Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203230383630.roa
File: 3138352e3139372e33312e302f32342d3234203d3e203230383630.roa (raw, json)
Hash identifier: Q8/pDRZp3jnFDVv2Znr+dCMwL8fQoKjJDYvkeDy2wYA=
Subject key identifier: 7A:E8:58:80:1D:4A:47:BF:38:9C:96:B7:46:8D:56:66:E9:5C:E8:47
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12FA1684876D16FB3BB2C68C652BD2AC2F9927B6
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203230383630.roa
Signing time: Mon 30 Dec 2024 15:41:21 +0000
ROA not before: Mon 30 Dec 2024 15:36:21 +0000
ROA not after: Mon 29 Dec 2025 15:41:21 +0000
asID: 20860
IP address blocks: 185.197.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fa:16:84:87:6d:16:fb:3b:b2:c6:8c:65:2b:d2:ac:2f:99:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:21 2024 GMT
Not After : Dec 29 15:41:21 2025 GMT
Subject: CN=7AE858801D4A47BF389C96B7468D5666E95CE847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:6c:ee:e8:0f:0e:82:2f:2a:46:b1:dc:75:
79:06:cb:0f:98:50:dd:e1:3d:28:62:d3:51:dc:5f:
e2:58:11:00:76:be:a3:b1:65:ff:ee:fa:fe:51:56:
af:75:be:db:06:3a:8f:3c:d5:66:f9:43:c4:8f:53:
11:16:71:82:ec:67:31:ad:11:84:c1:e3:07:5d:f5:
72:c3:34:f6:f3:e4:29:fe:0a:b4:79:fd:a4:cc:d0:
ed:cb:4e:90:eb:0b:31:65:c6:d0:41:61:d4:36:73:
31:3a:c8:7a:4a:15:59:48:ec:c0:a9:e1:d5:09:3f:
c1:d1:0f:aa:48:92:d2:b1:7b:7a:94:54:fb:ff:53:
1c:4a:dc:3d:4d:bb:1e:18:42:eb:90:d7:4a:4f:14:
6d:22:15:06:06:bb:96:80:b3:e4:21:c2:00:81:a4:
9a:1c:0e:07:1c:2b:af:b6:27:8a:03:20:2a:54:e4:
93:0f:e6:98:e7:ca:0f:37:81:61:a6:c6:f5:b7:cc:
93:0a:f6:c4:de:07:c4:77:02:84:70:a1:75:1b:39:
ff:01:0f:33:c1:97:50:44:56:50:04:ca:20:a4:74:
aa:96:c4:40:b0:e5:92:68:48:5f:31:da:f0:05:74:
b0:3f:7a:96:2f:f6:66:92:7f:c6:cc:fb:cc:09:89:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:58:80:1D:4A:47:BF:38:9C:96:B7:46:8D:56:66:E9:5C:E8:47
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203230383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:78:90:74:d9:0a:35:94:c4:4b:6b:66:58:37:0f:96:4f:e0:
3f:98:db:a7:9f:14:f4:5b:54:5a:97:93:65:78:6f:a4:3a:9d:
fd:46:62:77:ba:9d:2f:7d:64:10:ca:3e:b6:91:3d:56:bb:09:
a6:c4:f8:6e:e2:f4:4e:dc:74:2f:1f:37:fd:49:09:a9:41:ec:
02:2d:c9:3a:a2:89:5d:c5:78:06:72:6a:d2:ec:be:76:c6:a7:
9c:62:22:83:8c:b9:3d:90:95:d5:8e:6d:db:77:de:73:ea:92:
51:61:62:10:37:af:d2:92:34:f7:f0:c6:00:2f:88:e3:94:b7:
79:c2:4a:5e:e9:c7:5f:ac:94:2c:a6:52:b2:e3:e3:30:a8:b6:
4c:a9:a1:64:5b:53:ac:d8:ee:00:73:04:5b:6d:b3:a6:b0:d2:
e2:1e:4f:8f:ff:5e:6b:e6:86:29:91:0e:12:53:7e:61:3b:53:
6e:13:57:e7:0e:16:6c:32:be:a1:e2:d2:37:06:1b:79:b5:df:
eb:84:6f:dd:09:1d:70:05:ba:61:b3:70:68:2a:cf:2f:04:85:
70:79:ea:f6:41:28:28:e8:7a:86:d4:72:9c:21:36:20:df:54:
8d:13:86:dd:5e:0a:2a:5c:ef:65:c6:4c:ef:5a:3f:57:ab:3a:
9f:b2:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:24:55 2025 by rpki-client