:40:82:0e:97:
c1:fa:9d:fb:7a:9b:8f:2e:e1:8d:2e:a8:c9:5d:ac:
04:34:37:4a:a1:09:2c:16:a3:37:e3:2f:53:c4:0f:
ff:ee:43:c4:ba:63:f2:9f:2f:9e:da:a2:47:87:00:
ec:71:4a:8d:bd:2c:ca:3a:09:ee:b3:37:f9:e9:31:
e2:b3:a3:70:ed:a7:24:88:0d:1f:f0:67:dd:b5:4f:
a5:31:92:89:49:f0:6b:40:37:05:89:8c:f5:57:e3:
09:a1:fd:a1:a0:d3:83:09:12:1e:fa:c2:ff:f7:65:
ec:dd:dc:ba:2d:90:7e:9e:7b:3f:45:c1:7e:0a:87:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:E6:AF:92:A7:23:F3:D0:4B:B5:51:56:C0:1B:16:FB:3D:EB:07
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c8:21:14:22:14:13:1e:fc:b4:b1:3b:22:cb:37:c6:41:ef:
e6:9e:92:e6:72:94:a9:e9:4f:5d:5e:24:38:71:03:d9:ab:a5:
72:e9:57:39:f4:48:e6:94:57:31:aa:c9:b4:97:26:04:73:c0:
6e:58:67:36:8c:fc:3b:cd:f7:9e:26:44:ec:1c:11:d5:82:58:
0d:2c:bd:fb:78:95:53:12:ac:8e:6b:bb:d7:55:05:ec:8a:1b:
64:4c:3c:8e:06:41:20:d1:13:65:a6:fe:42:eb:57:23:cd:32:
d7:65:a4:bc:c4:df:3d:d5:cf:c8:f5:52:c8:a6:72:1b:0c:2f:
f6:47:ed:7b:e5:10:fe:96:b0:47:a4:d8:a9:a2:b3:65:41:82:
8d:53:cd:dd:c9:64:3e:c4:03:7b:3b:c0:84:b1:07:73:17:c6:
62:c8:da:26:4d:93:24:a9:8d:4f:14:ac:3e:73:dd:7a:88:28:
84:90:0b:77:3d:6c:28:f0:d1:29:8e:e7:fd:b6:c2:31:8e:42:
6d:38:26:57:7a:94:cf:10:75:e0:68:69:53:f2:11:27:84:91:
f0:d2:ba:d7:99:f1:bf:90:1e:bb:f8:9c:fa:9a:3e:0b:7e:f2:
6a:84:4c:46:ac:ce:68:c8:55:b8:b3:4e:cd:1f:e5:aa:9f:e2:
78:2e:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:04:35 2025 by rpki-client