Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa
File: 3138352e3138392e32372e302f32342d3234203d3e203333313832.roa (raw, json)
Hash identifier: OjpUu4XtIZoAbbxi9VbHDr8kjFmH1i8ZqLMk6wu7/EY=
Subject key identifier: 88:FA:9C:AB:56:F7:8D:E9:13:F0:40:BD:3D:45:C0:47:A3:4B:23:0F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 45198B80BD6FC01ED5ED9E7129629AF364D70297
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa
Signing time: Mon 30 Dec 2024 15:41:18 +0000
ROA not before: Mon 30 Dec 2024 15:36:18 +0000
ROA not after: Mon 29 Dec 2025 15:41:18 +0000
asID: 33182
IP address blocks: 185.189.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:19:8b:80:bd:6f:c0:1e:d5:ed:9e:71:29:62:9a:f3:64:d7:02:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:18 2024 GMT
Not After : Dec 29 15:41:18 2025 GMT
Subject: CN=88FA9CAB56F78DE913F040BD3D45C047A34B230F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:26:fb:08:53:87:db:aa:37:35:65:5d:33:
bc:b3:0f:d4:f2:1b:81:9a:a7:66:ae:1e:9d:17:f0:
d9:ce:13:3a:da:9c:4e:24:82:d6:02:05:ae:48:fa:
18:1e:f0:26:b7:12:01:bf:a2:e5:ec:b3:73:de:65:
40:1b:72:35:2d:77:00:b3:3f:3f:45:7e:81:8a:05:
76:6c:09:38:2e:3c:4d:7f:0d:38:c6:97:0d:19:ce:
35:8a:35:08:77:fb:81:22:8e:55:71:57:ec:06:05:
a0:48:b1:03:9c:ee:dd:ad:3e:d8:97:1e:df:94:5d:
c9:c7:c3:be:46:b6:b7:71:ab:a7:cc:f3:b3:7c:6b:
a9:5c:fe:8a:ed:0a:c9:79:9c:b5:c7:6d:b1:a6:df:
39:78:97:2f:ac:a7:6c:ac:cf:78:ee:e7:e9:bd:08:
81:7f:a1:2f:92:f3:bc:8e:63:a0:ca:48:95:f0:be:
7d:fd:17:1f:f5:0e:db:5b:47:17:e5:1e:b6:ce:23:
0e:8b:11:d5:a4:6a:c5:56:6e:d9:37:6a:99:fa:06:
e1:32:70:5f:07:5f:ed:55:ae:66:01:d2:ed:58:5e:
3b:56:7f:c6:71:be:84:00:0c:51:34:de:d6:f4:f8:
a0:2e:e5:00:16:89:c3:e0:14:25:be:d2:57:c4:09:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:9C:AB:56:F7:8D:E9:13:F0:40:BD:3D:45:C0:47:A3:4B:23:0F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a3:47:06:76:39:c4:1f:66:fe:5c:8c:3d:a1:17:11:02:e7:
54:61:bf:2d:76:ca:0c:bb:ec:70:41:c3:a8:43:1e:af:77:55:
2a:d1:f0:0e:dc:7c:d5:04:5b:c3:c0:ad:48:a0:8d:90:f9:72:
cc:8d:e0:a0:4a:5d:f3:17:aa:a1:79:da:8e:43:a8:13:21:10:
a2:f1:73:28:15:f6:ac:39:33:94:4d:73:a1:61:63:67:a6:9f:
6f:41:c5:8e:13:c6:9e:ea:07:81:dc:b2:fe:6b:94:df:22:06:
be:19:ed:33:32:de:62:8f:b1:0c:40:d8:1d:3c:4b:6d:28:76:
d4:e4:b4:3f:94:ab:9a:f3:af:82:a2:6e:0b:f7:f2:cd:5e:d2:
4c:af:5b:a1:5d:cb:4f:3d:73:0d:9f:9f:5a:c5:a4:7a:97:2c:
e8:14:35:cb:43:cb:62:90:07:2d:47:cd:76:e9:1c:9f:3b:af:
99:98:91:e0:f2:f6:b1:3d:52:8e:2a:f7:26:c6:c8:23:27:1f:
d0:dc:29:5a:7e:f1:c5:f1:16:04:bb:16:8c:a4:c6:d6:1b:c2:
c6:06:7c:9e:3f:02:c8:31:93:3b:84:05:b0:ae:ee:c0:26:0c:
86:b3:80:62:63:ee:d7:b9:67:ea:71:7f:50:1d:04:6f:c4:95:
95:b0:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:58:50 2025 by rpki-client