Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa
File: 3138352e3139382e32372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: aXtB7wA77p6Of1lBHVtk0tHNm0y6a3fV9chOmCNc38I=
Subject key identifier: 0D:13:93:88:1E:B2:5A:C2:AB:7D:73:10:09:C0:EF:32:6B:74:BC:48
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3CF025EF0308636E91A9CE5E6E9B367FEC0BB194
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 30 Dec 2024 15:41:19 +0000
ROA not before: Mon 30 Dec 2024 15:36:19 +0000
ROA not after: Mon 29 Dec 2025 15:41:19 +0000
asID: 51167
IP address blocks: 185.198.27.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f0:25:ef:03:08:63:6e:91:a9:ce:5e:6e:9b:36:7f:ec:0b:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:19 2024 GMT
Not After : Dec 29 15:41:19 2025 GMT
Subject: CN=0D1393881EB25AC2AB7D731009C0EF326B74BC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:3f:e1:35:b3:89:f5:ed:d8:72:af:86:c4:
fe:71:f7:5c:de:f7:05:05:40:04:78:54:d1:7c:68:
16:ab:66:83:61:4d:a2:3e:46:99:0d:c2:e3:31:06:
5a:49:ae:99:2d:07:6e:8b:3f:97:85:48:56:8f:84:
06:6c:7f:ce:ec:8a:76:43:ec:6d:bc:5b:f9:69:21:
f3:f9:bb:f5:d9:a4:8f:5e:6e:5f:f6:78:c9:37:d3:
02:9c:f9:69:bc:ca:17:8f:7d:59:6c:ab:60:c4:54:
00:00:9c:bd:fc:6e:43:57:32:57:a0:2e:8e:19:70:
01:71:62:88:0b:04:c0:28:03:7c:c1:80:dc:b9:66:
9b:49:78:03:2b:87:30:12:91:bf:77:03:ac:9a:76:
fa:c3:75:76:98:e4:e4:60:c7:16:cd:64:3f:fe:3f:
ee:18:de:0c:99:a3:f7:78:a6:9f:ac:24:84:8a:93:
06:a6:7b:ca:9a:8e:f5:cf:3c:0f:d4:23:53:84:1d:
6e:3d:f8:1b:5e:91:e3:75:ce:e8:0a:b9:cd:25:00:
6c:eb:a7:04:96:ce:8a:2a:d9:5b:81:ad:7a:2f:52:
02:d2:32:c5:f5:5e:2d:3a:ba:f7:7f:99:0c:6e:e1:
9c:d6:83:c9:bd:60:57:04:d6:78:fd:65:38:6c:97:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:93:88:1E:B2:5A:C2:AB:7D:73:10:09:C0:EF:32:6B:74:BC:48
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.27.0/24
Signature Algorithm: sha256WithRSAEncryption
73:da:f5:b7:77:b7:91:3d:76:4f:66:49:ec:0c:6d:df:d3:3d:
ac:f2:2f:9f:b8:e1:b2:a5:66:94:96:6e:79:63:50:c6:21:97:
5e:30:0b:5a:7f:29:11:02:1a:c3:1b:53:73:41:1b:3d:e9:d8:
44:a9:b1:34:07:07:97:ea:08:b5:6c:7c:67:80:3e:5c:aa:56:
e5:03:06:ad:22:e9:fa:74:33:87:61:fe:14:b9:44:39:3b:1d:
ee:6e:59:48:9a:43:ec:da:e9:1d:98:9d:33:02:8d:a8:b2:44:
49:6a:e6:27:94:11:33:fc:43:99:b8:94:0f:d3:b6:c3:70:2d:
34:38:d6:9f:64:14:12:94:ee:dc:04:6a:62:94:6c:52:c5:3e:
41:06:45:ee:22:00:f7:be:13:e0:15:0a:93:5f:3b:58:e2:d6:
1f:3f:67:25:3e:da:57:8d:bb:1e:3d:e1:a0:b7:b0:0c:8f:2d:
79:82:8a:d2:58:9d:7d:c1:20:e9:21:06:ba:e7:df:65:0b:5e:
11:c4:17:dd:1c:15:7a:79:fc:84:99:6f:08:23:79:f8:e2:35:
f6:b2:dc:98:28:2f:72:97:5b:ee:b0:4d:c2:e0:e2:58:14:61:
1e:f6:89:3e:fa:9f:55:2a:74:ea:c4:b2:0f:7f:cc:20:86:8a:
ab:e6:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:19:09 2025 by rpki-client