Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
File: 3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa (raw, json)
Hash identifier: nxBNmOb9Za9h8wNngdGh+Z+CQ3agtze7xLgA/WBhPt4=
Subject key identifier: 8B:E8:E8:6D:6E:DB:89:88:36:93:27:F9:BC:BB:F0:3B:7E:FB:32:12
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 30812A826E89A69CFD96B377620C815AE506EFF9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 207594
IP address blocks: 185.241.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:81:2a:82:6e:89:a6:9c:fd:96:b3:77:62:0c:81:5a:e5:06:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=8BE8E86D6EDB8988369327F9BCBBF03B7EFB3212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:9b:c3:0e:76:af:e8:d8:d8:42:45:2f:6c:
b1:9a:1f:1e:2c:e4:94:18:25:b2:6c:f2:6b:f1:b0:
99:17:fb:1d:20:d2:88:9f:e0:df:73:6c:67:06:d2:
9f:dd:b3:5f:a7:f5:c6:3c:37:27:15:25:84:10:4f:
12:df:f0:36:63:3f:d5:c3:d0:81:e6:fc:d9:74:f9:
3d:b1:dc:aa:c3:f9:88:66:70:5c:75:1e:44:fe:82:
6d:ba:a6:45:d1:7a:9c:88:97:b5:f8:bd:2b:e1:6e:
de:ec:ff:0f:98:87:a1:69:97:e5:9d:4f:2f:13:ab:
46:42:b7:97:cf:ae:b9:e3:ab:e2:03:8a:14:0a:f5:
00:f0:2a:e8:fb:86:da:15:7b:10:11:bf:a0:0b:35:
6e:ba:69:7e:3d:23:b8:18:97:a7:7d:e0:ca:f2:b3:
31:13:b0:a3:ee:52:5a:99:b1:8e:4b:c7:82:28:9d:
95:ea:6c:59:f4:7f:d2:ea:d4:b4:f1:ca:35:0c:f3:
45:3b:68:ba:8b:9f:cd:44:2b:bf:44:da:eb:aa:23:
37:b4:5a:1c:85:f2:38:ee:63:e2:b6:92:c4:e3:2d:
2e:d5:1e:8a:ce:8d:6d:4c:77:e6:f7:34:7a:b2:30:
a1:50:9f:34:37:21:ec:33:bd:ec:de:85:4d:82:b8:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:E8:6D:6E:DB:89:88:36:93:27:F9:BC:BB:F0:3B:7E:FB:32:12
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.238.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ba:62:0e:a8:d5:28:e1:d1:09:15:26:37:77:73:5b:22:20:
12:8f:a1:bf:0d:03:5f:63:04:19:11:53:4c:83:fb:35:42:4f:
a3:b4:36:64:b9:17:04:ed:98:51:3c:56:66:ab:e5:cb:9d:bb:
c7:e2:31:e1:57:f1:65:ff:a5:12:88:3a:c8:c7:f2:72:ce:3f:
05:05:0c:b9:22:ca:9f:7f:65:e7:85:09:da:05:8e:2e:1d:d1:
3d:99:1e:f7:ec:18:d6:4e:72:a9:bc:08:84:43:16:9b:25:50:
0c:6e:20:a2:85:19:1d:33:61:26:4b:b7:01:5c:72:df:2d:22:
2a:de:4f:e7:f4:96:ef:32:51:89:cb:da:5e:a5:00:a3:20:56:
4f:19:57:db:e9:5c:63:a2:20:57:5c:67:6d:d9:03:2f:be:e7:
7a:95:ec:fd:f2:ba:b1:fe:40:86:10:61:a8:12:e6:15:8a:1d:
d3:5e:4c:dc:7c:c8:6e:4c:69:7d:29:32:40:cd:12:f5:79:9d:
ba:5e:09:df:ee:f3:d7:85:4e:da:50:28:f5:97:36:d7:57:86:
71:e9:80:70:2c:3a:31:a7:4c:a4:b5:fd:12:e2:b8:dc:e4:76:
c6:68:df:41:35:77:3e:c5:07:88:42:e4:04:0d:e8:c4:48:04:
f4:d3:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:15 2025 by rpki-client