Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
File: 3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: KNdcG2i139lvEpdKAbUcJoI1b83MgMLP33Fp8kxKhsU=
Subject key identifier: 1F:F0:C7:06:9B:38:AD:E4:22:B0:03:76:98:82:15:68:73:D0:02:38
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 196DD1F643D8910DD8C5C3E86078553AEF504466
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 204170
IP address blocks: 185.222.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6d:d1:f6:43:d8:91:0d:d8:c5:c3:e8:60:78:55:3a:ef:50:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=1FF0C7069B38ADE422B003769882156873D00238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:7e:a7:a0:1c:de:1a:fc:25:c6:1d:d0:9e:
34:1c:fa:e4:04:f9:f2:20:f1:b7:21:2b:29:44:fe:
01:fe:54:ac:6e:8c:af:79:94:4f:14:d5:3a:42:6f:
b5:52:ac:24:2d:47:b7:31:11:eb:00:6d:df:a2:d4:
7f:45:c0:da:9e:b6:e0:04:d5:bb:d1:97:c5:47:ff:
76:ef:dd:8e:0c:c3:7f:3e:77:f0:50:42:af:cc:ab:
df:9c:d6:04:7b:29:ab:92:8c:12:d5:9a:4e:b4:7c:
d1:02:aa:02:13:f0:2c:b0:7e:08:51:39:24:65:6b:
10:46:85:ac:19:e0:79:58:fc:f2:06:dd:5a:4d:4d:
18:11:e1:de:2a:96:48:ec:b6:ad:b7:70:d0:04:93:
db:42:c6:e7:82:0d:d2:7b:82:a8:26:b6:35:28:28:
3e:4b:11:03:b6:ee:32:cf:0c:bf:0b:c1:6e:03:04:
d4:a8:5d:d0:8b:e0:b3:48:10:d5:9e:d9:5d:4e:91:
73:66:23:f9:2c:e7:00:d5:74:09:15:f9:50:eb:e3:
5c:e4:5d:4b:a9:86:b8:29:6a:7f:0e:d9:e0:df:fb:
02:c8:cf:11:6c:4c:be:79:5c:9d:ad:ba:3c:45:08:
05:53:6a:d7:0e:0d:42:01:f0:7c:e7:c9:c7:52:22:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:C7:06:9B:38:AD:E4:22:B0:03:76:98:82:15:68:73:D0:02:38
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
59:15:15:ec:1d:be:88:5f:53:51:2a:86:64:1a:aa:31:2a:aa:
a9:17:45:75:f0:0c:02:ca:d3:bd:87:44:31:73:2d:d3:44:3a:
64:38:80:1b:37:c7:c1:1d:99:4a:f4:94:cd:8e:1a:89:6b:03:
35:25:25:75:f8:89:87:e0:6f:4b:72:82:41:61:dc:ed:5e:e3:
ad:58:40:75:02:74:fc:56:89:fe:43:92:fa:1d:91:0a:4d:91:
ca:c7:67:49:fd:56:95:68:88:2c:e2:63:d1:ad:c2:1f:0d:9e:
01:bb:60:20:f7:96:77:2c:48:25:81:d4:bc:87:fa:4d:ab:c0:
24:71:67:8e:8f:4e:f3:83:a6:b1:ef:82:20:63:da:a0:a2:ad:
67:9a:49:33:6b:d1:d5:27:91:74:68:fe:9f:3c:b9:53:4a:ef:
80:86:6d:ab:62:ff:15:56:7a:1f:59:ce:72:d0:ea:2a:7f:63:
e6:37:ac:be:67:4e:96:ad:b8:62:29:81:d5:8a:73:06:1b:08:
27:ad:dd:1e:9f:b3:d4:4c:ce:82:fb:17:5f:84:b7:33:37:38:
b4:45:f3:48:7d:47:00:22:4a:78:9d:ad:e9:01:a7:1b:d9:b8:
19:03:6a:0b:b1:b8:dc:20:41:08:25:4e:2a:d8:90:a6:77:3c:
01:2d:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:33 2025 by rpki-client