Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa
File: 3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa (raw, json)
Hash identifier: 0/ht7vIiPn504Q4rAMHKw1cx7vuhIoYn7vguWhok1j0=
Subject key identifier: 4B:0C:C3:A8:4D:5A:7C:FC:9C:14:1C:44:BE:B8:79:31:10:FB:CA:24
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 13232CA7E60A5EFB01D361010E89BA14D6050945
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 207594
IP address blocks: 185.241.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:23:2c:a7:e6:0a:5e:fb:01:d3:61:01:0e:89:ba:14:d6:05:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=4B0CC3A84D5A7CFC9C141C44BEB8793110FBCA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:d5:29:19:bc:af:33:e1:11:48:1e:a0:b2:
ef:12:4f:f1:95:1b:6d:bd:73:30:d0:01:59:e2:bf:
7f:56:d2:21:a3:11:51:58:95:89:a5:f8:82:8d:bf:
ae:1a:87:ee:81:28:fe:ea:cc:2a:23:e5:71:01:d3:
a7:51:88:dc:20:95:b1:5b:2c:cd:2c:65:77:0a:ed:
2e:12:96:8f:4c:99:cd:6f:18:7f:1c:fb:c1:ba:c2:
e3:98:9c:36:0d:87:ac:cb:01:fc:f7:f4:d4:9e:47:
b6:1f:08:10:96:6f:48:78:06:ba:1c:7b:40:0e:05:
8a:97:2f:48:e8:3b:d4:41:9d:80:ab:b6:ce:07:08:
55:c9:f3:c8:e1:d1:78:d6:84:a3:3d:08:00:ab:57:
f4:d0:51:ec:29:20:6d:69:b3:1d:ad:45:7b:65:ba:
05:18:5c:88:8b:67:9e:9e:c8:b0:df:bc:ee:f1:da:
26:4b:46:c4:c5:9a:38:de:6d:1a:c0:d3:c6:d6:ed:
b3:b1:71:f6:7f:1d:3c:81:b0:a7:1c:a4:af:7e:e8:
62:56:dc:fc:1f:dc:a9:09:12:c0:77:e1:86:f6:02:
1d:61:f5:15:27:9b:d2:fc:81:e8:72:30:78:3c:ef:
26:2e:8c:c7:3f:45:67:39:25:b2:8a:83:9d:73:78:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:C3:A8:4D:5A:7C:FC:9C:14:1C:44:BE:B8:79:31:10:FB:CA:24
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32332d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.236.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:9e:cc:fb:0d:a0:71:55:aa:f3:0a:8f:ff:bc:31:ac:00:b8:
52:9a:4e:2a:af:25:db:be:8d:38:be:1d:6a:93:13:ab:fd:19:
6e:91:4e:e7:18:d3:aa:f4:c0:87:95:c7:74:06:88:34:f2:62:
b8:8e:03:1a:99:6f:04:ee:f2:51:6f:69:0e:e0:a2:8c:89:6e:
8a:04:4f:d5:51:67:65:20:8f:4d:2e:09:7c:01:aa:41:2a:8e:
7b:f2:fa:b8:8a:42:bf:fb:75:cd:56:3c:ad:e1:02:30:f3:3a:
83:a3:33:6c:79:1a:be:c4:13:78:df:bc:ec:e4:62:d5:fc:46:
81:e7:f0:aa:80:9c:c5:f6:b7:97:36:08:43:6e:ec:07:7d:87:
3e:b9:e8:20:ec:4a:27:65:24:92:c9:01:4f:0c:57:2b:2b:20:
8c:aa:b5:97:40:73:77:20:d8:53:c9:cf:f1:a3:f5:b9:0a:f9:
65:98:74:ca:06:d8:a4:0c:d7:29:31:0d:8c:f9:c4:3e:37:25:
ad:ad:b5:d6:61:84:78:b7:0e:64:62:cd:98:d9:86:ee:dd:1f:
6a:6b:73:af:57:9e:16:e9:12:c9:b8:e0:ef:74:30:53:dd:98:
91:91:52:33:43:30:8c:bc:ac:2a:9c:96:53:f9:61:1d:76:15:
02:aa:50:73
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUEyMsp+YKXvsB02EBDom6FNYFCUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MTZaFw0yNTEyMjkxNTQxMTZaMDMxMTAvBgNV
BAMTKDRCMENDM0E4NEQ1QTdDRkM5QzE0MUM0NEJFQjg3OTMxMTBGQkNBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3NUpGbyvM+ERSB6gsu8ST/GV
G229czDQAVniv39W0iGjEVFYlYml+IKNv64ah+6BKP7qzCoj5XEB06dRiNwglbFb
LM0sZXcK7S4Slo9Mmc1vGH8c+8G6wuOYnDYNh6zLAfz39NSeR7YfCBCWb0h4Broc
e0AOBYqXL0joO9RBnYCrts4HCFXJ88jh0XjWhKM9CACrV/TQUewpIG1psx2tRXtl
ugUYXIiLZ56eyLDfvO7x2iZLRsTFmjjebRrA08bW7bOxcfZ/HTyBsKccpK9+6GJW
3Pwf3KkJEsB34Yb2Ah1h9RUnm9L8gehyMHg87yYujMc/RWc5JbKKg51zeN69AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUSwzDqE1afPycFBxEvrh5MRD7yiQwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjM0MzEyZTMy
MzMzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzkzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAbnx7DANBgkqhkiG9w0BAQsFAAOCAQEAqZ7M+w2gcVWq8wqP/7wxrAC4UppO
Kq8l276NOL4dapMTq/0ZbpFO5xjTqvTAh5XHdAaINPJiuI4DGplvBO7yUW9pDuCi
jIluigRP1VFnZSCPTS4JfAGqQSqOe/L6uIpCv/t1zVY8reECMPM6g6MzbHkavsQT
eN+87ORi1fxGgefwqoCcxfa3lzYIQ27sB32HPrnoIOxKJ2UkkskBTwxXKysgjKq1
l0BzdyDYU8nP8aP1uQr5ZZh0ygbYpAzXKTENjPnEPjclra211mGEeLcOZGLNmNmG
7t0famtzr1eeFukSybjg73QwU92YkZFSM0MwjLysKpyWU/lhHXYVAqpQcw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:14 2025 by rpki-client