Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35362e302f32342d3234203d3e20323034313730.roa
File: 3138352e3234332e35362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: +20b7LBUvwNuA6pRQI9PBfl1gB0o5Ue7U4ya2p8FYhg=
Subject key identifier: A8:DF:D0:F1:C6:94:81:42:6A:31:AE:F7:E1:3D:5D:02:78:5B:9F:05
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 76472005E49A6D8366AA02A11FCCC0592CE0AD5F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35362e302f32342d3234203d3e20323034313730.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 204170
IP address blocks: 185.243.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:47:20:05:e4:9a:6d:83:66:aa:02:a1:1f:cc:c0:59:2c:e0:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=A8DFD0F1C69481426A31AEF7E13D5D02785B9F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:52:97:e7:10:9a:31:6d:63:4b:38:f1:07:
45:ca:87:b6:25:5d:e2:d9:dc:45:9c:d3:b1:6f:b1:
f3:24:00:05:c2:27:62:99:c7:f7:98:c4:b7:5e:89:
4c:c8:d7:a3:6d:25:47:62:31:bd:84:eb:5f:92:8a:
28:35:e8:08:60:69:68:c1:0f:85:4f:2b:45:18:76:
2b:48:63:0a:41:76:f4:9d:a6:78:18:4f:1b:26:87:
08:6d:c5:b9:f3:e5:3e:17:56:39:06:7a:6f:7e:5f:
b1:a1:41:1e:f9:d8:52:95:0d:21:39:3b:19:a5:47:
23:68:4e:74:c1:2d:d2:25:a2:55:34:63:12:6e:20:
99:46:f1:00:04:49:fe:3d:5c:e9:51:39:b7:10:39:
c3:a8:dc:83:0d:e5:12:1a:f1:a0:f4:8f:17:0a:70:
75:cb:58:6a:b2:65:90:cb:54:49:90:89:f6:7b:50:
a1:c7:4f:d8:7b:0a:b5:7a:ff:50:a4:dd:4a:b5:94:
90:f5:c9:92:7e:8e:da:3f:11:4c:dc:5d:9e:22:ab:
01:65:c0:5a:2d:9e:9d:24:c1:b1:bb:04:b5:ae:6a:
55:95:6b:e6:f7:09:70:a6:07:cd:4b:d1:5d:c5:31:
56:97:07:45:3b:83:29:5e:61:71:49:d7:81:d3:0d:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:D0:F1:C6:94:81:42:6A:31:AE:F7:E1:3D:5D:02:78:5B:9F:05
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35362e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.56.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e1:2a:a1:36:8f:91:75:0b:6d:ba:c3:7d:fa:d7:86:f0:d4:
a9:f3:fa:88:ee:90:cf:9e:af:e7:7c:51:55:d4:eb:37:3b:30:
8e:d1:fd:e1:4d:4d:12:d4:76:01:40:89:c7:18:87:f4:37:b4:
42:d4:2f:de:6f:11:bc:f4:70:f1:d3:78:60:27:6e:e5:e5:d6:
4f:74:0b:59:74:4d:e4:9f:f1:ad:f4:6b:84:61:61:7e:09:fa:
8e:08:48:21:40:f1:3e:20:15:93:e0:48:5b:5a:06:03:9f:0b:
2c:dd:46:7b:a3:38:d1:e7:bf:67:6d:e6:66:f6:9a:8f:7d:b0:
c3:44:d7:91:17:14:e9:b7:6a:91:26:b5:26:57:2c:b8:6f:82:
f1:91:80:b2:e3:e9:2f:bb:60:ec:69:ee:dc:b6:2f:95:e8:bb:
07:18:e4:f1:3d:cd:49:23:91:4e:cc:e6:4c:42:f3:45:71:f5:
0b:e0:54:6b:d8:d6:e2:5b:1d:9e:80:aa:c9:36:60:89:c4:ca:
c5:e4:ad:79:e3:7c:52:7c:04:fa:47:04:c4:48:c3:de:b7:04:
19:07:53:36:7e:8c:14:ab:bb:76:ef:45:e6:ba:57:99:3b:4a:
3a:43:30:b6:4f:38:40:e2:6c:4d:f6:8f:96:e4:99:1b:22:73:
0f:fd:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:49 2025 by rpki-client