Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa
File: 3138352e3232382e342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 4t/GB0010vHw2+ePP8boIBxaBq5G6D2jb+rf8dS1lOs=
Subject key identifier: A8:AE:0B:4A:AE:89:F3:22:AC:81:74:F0:E2:A7:7A:C5:E0:DC:DE:A6
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5D995C9D298AB7C877094254364605F7F5C4DBCB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 30 Dec 2024 15:41:17 +0000
ROA not before: Mon 30 Dec 2024 15:36:17 +0000
ROA not after: Mon 29 Dec 2025 15:41:17 +0000
asID: 204170
IP address blocks: 185.228.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:99:5c:9d:29:8a:b7:c8:77:09:42:54:36:46:05:f7:f5:c4:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:17 2024 GMT
Not After : Dec 29 15:41:17 2025 GMT
Subject: CN=A8AE0B4AAE89F322AC8174F0E2A77AC5E0DCDEA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:aa:af:5b:75:8a:8f:77:8c:ed:d8:0d:d0:
8b:3e:43:32:d4:15:dc:22:5a:6c:ac:56:17:48:5d:
95:d2:7c:ba:04:d1:c5:93:38:45:bd:5d:c7:09:bc:
be:1a:6f:3c:06:2b:99:82:78:06:05:e3:98:54:f6:
86:28:0e:c3:4e:0b:66:35:8f:5e:c0:09:aa:85:76:
e0:92:71:c5:d4:65:6a:4d:a5:27:1e:64:47:39:f6:
0b:30:34:f4:a8:c4:10:b9:fd:81:83:b7:a8:09:e2:
8d:c7:60:7c:ef:2f:e6:7a:c6:95:b1:b6:c9:24:0d:
5c:a4:9f:fb:eb:81:84:2e:19:45:d4:75:5b:83:26:
04:4c:7a:3f:8e:a9:25:31:f8:79:bd:7d:5d:5b:97:
6d:8b:4e:9b:39:ce:3c:77:57:93:9e:73:9e:de:a9:
82:a0:88:b7:12:19:00:49:1e:8b:33:d5:15:70:f2:
ef:fb:0b:79:11:f6:25:b0:6f:c2:cd:d9:43:cf:92:
29:0d:c5:de:12:da:16:fb:d1:45:f9:9d:aa:ac:76:
e1:47:0e:37:0e:e0:27:04:85:b5:a5:d3:e4:36:e1:
df:05:e1:f2:66:62:54:36:5d:10:e6:ff:1d:68:59:
42:e0:76:be:c5:96:78:9a:0d:40:58:3d:32:fe:6e:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:0B:4A:AE:89:F3:22:AC:81:74:F0:E2:A7:7A:C5:E0:DC:DE:A6
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:e9:17:cf:82:fc:5c:ae:d0:2b:de:38:8f:e3:b8:70:c2:f2:
b7:ea:8f:b3:43:fc:a9:9c:8c:f1:5f:95:dc:53:cf:80:61:47:
83:87:d0:e8:50:34:ae:57:4e:ac:de:c3:c9:7b:97:be:aa:5d:
6f:7a:22:05:c4:13:d5:f6:0d:cb:80:5f:58:68:2a:5e:55:b5:
2c:1c:48:cc:25:e8:ee:71:e5:76:35:40:4e:eb:4b:5c:bb:c4:
7b:82:52:29:ac:7c:c5:57:6c:26:0d:b7:8b:af:db:8b:f9:5b:
8c:51:58:3e:6e:79:5a:bb:90:57:cc:30:8f:f8:25:43:23:d2:
cf:7f:9c:8f:6d:91:83:cd:d4:db:64:32:db:30:3b:ff:67:b3:
a6:d9:92:52:74:f3:9a:10:33:0b:b1:04:af:fb:ad:4d:1d:4a:
37:d2:51:0b:58:39:68:55:45:5b:f2:04:53:91:95:dc:0f:b8:
cd:06:24:71:b3:99:04:50:09:1e:a1:40:24:e5:13:a4:e9:c4:
1b:6f:f0:ea:51:7b:02:0c:56:0e:23:cb:ee:8a:ca:5a:d0:be:
9e:8e:66:a8:cb:9b:9a:e8:2f:cc:d7:e9:40:7c:2e:6d:fb:4e:
09:a9:a1:ee:0a:11:ce:4d:c7:60:b5:5e:b4:c5:94:90:ac:92:
95:7a:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:29 2025 by rpki-client