Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa
File: 3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: //URpNxT3CnYKfVvHDlBQLNTO3Tia4OgOd7qD46KRiQ=
Subject key identifier: C7:73:C7:0E:6D:D1:BE:E0:C8:BD:43:E0:7C:FA:CB:61:B7:FD:78:7A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2325680D56E7E5945127EC16ED4D62608C6C7752
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 47583
IP address blocks: 185.214.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:25:68:0d:56:e7:e5:94:51:27:ec:16:ed:4d:62:60:8c:6c:77:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=C773C70E6DD1BEE0C8BD43E07CFACB61B7FD787A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:11:d1:22:af:64:90:9f:0b:4b:54:33:38:
66:dd:f7:c0:5c:e3:d0:51:1d:fe:83:f7:15:4d:75:
ad:56:2c:88:89:be:c2:7e:c3:c6:8a:42:b7:6e:8f:
4d:7e:9d:0f:cc:44:2b:f0:b5:14:4a:aa:db:6a:87:
7d:70:95:e6:04:64:ec:f9:e3:20:a9:06:fe:cd:36:
b7:4c:ba:52:ab:2d:65:f4:20:19:18:48:84:ed:53:
bd:c2:2a:22:28:f9:dc:01:ee:42:97:b7:22:5a:8c:
23:40:99:82:60:f6:ec:a0:4b:bf:eb:f0:1a:f3:5e:
05:f7:a2:7d:b6:6f:a5:c1:d2:5a:df:45:e1:d5:5d:
27:9f:95:65:28:c0:f8:40:28:77:fc:9c:56:f8:54:
f8:a0:36:3b:f4:69:d7:b7:97:69:08:08:2f:ef:1c:
74:54:82:95:38:72:23:c5:3d:03:5f:12:d5:38:87:
bb:e2:70:68:5e:2b:07:c4:39:f7:6d:05:b8:00:eb:
28:76:5c:27:5c:ff:73:34:40:d0:40:a9:8d:50:7a:
0d:6b:ed:e7:9d:a8:81:fb:ff:e2:39:4a:2d:4e:c2:
2e:5e:87:f2:44:57:dd:60:88:5b:fa:9b:57:d5:03:
e1:fe:52:2d:7f:bd:2d:31:fa:4c:60:cb:ae:ca:e1:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:C7:0E:6D:D1:BE:E0:C8:BD:43:E0:7C:FA:CB:61:B7:FD:78:7A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.126.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ff:df:c3:e4:7c:ec:2b:4d:1d:3b:48:41:e1:5e:43:cd:2d:
32:97:a6:8d:1d:df:b7:ef:13:43:75:7f:48:8e:e3:85:c7:ec:
3d:a0:54:a6:6b:88:67:94:05:8d:6e:aa:cb:fb:cf:59:c9:ba:
17:bd:29:e0:5e:70:8f:d7:c0:d2:d3:7b:62:36:c5:cc:e6:1f:
33:12:c3:4a:b9:ed:af:ca:95:4c:09:b4:25:bc:b7:47:8f:c1:
83:a2:b9:2c:e2:11:bb:e7:df:8f:39:06:4d:e1:be:2c:37:1c:
c1:f3:9c:04:4c:24:ca:7f:25:2b:8d:5f:f1:ea:2d:82:0e:59:
44:5e:78:f6:ec:df:0a:87:e0:77:5a:81:c0:a9:f1:95:7c:e2:
84:57:b9:66:ae:c6:19:9e:31:11:3c:d4:16:d8:ae:b4:ee:43:
f7:04:4e:3d:ee:f2:d1:0e:26:aa:f3:34:f8:39:95:60:85:bc:
3f:12:54:0f:70:b7:cc:4b:e6:10:c0:2a:94:47:7a:0c:35:c0:
6c:b7:98:34:29:08:14:e6:29:bc:20:d6:6e:74:61:9e:2e:a2:
6e:f2:17:2d:e1:5a:e1:76:8c:85:f9:23:12:da:06:da:4d:9f:
91:51:f3:77:f2:5f:9c:5c:38:ec:de:83:9e:32:76:34:27:6a:
a0:b7:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:44 2025 by rpki-client