Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
File: 3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa (raw, json)
Hash identifier: /3SPW+I/zVdOiGoipFcJHmiAGkQ5wMhaECXVIlufRhI=
Subject key identifier: 16:85:23:AF:2F:C0:91:9B:CB:A1:92:0B:2F:C3:DF:56:81:CE:87:A4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 20D828F613184DDB7967BE359E3430B514A13B22
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
Signing time: Mon 30 Dec 2024 15:41:19 +0000
ROA not before: Mon 30 Dec 2024 15:36:19 +0000
ROA not after: Mon 29 Dec 2025 15:41:19 +0000
asID: 207594
IP address blocks: 185.241.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d8:28:f6:13:18:4d:db:79:67:be:35:9e:34:30:b5:14:a1:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:19 2024 GMT
Not After : Dec 29 15:41:19 2025 GMT
Subject: CN=168523AF2FC0919BCBA1920B2FC3DF5681CE87A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:74:2c:0e:ff:cb:5e:c8:03:71:88:fa:c0:
8c:22:b3:1a:8a:cc:de:c9:54:92:ca:d7:d8:60:63:
27:68:1e:83:8e:59:b3:65:8a:ca:22:8c:d8:71:53:
ed:c9:ea:95:a8:27:db:ae:6b:37:d3:31:83:ac:e1:
52:de:a7:f1:9c:a7:6e:c3:3a:07:99:d5:0b:76:17:
19:53:03:29:31:1a:4b:cb:2b:74:79:5c:61:fe:34:
c4:e3:8b:09:53:16:25:5f:28:d5:e5:3d:b6:54:e1:
a2:30:cc:07:90:0e:3b:bc:61:b7:8b:a3:e1:7b:5b:
7f:74:a0:fc:ff:50:d7:9b:ea:53:7c:12:e6:3c:cf:
a0:f9:c6:41:31:33:d5:40:ea:36:ec:4d:da:42:44:
c2:7e:b0:58:fb:90:18:d2:4a:0c:8a:de:9e:84:08:
f1:4d:25:6d:d0:78:fb:9d:7c:3d:9b:4d:22:c2:f6:
fc:02:f6:e4:12:9a:7a:4d:c0:67:30:ec:31:6c:e8:
c6:d2:64:e4:a0:93:98:7f:f0:5e:24:fe:d3:d8:c4:
89:7b:f3:22:85:c2:31:1f:a9:e2:55:19:1c:78:c4:
bd:2c:bc:53:e4:51:7b:55:7a:dc:33:5e:15:4b:08:
47:fd:55:63:72:b5:c8:5e:a4:0c:e2:0b:a2:ab:81:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:23:AF:2F:C0:91:9B:CB:A1:92:0B:2F:C3:DF:56:81:CE:87:A4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e2:c7:39:dd:86:b1:48:fe:ed:e3:73:ce:cf:7e:f1:84:f4:
fe:9a:d2:73:6b:cc:70:ef:3f:35:e3:81:67:e8:65:01:fa:21:
3a:82:d6:52:88:ba:70:70:d6:2a:4c:44:ac:5b:a0:49:56:99:
3b:56:38:3a:fe:95:87:2f:74:f0:13:b8:4e:a6:3e:3d:ce:ab:
62:7f:d1:33:4a:21:49:91:5d:1c:41:10:8b:ad:33:6f:0d:10:
81:d0:6c:dc:00:f7:6c:7d:bd:48:29:8c:98:88:5d:d4:38:61:
50:15:3f:5c:d9:0c:fd:a4:9c:d3:1a:dc:53:6a:9a:9e:ae:c6:
8e:a3:32:4d:66:16:a0:f8:5e:3a:1f:4e:4b:d2:c1:28:7d:7b:
86:29:34:43:7a:b7:ae:a3:20:53:3e:39:28:77:51:04:b0:38:
09:4e:6b:28:55:d3:67:6e:07:a4:df:d1:a0:63:9d:c0:0c:0e:
29:02:a4:7c:db:21:e6:80:8d:e4:70:4b:fb:2d:bb:e7:c2:e6:
39:7b:39:d2:53:e8:91:35:d3:d4:86:0a:d6:d9:17:03:cf:c8:
63:e5:97:1c:60:a8:e8:6d:05:ae:05:63:3c:50:6b:83:32:c8:
ee:70:0c:9d:7b:87:37:27:f7:ac:c3:e2:07:8a:7e:4b:b6:21:
84:5b:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:38:10 2025 by rpki-client