Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa
File: 3138352e3231332e32372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: fOZmMl2hQPIracgJ5WiQNsjXxRCBQ/KQlfk23rtrpU4=
Subject key identifier: 6E:93:14:A9:29:0C:9E:7E:A7:6F:78:41:37:23:CB:AC:96:C1:B4:86
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 74D77A229089FEB7B85C328D81EBB6B0B3B20C3A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 30 Dec 2024 15:41:15 +0000
ROA not before: Mon 30 Dec 2024 15:36:15 +0000
ROA not after: Mon 29 Dec 2025 15:41:15 +0000
asID: 51167
IP address blocks: 185.213.27.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d7:7a:22:90:89:fe:b7:b8:5c:32:8d:81:eb:b6:b0:b3:b2:0c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:15 2024 GMT
Not After : Dec 29 15:41:15 2025 GMT
Subject: CN=6E9314A9290C9E7EA76F78413723CBAC96C1B486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:5c:3c:c1:27:af:aa:56:35:b7:92:84:b9:
45:66:18:92:41:7d:53:ea:a2:c3:f1:62:df:78:c6:
59:58:f9:62:5c:cf:58:07:e9:4e:e6:70:9c:d8:2a:
52:7f:a3:92:23:cc:b5:09:a3:5a:b3:b8:4a:44:54:
31:e9:4d:40:fd:dd:30:da:2d:c8:62:eb:6c:7f:d6:
99:61:e7:71:ee:02:a6:e1:fd:18:4a:c0:d6:c6:8c:
c0:b3:7d:0a:62:a1:b2:d5:9a:18:1f:b0:8e:b1:2e:
4e:da:87:56:20:93:e1:0a:85:3c:bc:91:ab:29:5b:
57:51:f9:92:58:72:77:55:9e:d0:c6:96:38:e6:53:
5d:eb:35:20:03:3a:fb:c6:2a:6c:4d:6b:8a:a3:1f:
00:c3:3f:c9:d9:24:a1:f7:d9:c9:c1:1f:74:af:37:
aa:19:27:7e:82:74:d0:b4:b0:94:a4:2d:68:28:47:
87:ee:22:55:64:87:4c:27:ea:0c:b9:b2:7b:9d:f0:
ee:ee:e1:5b:79:7b:c6:07:13:c6:f0:83:30:ec:b8:
ae:48:95:85:d0:82:78:a4:3a:a8:ae:0c:71:d3:0d:
85:0c:4d:76:68:a4:ba:9d:a6:19:09:93:d1:b9:c8:
d1:6b:71:fd:c4:5e:9f:e0:e9:e7:1e:ba:7b:98:9b:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:14:A9:29:0C:9E:7E:A7:6F:78:41:37:23:CB:AC:96:C1:B4:86
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.27.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b1:ef:71:ce:8c:a2:44:3d:b7:2a:42:4c:02:c5:7e:2b:7e:
48:d3:d6:07:43:fa:6a:dc:38:95:05:1c:5a:de:a3:5f:71:7d:
cf:aa:d9:a3:18:04:5e:eb:c4:33:8f:4c:03:43:81:4a:57:66:
16:66:4c:80:0f:5a:22:c9:ba:85:c8:c3:d6:23:a9:8a:c9:c3:
62:74:e7:20:c1:b8:00:aa:a0:47:b9:e0:28:66:b9:7d:d9:cb:
90:94:38:c5:36:77:34:57:d2:db:84:44:33:66:3e:ae:e4:89:
ac:f6:a7:94:ac:a2:c9:03:31:cf:95:5b:8c:10:ee:6d:e4:b7:
6b:ad:d5:0d:6b:df:23:ee:99:37:c3:27:02:3b:00:fc:60:ce:
b1:93:eb:88:3b:5a:61:17:98:c4:ab:3e:26:01:1b:a9:45:33:
36:94:78:a4:a2:1c:e2:5e:fc:c9:e5:68:6b:47:40:34:c4:c0:
4e:9f:2c:52:d3:49:db:8d:60:32:ef:bb:6f:1f:3b:a8:9b:9d:
77:89:87:78:73:23:af:59:04:ad:be:63:6e:08:19:2f:5b:3b:
4d:43:1e:62:8e:45:46:f6:70:e3:a9:14:df:6c:e7:c7:6c:e6:
38:87:b0:ed:0f:22:7d:02:c6:7f:6a:44:dd:a5:d2:b2:d7:38:
5a:fb:77:f2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdNd6IpCJ/re4XDKNgeu2sLOyDDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MTVaFw0yNTEyMjkxNTQxMTVaMDMxMTAvBgNV
BAMTKDZFOTMxNEE5MjkwQzlFN0VBNzZGNzg0MTM3MjNDQkFDOTZDMUI0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe71w8wSevqlY1t5KEuUVmGJJB
fVPqosPxYt94xllY+WJcz1gH6U7mcJzYKlJ/o5IjzLUJo1qzuEpEVDHpTUD93TDa
Lchi62x/1plh53HuAqbh/RhKwNbGjMCzfQpiobLVmhgfsI6xLk7ah1Ygk+EKhTy8
kaspW1dR+ZJYcndVntDGljjmU13rNSADOvvGKmxNa4qjHwDDP8nZJKH32cnBH3Sv
N6oZJ36CdNC0sJSkLWgoR4fuIlVkh0wn6gy5snud8O7u4Vt5e8YHE8bwgzDsuK5I
lYXQgnikOqiuDHHTDYUMTXZopLqdphkJk9G5yNFrcf3EXp/g6eceunuYm7JpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbpMUqSkMnn6nb3hBNyPLrJbBtIYwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzMyZTMy
MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
udUbMA0GCSqGSIb3DQEBCwUAA4IBAQCAse9xzoyiRD23KkJMAsV+K35I09YHQ/pq
3DiVBRxa3qNfcX3PqtmjGARe68Qzj0wDQ4FKV2YWZkyAD1oiybqFyMPWI6mKycNi
dOcgwbgAqqBHueAoZrl92cuQlDjFNnc0V9LbhEQzZj6u5Ims9qeUrKLJAzHPlVuM
EO5t5LdrrdUNa98j7pk3wycCOwD8YM6xk+uIO1phF5jEqz4mARupRTM2lHikohzi
XvzJ5WhrR0A0xMBOnyxS00nbjWAy77tvHzuom513iYd4cyOvWQStvmNuCBkvWztN
Qx5ijkVG9nDjqRTfbOfHbOY4h7DtDyJ9AsZ/akTdpdKy1zha+3fy
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:14:45 2025 by rpki-client