Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eXhNsZmQ0wtP7WeVirMjBMvPx+2wLt7TqEgLDWbq1nc=
Subject key identifier: 0F:1D:65:20:05:3F:92:F1:E5:64:A0:78:E7:A7:78:C7:5A:7A:FC:B2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1415E774196BAF5E5D0C061FE1D6B265C1C79555
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:23 +0000
ROA not before: Mon 30 Dec 2024 15:36:23 +0000
ROA not after: Mon 29 Dec 2025 15:41:23 +0000
asID: 136787
IP address blocks: 185.243.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:15:e7:74:19:6b:af:5e:5d:0c:06:1f:e1:d6:b2:65:c1:c7:95:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:23 2024 GMT
Not After : Dec 29 15:41:23 2025 GMT
Subject: CN=0F1D6520053F92F1E564A078E7A778C75A7AFCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:f5:ab:a8:32:b2:1f:62:ea:bd:50:4c:1e:
79:ce:75:59:8c:c6:02:e9:5d:05:f6:14:56:4a:b9:
7a:82:2c:76:5a:24:ce:2d:db:23:6e:e1:04:b5:00:
e6:35:c2:9f:bc:fe:78:1a:03:16:60:bc:19:1e:32:
3b:cc:d9:98:22:e3:c0:01:7e:27:9c:7d:85:0c:5b:
63:86:c1:39:6a:8a:50:5b:24:f8:10:f9:1d:b1:35:
17:2d:99:fe:43:6f:20:d4:33:e9:06:2f:76:3c:c5:
0d:44:7f:9c:0a:92:fa:c5:e7:32:34:6e:0d:0a:99:
80:33:51:53:44:d8:45:93:95:f9:db:11:8f:50:3f:
44:3c:b3:e8:21:ff:95:8c:6f:65:5e:5d:c8:b4:a5:
c9:8c:0a:c1:b9:42:b0:a7:4c:c6:4e:11:19:e7:f2:
96:b3:6f:ed:64:1e:cc:1a:f7:85:81:99:fb:ec:e7:
29:db:54:93:c9:20:c1:9a:71:99:65:56:ff:b6:26:
4c:b2:de:be:4e:dd:fa:89:3c:b6:8a:0c:21:a4:62:
48:61:ac:88:74:76:b2:d4:64:d9:f8:ff:38:b1:7c:
d4:dc:e4:97:88:2b:35:92:07:8f:3c:e8:1e:ae:9f:
b3:59:fb:3c:38:91:b5:72:64:16:b9:4e:f9:5a:49:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:65:20:05:3F:92:F1:E5:64:A0:78:E7:A7:78:C7:5A:7A:FC:B2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234332e35382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.58.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:bf:bd:58:a5:b3:26:43:14:82:84:43:f0:56:d7:ab:25:d0:
0c:45:17:4d:16:a8:06:73:1b:19:07:2d:0e:6b:e5:11:3e:06:
ea:7b:f4:ea:32:5c:4f:51:3c:ac:f4:5c:c8:ad:09:25:d3:f4:
d4:88:33:a8:ab:41:86:ab:60:01:bd:a1:82:fd:39:32:68:f7:
f0:c5:b0:33:e4:42:1a:14:c8:09:57:34:6a:5c:ea:a8:aa:5b:
14:8f:5e:cd:59:24:50:0d:4c:d6:5c:94:df:78:2b:9f:c9:da:
82:f3:e2:be:c0:f7:97:56:d2:69:a7:a8:3c:57:62:82:65:f1:
b7:04:6e:9b:da:cc:70:32:dc:8d:fd:b4:0d:58:a6:bb:ff:ba:
e9:db:c9:ea:87:7a:d9:84:b7:1e:0d:0e:da:5a:9b:12:54:3d:
8d:db:1a:26:55:44:8f:27:3d:fc:33:1d:f1:72:40:ba:17:ae:
bd:7d:a1:f9:33:ba:fd:b5:c3:5e:bf:69:65:5d:19:20:24:fb:
ef:ee:77:3f:5a:a7:5f:72:b4:07:fb:09:29:d3:a6:3c:1b:9e:
cf:fd:f4:c2:c1:09:da:ef:4d:d3:cd:19:81:a9:bd:1e:cc:82:
98:46:12:b2:bc:45:7a:df:a8:55:01:92:a5:b3:79:05:c7:96:
72:c3:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:26 2025 by rpki-client