Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203630313137.roa
File: 3137382e3230382e3139312e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier: gw+ZnVSybOxBJkI3CDiDbpTLVcjuveeD/2gdGSGkZ0U=
Subject key identifier: 78:95:BF:5E:C8:2F:9F:CA:05:E0:F2:16:61:06:03:04:17:9A:77:D5
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 586612690EE70A58F51B5A594844C6065DC4E729
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203630313137.roa
Signing time: Mon 30 Dec 2024 12:01:19 +0000
ROA not before: Mon 30 Dec 2024 11:56:19 +0000
ROA not after: Mon 29 Dec 2025 12:01:19 +0000
asID: 60117
IP address blocks: 178.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:66:12:69:0e:e7:0a:58:f5:1b:5a:59:48:44:c6:06:5d:c4:e7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 30 11:56:19 2024 GMT
Not After : Dec 29 12:01:19 2025 GMT
Subject: CN=7895BF5EC82F9FCA05E0F21661060304179A77D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:7d:9f:8d:a5:20:f0:62:a4:38:1d:b7:12:
f4:f6:1c:79:a6:73:3c:b4:79:70:8b:b6:05:62:7a:
b9:90:f1:64:18:13:c5:4e:af:e3:8e:33:5e:4b:6c:
41:11:ba:aa:a9:f9:62:2d:27:95:32:96:eb:c8:0c:
28:f7:88:50:ba:cd:17:b9:f3:b6:0c:3b:55:18:52:
bf:38:c7:01:01:fc:6c:52:b3:b2:0f:e2:eb:5e:c8:
e7:f2:f3:58:d3:b5:16:b0:67:c3:bf:c0:75:52:e0:
cd:54:d3:93:4b:c8:be:a2:50:ca:e3:38:e8:3f:ba:
18:bd:d6:71:b2:10:f2:0c:5b:fc:77:48:93:7c:26:
c2:75:6b:79:70:21:3b:a5:4c:96:57:bb:4e:8e:66:
30:8a:24:1b:6e:63:ff:ad:3e:58:c9:83:b2:5c:87:
60:42:ab:cf:62:95:8f:d0:dd:de:90:8d:6c:e0:1b:
93:b6:88:94:46:c0:b4:75:ad:5c:4f:41:22:0f:ee:
9d:cc:26:70:a2:73:fa:33:b7:60:4a:a9:d3:d8:e6:
24:64:63:8d:a6:97:1c:e6:fb:9e:54:7e:ae:ce:b2:
68:a0:62:bf:fd:95:11:3d:f0:f4:1a:5e:17:db:bb:
51:07:28:11:98:0c:df:c8:17:77:79:a6:f6:13:ad:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:BF:5E:C8:2F:9F:CA:05:E0:F2:16:61:06:03:04:17:9A:77:D5
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203630313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cc:85:14:6d:4e:f3:c6:c0:19:b0:4b:66:f9:17:33:f9:04:
2a:f6:28:35:b7:1b:e5:b5:ff:e6:71:1c:97:e6:2b:9c:15:2c:
97:95:34:e1:21:88:51:2a:f9:68:a1:35:17:54:20:58:45:29:
be:e0:f5:d3:72:fc:25:8a:87:f7:fd:c9:5c:df:ee:e4:57:76:
83:c4:93:b5:92:ce:1d:25:f5:5a:56:58:ba:8b:f8:df:96:e2:
4c:53:07:eb:12:d0:47:b0:fc:11:ca:78:8a:8d:06:00:4b:8e:
eb:68:3c:08:8d:5f:12:03:19:b4:07:cb:69:f2:15:bc:d8:93:
0c:f9:12:f2:62:ac:b4:a8:ec:56:b5:de:22:47:09:f4:36:2d:
ce:03:02:83:e4:e3:d0:33:8e:71:be:ca:a2:f0:b7:46:d4:84:
db:33:2e:78:fd:7d:bd:f6:aa:20:19:27:54:7c:a3:38:21:ab:
99:70:b5:f0:44:a5:c8:45:ee:a7:e5:39:67:e8:d0:61:ac:ce:
a6:9f:17:d0:df:01:48:da:32:a7:2f:6d:4e:57:b0:fc:f4:40:
eb:48:6b:12:65:a4:ac:00:c3:c5:ea:6b:57:69:9d:2c:f0:85:
b1:5a:41:1b:56:c0:0a:53:9a:29:8d:6e:2f:c0:34:e0:31:7a:
b8:9f:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:00 2025 by rpki-client on console.sobornost.net