Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa
File: 3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: CYwjS9ImFduVKhSgi6gOYmOgDH8c9NirPTi0BNpIe4g=
Subject key identifier: C8:98:96:56:55:F1:60:14:9F:97:D4:94:FA:A8:73:7E:51:8F:58:F2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5F9A8A10E33907FF6D7114D19F7E8D8F249BE6B2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa
Signing time: Mon 30 Dec 2024 15:41:23 +0000
ROA not before: Mon 30 Dec 2024 15:36:23 +0000
ROA not after: Mon 29 Dec 2025 15:41:23 +0000
asID: 204170
IP address blocks: 185.211.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:8a:10:e3:39:07:ff:6d:71:14:d1:9f:7e:8d:8f:24:9b:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:23 2024 GMT
Not After : Dec 29 15:41:23 2025 GMT
Subject: CN=C898965655F160149F97D494FAA8737E518F58F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:48:2a:60:d8:ff:16:58:71:28:74:ba:35:e2:
e6:2c:d2:ac:d8:22:bc:cc:ed:23:79:98:65:46:50:
d0:9f:ee:5d:bd:ed:fd:24:4b:ce:dd:e7:f4:77:f0:
aa:50:97:d7:f4:0c:a9:1e:49:d6:bf:ef:60:f5:27:
d4:fd:39:bf:94:fd:52:9b:aa:cc:fd:dc:78:de:95:
ca:82:31:ef:99:0e:5c:aa:59:19:22:14:d9:d1:20:
a6:89:97:b3:b0:b6:65:d5:a6:b8:bd:75:f2:66:23:
39:d7:f3:3f:55:6d:9b:50:fe:95:c7:71:4f:a7:dd:
24:d2:1a:5c:03:c7:f4:36:b6:25:a7:e2:b8:33:59:
fa:70:66:99:af:0d:da:4e:12:89:c6:f8:eb:d6:83:
c3:5a:1b:c6:89:12:8a:fc:bb:55:78:16:ed:43:84:
e3:c8:5d:80:f7:91:c3:88:02:66:79:50:a8:46:68:
ea:d8:26:49:45:c4:9a:b2:1b:d4:3d:1e:f5:b6:10:
80:3a:2f:33:60:dc:fb:0d:78:0c:66:22:0b:34:62:
ab:7f:de:ed:5e:5a:50:9c:5f:31:2d:28:85:0e:14:
02:47:70:e9:99:d4:8a:90:d1:a7:00:e6:d4:a8:b2:
72:8e:67:ac:df:a1:41:06:68:eb:bb:0d:99:35:4d:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:96:56:55:F1:60:14:9F:97:D4:94:FA:A8:73:7E:51:8F:58:F2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8f:55:c4:bb:4f:06:6c:f6:c5:b2:7e:55:69:53:f9:21:be:
d7:2b:01:ba:4e:4e:3d:88:65:d1:68:e2:57:f3:75:fa:cd:dc:
25:ce:c8:dd:a9:a3:5c:52:09:f2:96:a9:41:65:a1:90:50:f8:
52:ea:28:b2:da:e5:b1:6c:e9:03:8b:ea:72:b1:95:93:8c:e4:
98:9e:b0:67:5a:e5:59:ce:22:c7:3a:b7:4a:b5:ed:0d:38:ff:
86:cf:cf:12:c1:03:f1:fc:a7:fc:6b:5a:5d:3b:c3:a8:a7:ce:
29:73:22:e2:9d:9d:ce:36:ad:a4:e4:95:9b:87:c4:7d:5e:d6:
46:c3:a6:b4:9a:ec:58:9c:a9:aa:41:99:44:70:5f:8a:3a:23:
e7:12:80:5c:97:ab:45:f9:13:64:d4:75:2d:96:eb:39:4d:f2:
08:45:68:b0:58:c0:48:9b:db:3a:68:cd:7e:23:0e:88:6e:4b:
cf:69:37:27:2c:b3:a5:cc:05:86:19:1c:3b:f9:cb:df:ee:a8:
22:01:31:b5:49:90:80:81:35:94:c5:3e:40:e7:a5:ef:ce:37:
f0:1e:58:da:2c:db:8f:1d:43:11:e6:84:7f:5f:b8:3f:e0:6f:
04:9b:1f:79:5e:50:a1:9b:4c:ef:19:a0:ff:ca:df:82:40:3f:
5e:f1:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:25 2025 by rpki-client