Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa
File: 3138352e3139362e32332e302f32342d3234203d3e203230383630.roa (raw, json)
Hash identifier: gc2R2l5GQ1QK6GS4mxFec8eb/gv9BgSvvwcW5J31rWw=
Subject key identifier: A0:31:93:2B:BC:B1:C9:2E:80:93:36:CD:62:E2:A2:FB:DD:66:0D:92
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12DAF6778DA03CEF3C0ACFC7DB5030FFE4B657DF
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 20860
IP address blocks: 185.196.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:da:f6:77:8d:a0:3c:ef:3c:0a:cf:c7:db:50:30:ff:e4:b6:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=A031932BBCB1C92E809336CD62E2A2FBDD660D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:91:b5:d6:3d:1f:80:91:63:33:96:e8:0d:
ef:a2:63:d1:23:70:3f:40:f4:df:e9:87:63:e7:8d:
23:5f:53:d8:dc:6b:8c:b3:06:3a:e4:f8:50:16:32:
7f:13:48:21:af:10:3a:5c:27:85:0c:7c:09:b2:a8:
51:a2:3b:fe:18:27:88:5c:a2:19:2e:4a:e7:55:7b:
fe:d3:a5:68:c8:6e:84:57:96:4c:30:28:79:20:b7:
0f:6e:e9:16:74:ee:50:16:f1:d1:a1:26:06:29:87:
9d:6a:c5:9c:30:30:51:75:55:e4:3f:f8:d6:00:71:
0a:19:d6:de:46:84:04:2d:d4:0b:62:24:6a:f6:51:
ba:85:09:1d:17:e7:eb:7f:cf:85:58:fd:82:ae:af:
9c:0d:ca:9e:52:b4:be:81:56:dc:4e:88:62:e9:7a:
ec:78:bf:e2:b8:fa:b4:fe:42:ae:98:71:bd:18:36:
d9:df:ae:04:e0:46:c5:db:45:b4:e3:34:06:23:f9:
51:3f:8a:d2:1b:8a:58:98:2c:cb:f3:f7:a7:84:e4:
6e:df:bb:41:7b:5f:77:1d:4b:a9:93:4b:20:8a:14:
3f:6d:a0:a5:2e:1f:38:24:cc:ac:c6:aa:1a:a6:eb:
f8:0d:d3:4f:95:ea:33:e6:35:48:ca:8c:c9:d1:80:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:93:2B:BC:B1:C9:2E:80:93:36:CD:62:E2:A2:FB:DD:66:0D:92
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.23.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0f:d2:9f:03:8e:33:0f:b9:50:7a:f6:21:71:1d:2a:47:d8:
02:80:f3:45:a5:85:7d:db:20:96:31:3b:f7:8c:44:7d:35:54:
94:af:9d:df:9d:e3:0d:72:3f:22:8e:9a:9c:4b:55:03:88:10:
d7:6e:c5:de:6c:d4:d1:f3:ff:f4:75:4b:ec:bd:be:c9:a0:cf:
86:7b:1f:f0:62:46:77:81:5d:d2:af:f9:a3:d7:54:f7:b0:15:
5c:82:2b:61:49:de:69:df:f4:3f:8b:1e:f4:01:59:62:a5:70:
24:a5:b2:a1:b4:ac:4f:51:c8:de:4d:9e:ae:41:5c:a8:9d:9a:
54:c7:1e:f0:b9:4e:d0:77:d6:81:cd:50:0b:ba:93:90:24:53:
e6:8d:a6:e2:4b:a8:fb:b3:38:34:d2:f3:4b:9a:91:76:62:9a:
2b:61:a2:25:73:04:63:cc:15:1a:28:38:fc:72:4f:9d:cf:d3:
ab:69:17:8f:65:6f:1f:48:ce:c1:91:32:d7:10:4b:ea:98:e7:
9d:70:4c:d0:5d:2e:f2:f9:be:8a:00:01:ac:f9:14:9e:aa:b6:
15:0f:20:e5:0f:49:02:04:bb:c6:f9:2c:41:eb:6a:41:37:43:
22:06:24:e3:14:76:19:b4:dd:1c:4c:9a:ad:3e:4b:3d:ff:1f:
ec:ab:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:43 2025 by rpki-client