Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa
File: 3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: x5v2U1x/Esmdm4LbT92V3hyIHmEaQ5tVFrySHzin1sw=
Subject key identifier: 80:16:06:BE:D5:CD:3C:98:70:57:C5:71:FF:D2:E9:A4:97:24:A7:4B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 03FE0665713F3E1117A06BACA1EE6CBF3644F6A2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 47583
IP address blocks: 185.237.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fe:06:65:71:3f:3e:11:17:a0:6b:ac:a1:ee:6c:bf:36:44:f6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=801606BED5CD3C987057C571FFD2E9A49724A74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:be:65:d5:7b:a4:a6:04:3b:63:9c:2e:44:
bf:e1:2a:38:74:8d:3c:9e:86:05:84:d1:5b:98:79:
36:4c:ac:72:e1:5f:5d:66:87:d3:4b:28:b2:07:ae:
3f:c5:1c:92:6d:af:ab:48:42:0e:17:75:77:07:5b:
b3:d5:6b:51:de:d2:ec:48:2c:5a:de:07:c8:7e:29:
b8:28:f6:79:8f:9f:38:3d:38:26:35:1c:27:05:b9:
42:90:6d:aa:c9:89:ee:2b:4e:f5:ff:ae:93:74:f7:
87:c1:e7:f3:3f:fd:79:b2:c1:b9:be:d6:f7:03:3c:
50:76:4c:ba:5e:51:88:1d:7c:cd:14:8f:4d:c1:fa:
8f:68:a9:5a:4f:e0:79:de:30:9b:6a:c5:51:99:67:
86:40:68:01:28:62:c7:5b:d2:23:49:78:88:3f:f5:
e8:94:90:5f:42:e9:92:fe:39:1a:5a:18:2c:ce:57:
9d:90:46:27:9e:fb:e9:55:65:13:68:78:2c:c1:b3:
7f:5b:49:88:51:0d:1a:dd:0f:1c:05:3d:a9:a3:02:
41:b4:b6:52:80:18:ea:a1:01:d1:5c:53:b7:de:9b:
01:11:33:ab:7b:56:c6:ed:a2:6a:63:9f:3b:88:40:
03:b8:12:05:2e:c4:6f:29:16:bd:9a:49:26:65:5a:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:06:BE:D5:CD:3C:98:70:57:C5:71:FF:D2:E9:A4:97:24:A7:4B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.144.0/23
Signature Algorithm: sha256WithRSAEncryption
01:9d:5b:89:a3:fd:fc:f9:90:7c:1c:01:2c:48:fa:a2:de:0d:
91:33:26:1b:8a:5d:21:86:c5:c4:0b:08:af:b2:74:aa:1f:79:
7b:e6:e7:59:f0:eb:b6:16:42:f9:64:57:e3:6d:77:9e:a4:cb:
ea:19:5a:6b:c5:8f:f3:3e:40:32:be:d4:b1:90:7d:39:f0:00:
4b:68:8e:e4:a4:49:96:8e:ea:9d:e8:ff:ac:46:7e:74:ae:f9:
25:56:88:33:8e:41:1f:fb:e3:5c:01:dc:ba:fc:ce:7f:f1:c7:
00:1f:a9:89:27:3d:c7:7e:73:bc:15:a9:79:42:e8:30:6a:d1:
26:34:70:79:24:af:49:d3:13:3f:3e:5f:19:29:d7:5d:2c:2f:
cf:ae:27:ed:bd:4d:41:17:53:a5:f1:d4:bd:67:96:f1:05:fc:
7c:da:8f:f0:21:77:9a:71:99:e9:29:d8:05:e4:a1:ce:e4:c9:
fc:e3:d1:90:4d:72:db:0f:8b:02:be:98:18:c5:10:f2:34:3f:
26:ee:df:3f:8e:70:06:8d:9c:03:b6:81:f8:01:97:80:46:fc:
6d:5a:a4:31:87:53:ba:e6:57:34:b9:9b:78:79:73:e0:f1:09:
75:da:a6:75:73:a2:0a:c0:af:52:e8:1e:7a:67:e0:4d:fc:fe:
07:6b:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:46:42 2025 by rpki-client