Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
File: 3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: ASBwssCZBdFB8GO5pBKOWKk841OgngynIzu9CYwU+b8=
Subject key identifier: F6:C4:7F:66:D0:DC:13:4D:FD:14:3C:A8:25:93:4C:04:41:C7:3A:F2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 10ED0DDF5DCABBB7E055FC555EEE9A8EE3E2959A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:21 +0000
ROA not before: Mon 30 Dec 2024 15:36:21 +0000
ROA not after: Mon 29 Dec 2025 15:41:21 +0000
asID: 47583
IP address blocks: 185.206.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:0d:df:5d:ca:bb:b7:e0:55:fc:55:5e:ee:9a:8e:e3:e2:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:21 2024 GMT
Not After : Dec 29 15:41:21 2025 GMT
Subject: CN=F6C47F66D0DC134DFD143CA825934C0441C73AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:67:c9:f5:39:3b:48:bf:11:6e:19:af:6e:
f2:e5:5c:dd:5d:31:18:7b:7c:9e:5e:0d:c9:3b:0f:
f9:c3:71:a0:f4:7d:9c:16:d8:6a:32:61:92:33:20:
e4:6f:90:92:d1:b4:73:cb:8e:d9:84:86:0c:f1:de:
cf:61:89:c7:ed:ae:fd:7a:71:4a:2a:78:fb:b0:1d:
e7:97:61:91:ff:11:64:96:52:50:50:90:34:6c:12:
1e:c8:3f:ba:a7:7b:14:2e:15:30:23:3e:35:34:f2:
15:2a:07:b5:9a:a8:b8:d8:76:d4:bd:3c:34:c1:d0:
b5:42:02:6b:b1:8b:d4:a0:e5:99:9b:d6:ed:5c:25:
36:8e:d4:ac:05:00:ec:9e:16:ab:3a:e3:cd:2d:f6:
15:99:55:d0:8d:a5:2b:32:20:41:aa:a0:64:58:8c:
6d:3d:41:bc:eb:2a:25:73:dc:ba:40:94:b9:2f:1e:
49:2f:59:46:42:65:e6:a4:6f:75:99:bb:5a:13:01:
49:00:73:cc:e2:71:b3:79:64:ae:5b:48:4a:43:8d:
43:05:b6:20:59:22:dc:6c:48:69:3d:16:e9:99:39:
05:07:62:ee:68:27:db:a2:fb:1b:c5:d0:72:53:65:
dc:b6:97:63:3a:27:56:6a:70:03:22:e7:28:e4:6b:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:7F:66:D0:DC:13:4D:FD:14:3C:A8:25:93:4C:04:41:C7:3A:F2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.160.0/23
Signature Algorithm: sha256WithRSAEncryption
20:1e:91:43:08:e1:f9:4d:a8:f9:78:ce:99:0d:f9:f3:93:40:
8a:0b:48:03:5e:e2:44:1c:f5:07:60:22:e1:b2:b0:89:23:ee:
04:fd:ca:e4:d7:a9:30:3d:88:4f:20:70:ee:3e:d8:e0:22:04:
7c:df:aa:2b:da:14:3e:d1:88:38:11:45:37:ac:a1:16:40:e1:
ba:e9:92:8d:b9:fb:2c:54:46:3f:da:54:dc:3e:b1:03:dd:9d:
fd:96:28:e3:76:56:d6:b2:7b:ac:31:d6:1a:5e:a4:c7:d7:5c:
3f:55:36:5a:5c:32:70:dc:e0:d1:89:3f:f1:32:0a:3b:f7:3c:
7b:80:33:29:e2:02:ce:1a:c0:03:7e:ee:16:46:f0:6a:e7:ee:
21:d8:ad:68:e3:9d:90:7d:7b:09:e9:c2:b3:0e:ea:0a:7f:a0:
1e:88:6c:11:c6:af:a1:1d:94:4a:df:b0:26:f8:1b:68:03:42:
64:33:5d:b2:2c:57:79:86:b6:cc:af:95:b0:f7:bf:8c:69:ec:
f2:8f:ad:4c:fe:d2:0e:c9:ae:32:94:c7:97:89:b7:71:f0:32:
7a:4a:ab:5e:4a:74:d7:2b:d7:bd:c1:76:fe:11:7d:2b:6f:9e:
b4:08:f2:9c:1e:da:78:32:0e:41:6e:7f:a3:95:db:d5:4d:b8:
56:e5:f7:4c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEO0N313Ku7fgVfxVXu6ajuPilZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MjFaFw0yNTEyMjkxNTQxMjFaMDMxMTAvBgNV
BAMTKEY2QzQ3RjY2RDBEQzEzNERGRDE0M0NBODI1OTM0QzA0NDFDNzNBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSI2fJ9Tk7SL8RbhmvbvLlXN1d
MRh7fJ5eDck7D/nDcaD0fZwW2GoyYZIzIORvkJLRtHPLjtmEhgzx3s9hicftrv16
cUoqePuwHeeXYZH/EWSWUlBQkDRsEh7IP7qnexQuFTAjPjU08hUqB7WaqLjYdtS9
PDTB0LVCAmuxi9Sg5Zmb1u1cJTaO1KwFAOyeFqs6480t9hWZVdCNpSsyIEGqoGRY
jG09QbzrKiVz3LpAlLkvHkkvWUZCZeakb3WZu1oTAUkAc8zicbN5ZK5bSEpDjUMF
tiBZItxsSGk9FumZOQUHYu5oJ9ui+xvF0HJTZdy2l2M6J1ZqcAMi5yjka8w5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU9sR/ZtDcE039FDyoJZNMBEHHOvIwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMwMzYyZTMx
MzYzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5zqAwDQYJKoZIhvcNAQELBQADggEBACAekUMI4flNqPl4zpkN+fOTQIoLSANe
4kQc9QdgIuGysIkj7gT9yuTXqTA9iE8gcO4+2OAiBHzfqivaFD7RiDgRRTesoRZA
4brpko25+yxURj/aVNw+sQPdnf2WKON2Vtaye6wx1hpepMfXXD9VNlpcMnDc4NGJ
P/EyCjv3PHuAMyniAs4awAN+7hZG8Grn7iHYrWjjnZB9ewnpwrMO6gp/oB6IbBHG
r6EdlErfsCb4G2gDQmQzXbIsV3mGtsyvlbD3v4xp7PKPrUz+0g7JrjKUx5eJt3Hw
MnpKq15KdNcr173Bdv4RfStvnrQI8pwe2ngyDkFuf6OV29VNuFbl90w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:14 2025 by rpki-client