Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jL/6+ffsPUM8hv6n51/xf2+t5Kjh2Yu2T3D/iFPzODQ=
Subject key identifier: 66:5F:65:AD:DC:20:8E:AC:B7:A1:CB:FC:E6:56:07:46:7A:40:CB:C3
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6D19400D5550DBCA873B438767559A5F1E35D16D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:19 +0000
ROA not before: Mon 30 Dec 2024 15:36:19 +0000
ROA not after: Mon 29 Dec 2025 15:41:19 +0000
asID: 136787
IP address blocks: 185.216.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:19:40:0d:55:50:db:ca:87:3b:43:87:67:55:9a:5f:1e:35:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:19 2024 GMT
Not After : Dec 29 15:41:19 2025 GMT
Subject: CN=665F65ADDC208EACB7A1CBFCE65607467A40CBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:15:1e:e0:48:f3:02:9c:3c:a8:50:b3:a0:
29:9b:07:a1:24:b4:6f:7a:e9:13:23:1b:73:3d:02:
26:82:5e:7b:05:35:fe:70:29:68:d1:a9:3f:71:22:
ee:c2:0b:e3:87:d3:e0:c7:7f:30:a6:33:de:6c:70:
98:00:dc:e1:2c:b8:58:40:b1:11:20:b6:29:4a:60:
2b:a3:6d:e6:38:83:d5:f3:3c:32:32:4f:c0:d5:9d:
90:cc:1b:a0:6c:7a:bf:c6:69:ed:ec:d4:80:c7:8d:
0c:9a:9e:e9:9e:bb:01:3c:c4:a0:fd:ba:c3:03:5c:
3a:ca:44:2d:57:6b:cd:32:29:8c:51:12:8f:42:00:
20:50:7e:1b:71:3d:80:c2:6f:93:e8:44:1e:62:f8:
c7:94:25:40:09:d6:71:4f:9a:df:93:92:b3:30:0e:
e0:37:70:e0:b1:3e:5f:d3:83:44:0b:3f:64:aa:29:
77:26:42:bc:34:1c:f7:f2:d9:3b:1c:64:39:c4:34:
15:8c:45:ae:f7:8d:9e:4d:26:06:73:bb:4b:8c:07:
f3:79:ac:b1:36:c6:52:68:91:cb:07:aa:7f:7a:2a:
f0:de:bd:9a:9f:e7:ea:53:82:9e:75:4f:71:3e:11:
5b:c5:9b:a7:61:9e:52:c8:54:b1:03:cf:5e:bc:55:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5F:65:AD:DC:20:8E:AC:B7:A1:CB:FC:E6:56:07:46:7A:40:CB:C3
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.230.0/24
Signature Algorithm: sha256WithRSAEncryption
75:98:4d:0c:5e:41:fd:01:ba:0e:19:41:41:7f:e5:ab:65:59:
6c:98:e1:ac:f0:50:6b:d2:62:1d:50:0c:f1:7d:b9:da:82:ab:
73:3b:d3:6f:b4:ef:c8:22:a8:1a:be:8f:54:59:62:dc:ce:30:
78:65:cf:0d:6f:8d:ea:b8:47:c8:c8:9e:a5:62:c3:2e:56:c2:
80:d8:e8:74:f6:a4:06:38:a3:a8:bf:44:41:17:47:47:5a:a2:
ae:5c:8e:5e:c6:c8:a0:00:43:8b:3f:75:cf:c1:80:9b:43:8c:
13:d9:43:3e:79:60:1b:30:9b:d8:7a:bc:d1:e9:8d:f9:1b:ae:
92:b1:65:e4:62:95:8c:0c:9f:bc:c2:ae:64:51:65:96:67:e7:
b1:59:34:cc:d9:86:5e:8c:dd:cb:c3:cb:3a:66:01:0e:bb:19:
2f:6c:81:ec:02:53:1c:85:8d:1c:01:56:62:ff:f6:75:ad:bc:
e2:47:01:4c:cb:6e:e8:4c:c6:1c:d0:da:d8:ae:f0:84:51:f1:
02:e4:07:50:ba:9f:e8:c8:ac:4a:69:14:84:e1:cd:0a:70:56:
79:28:24:a2:db:e1:ce:29:05:5d:76:55:bd:6a:bf:51:03:3a:
74:6e:4a:b9:b1:21:2c:0a:8b:d4:6d:ed:0e:7e:a8:be:06:60:
5a:63:83:50
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUbRlADVVQ28qHO0OHZ1WaXx410W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MTlaFw0yNTEyMjkxNTQxMTlaMDMxMTAvBgNV
BAMTKDY2NUY2NUFEREMyMDhFQUNCN0ExQ0JGQ0U2NTYwNzQ2N0E0MENCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUhUe4EjzApw8qFCzoCmbB6Ek
tG966RMjG3M9AiaCXnsFNf5wKWjRqT9xIu7CC+OH0+DHfzCmM95scJgA3OEsuFhA
sREgtilKYCujbeY4g9XzPDIyT8DVnZDMG6Bser/Gae3s1IDHjQyanumeuwE8xKD9
usMDXDrKRC1Xa80yKYxREo9CACBQfhtxPYDCb5PoRB5i+MeUJUAJ1nFPmt+TkrMw
DuA3cOCxPl/Tg0QLP2SqKXcmQrw0HPfy2TscZDnENBWMRa73jZ5NJgZzu0uMB/N5
rLE2xlJokcsHqn96KvDevZqf5+pTgp51T3E+EVvFm6dhnlLIVLEDz168VWzfAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUZl9lrdwgjqy3ocv85lYHRnpAy8MwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzYyZTMy
MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnY5jANBgkqhkiG9w0BAQsFAAOCAQEAdZhNDF5B/QG6DhlBQX/lq2VZbJjh
rPBQa9JiHVAM8X252oKrczvTb7TvyCKoGr6PVFli3M4weGXPDW+N6rhHyMiepWLD
LlbCgNjodPakBjijqL9EQRdHR1qirlyOXsbIoABDiz91z8GAm0OME9lDPnlgGzCb
2Hq80emN+RuukrFl5GKVjAyfvMKuZFFllmfnsVk0zNmGXozdy8PLOmYBDrsZL2yB
7AJTHIWNHAFWYv/2da284kcBTMtu6EzGHNDa2K7whFHxAuQHULqf6MisSmkUhOHN
CnBWeSgkotvhzikFXXZVvWq/UQM6dG5KubEhLAqL1G3tDn6ovgZgWmODUA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:04:54 2025 by rpki-client