Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa
File: 3138352e3233322e31342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: ZpuG8yTDLVdlia2QprbV6NeU4ROpdjMqDqznH/tfwRM=
Subject key identifier: 5F:EC:17:9B:51:5D:37:79:5D:5D:E2:11:F9:A9:3C:FE:36:A7:36:2B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 775BA99B451514958D4E92D17285E13194E201DE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:23 +0000
ROA not before: Mon 30 Dec 2024 15:36:23 +0000
ROA not after: Mon 29 Dec 2025 15:41:23 +0000
asID: 47583
IP address blocks: 185.232.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5b:a9:9b:45:15:14:95:8d:4e:92:d1:72:85:e1:31:94:e2:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:23 2024 GMT
Not After : Dec 29 15:41:23 2025 GMT
Subject: CN=5FEC179B515D37795D5DE211F9A93CFE36A7362B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:b8:1f:e7:ac:27:e4:0b:fa:f5:e9:42:99:
a7:bd:2d:be:1f:3b:4c:13:e2:57:de:22:3b:4c:6d:
48:86:fc:5c:f9:7f:22:69:a4:81:ef:47:8a:8b:5b:
ab:0a:20:27:f8:d2:34:61:a5:fa:19:2b:42:e1:39:
85:33:8e:35:7e:72:83:1b:f0:0c:52:ab:d0:30:92:
4b:6e:98:16:a4:b1:cc:cd:c2:9d:7f:da:72:dd:35:
cd:39:46:91:98:30:41:e5:ed:e0:99:27:d9:2f:a6:
5e:a7:7b:5b:7d:61:ba:aa:fe:c3:b9:9f:c5:f0:a3:
93:76:bb:c7:82:bb:40:7d:9f:8c:b7:c6:95:32:47:
cf:b3:be:e4:4c:84:0a:35:03:45:ce:cc:31:c1:09:
4c:9b:dd:6a:35:6f:ed:f6:8c:c6:8d:6e:c5:69:67:
70:2b:8d:b9:5d:9f:b4:6c:12:a1:81:54:9f:5e:92:
44:3e:dd:3c:89:f0:58:2b:db:ef:ba:56:1f:f6:f1:
f3:21:b0:b2:ec:cb:58:82:70:6f:23:f9:fc:92:c2:
b8:06:cc:34:8c:0c:23:68:be:36:d3:59:04:ee:ce:
06:ce:01:4e:9f:ec:94:4e:1a:b5:b5:e1:3e:e7:14:
4a:20:41:f1:32:59:82:37:9f:b7:84:a4:d6:8a:2a:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:17:9B:51:5D:37:79:5D:5D:E2:11:F9:A9:3C:FE:36:A7:36:2B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2b:7a:f8:a3:d2:05:47:44:12:a8:7c:58:3f:42:dc:0f:7f:
c1:04:c3:3a:97:56:a0:b4:f1:e1:2b:63:3a:82:68:1d:78:1c:
b4:90:3d:70:2f:47:89:9d:b0:2a:0d:04:87:42:2d:88:79:20:
c7:86:76:28:07:e6:14:74:3a:1a:dc:c2:48:64:a1:e0:d7:25:
a7:29:32:39:bd:66:6e:47:c5:85:1a:5c:fc:f6:1c:01:ae:c4:
45:85:29:28:f8:d1:17:26:74:58:b2:15:26:11:cb:31:c0:5f:
94:c3:38:88:3e:e2:2e:91:ef:0e:1d:0b:e4:b2:be:17:cb:9b:
b2:f1:26:53:19:9d:93:7e:5d:69:e7:a0:af:4d:76:10:35:bd:
46:dd:2e:67:f6:10:9f:28:2b:25:3e:4c:7f:fe:40:5a:1d:17:
dd:d4:df:49:8e:91:9c:33:17:28:af:c5:76:62:da:27:d3:b2:
f1:01:5c:0f:7d:a4:ba:06:86:35:48:e3:93:9b:87:ed:26:e8:
be:04:b9:26:bb:f3:ee:6e:b2:0b:f0:36:01:64:18:af:77:6f:
81:42:7d:d0:34:dc:c4:f0:36:81:8e:3a:c3:02:3e:1b:92:e0:
c4:fa:6e:ba:28:b1:0d:61:a9:40:3c:3f:fc:91:11:41:9c:c6:
43:43:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:15 2025 by rpki-client