Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: TdoCYqKxzZq+hQK5MAmNZqdYW0HbimfhimW2ugcbj0g=
Subject key identifier: CB:C3:F5:66:15:97:15:EE:66:02:08:FE:75:4D:F1:CC:36:8A:EE:08
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 17772741F7CBD444EEF26917FCE5D2524F91D552
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 136787
IP address blocks: 185.211.34.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:77:27:41:f7:cb:d4:44:ee:f2:69:17:fc:e5:d2:52:4f:91:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=CBC3F566159715EE660208FE754DF1CC368AEE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:78:d6:e3:5b:cd:02:e0:04:8e:3a:8c:1b:
a9:9d:e7:72:81:45:06:a7:4f:be:92:d9:2d:97:f3:
ad:e9:60:f9:b3:61:f9:66:50:69:12:fa:c1:2c:9a:
47:84:29:85:61:14:bd:0d:7e:9d:94:69:92:09:3f:
7e:6f:d4:5d:16:01:81:c5:df:8c:15:4c:f4:4c:2a:
c0:05:5b:eb:76:ae:21:38:45:92:d0:83:6f:ed:1f:
3c:dc:20:2f:05:fa:eb:ea:68:76:d1:aa:ab:9d:ad:
9f:2b:47:26:07:16:8c:d0:87:98:0b:aa:57:d2:c6:
e2:23:fd:72:3e:64:f8:da:b6:6b:f1:b1:ed:70:72:
5a:25:28:90:05:30:28:c5:25:51:f1:67:2b:0a:18:
63:f0:46:10:41:e6:7e:fe:b0:83:8c:9f:ad:60:68:
4b:40:1a:33:1c:2a:c6:6c:1f:a2:48:b4:1f:ef:9e:
4a:90:a4:ca:2c:3f:1e:39:4f:2e:5d:2f:fc:b9:5c:
1d:97:76:37:4b:3d:aa:9b:2c:34:28:e5:6a:30:bb:
ca:d3:ac:03:42:80:a0:dd:30:5e:5a:ca:87:8e:aa:
ef:57:ba:3a:a1:75:c7:c0:43:d0:47:3c:8c:9d:fa:
ff:e1:e9:49:aa:48:c0:72:96:36:d0:5c:4f:20:ef:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:F5:66:15:97:15:EE:66:02:08:FE:75:4D:F1:CC:36:8A:EE:08
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.34.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1a:0f:55:d2:47:87:0b:d8:7b:e7:e2:b5:68:d6:d9:16:7c:
89:58:bc:1b:77:55:09:6c:54:e7:b6:2d:44:1d:0a:27:d3:92:
8a:d3:b8:cf:b9:ab:a4:a6:7e:f8:0a:dd:12:ce:88:5c:d4:fd:
16:5e:09:6f:8c:37:f1:e5:73:fe:71:7e:a8:5b:9b:6a:83:6a:
ef:d2:2f:07:a4:11:cf:9f:46:7d:6c:fc:f0:62:37:b1:26:c7:
89:62:66:8c:df:e0:e4:66:b1:41:4b:b9:02:d1:f1:35:a7:61:
23:4e:b1:fc:ad:9e:60:f0:86:a6:3e:76:28:ba:e0:6f:4d:73:
0b:74:8b:28:91:28:a3:e4:1c:cc:7b:da:a6:54:2a:54:1c:a6:
29:6f:4d:47:32:1a:da:b7:13:2d:60:fe:bb:30:c5:18:79:b2:
71:d4:ab:23:93:83:cf:c5:36:1e:eb:0e:e7:0f:cf:03:a6:64:
7f:3c:c7:fe:50:1c:fd:57:4a:6e:91:47:bf:89:56:75:54:19:
08:4c:26:13:5b:0d:c0:ca:55:3c:de:f3:0f:68:db:d8:aa:fd:
06:2f:cf:6a:7a:e4:b4:2b:9a:01:66:de:70:83:91:fd:82:09:
dc:81:26:bb:f5:9c:ba:c8:73:9e:a9:95:f3:d9:8b:c6:ca:7e:
88:dc:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:40 2025 by rpki-client