Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Rg8gIwBN7d0xhnHhxtr5GvfE4cANuOvJborfbn/AO1A=
Subject key identifier: 3C:3C:58:87:EB:2D:43:A2:AE:C4:BF:02:DC:48:DC:11:7A:9D:09:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0809886CCA5413710BB84C0117C644308BB86ED5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:05 +0000
ROA not before: Sun 13 Apr 2025 11:41:05 +0000
ROA not after: Sun 12 Apr 2026 11:46:05 +0000
asID: 136787
IP address blocks: 185.212.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:09:88:6c:ca:54:13:71:0b:b8:4c:01:17:c6:44:30:8b:b8:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:05 2025 GMT
Not After : Apr 12 11:46:05 2026 GMT
Subject: CN=3C3C5887EB2D43A2AEC4BF02DC48DC117A9D09FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:14:d7:ba:a8:60:54:f2:ac:4f:b0:af:81:
e4:78:a8:e9:b1:95:bb:d1:f6:34:37:a1:26:70:47:
6e:e5:e7:20:4e:54:3a:61:d2:7b:30:90:7c:f7:61:
f3:5a:f6:ab:ee:84:89:ac:32:b9:67:ce:48:30:4e:
a9:5c:8d:26:2e:bc:6d:fc:77:0a:7f:3f:b7:88:0b:
41:8e:72:c4:3f:df:38:61:d8:d7:13:1a:9f:6b:9b:
92:b0:dc:c6:b5:6c:68:57:57:7e:5e:55:d5:2f:d9:
ca:c1:80:ba:ad:1a:7e:b3:f6:98:7e:6d:a4:68:ef:
94:62:50:0d:08:78:e2:28:13:7f:16:d6:61:8e:b2:
a1:7d:a3:52:be:e4:10:93:60:37:9b:83:7f:f2:11:
92:32:5a:94:a2:f0:37:34:93:3d:6f:39:b7:d3:a3:
d9:dd:40:3c:c3:64:79:5e:b4:d8:44:de:02:cc:c9:
f0:2e:0e:ce:32:45:5e:20:70:69:b0:f3:4c:51:9e:
a4:29:5b:ba:6a:0b:b4:74:64:54:86:fa:bc:22:ac:
c7:f0:09:2c:ff:5c:25:bd:dc:7e:31:e7:a2:23:b5:
ae:f9:e8:5c:d4:de:ae:f9:ee:70:85:1b:e4:4e:fa:
dc:6d:80:64:1f:5d:8e:7a:fe:f3:0b:fd:ab:bf:90:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:58:87:EB:2D:43:A2:AE:C4:BF:02:DC:48:DC:11:7A:9D:09:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:53:fd:34:a3:b3:61:38:f5:a1:07:86:2f:89:4f:c7:a3:c8:
06:fd:ac:ed:39:7c:5f:1d:24:16:52:57:26:68:77:d8:3f:45:
f9:33:30:d9:a5:a8:6c:d5:31:e8:c4:7c:59:69:30:9f:93:96:
fa:d7:01:61:7a:96:e9:0a:0d:50:ba:d1:9a:02:08:10:40:06:
93:b6:17:da:c1:dd:25:9c:32:ff:ad:cb:4a:83:18:14:7e:4e:
23:93:2d:45:32:5c:dd:94:8f:64:ef:27:b1:2a:da:b4:ae:67:
5e:28:86:ac:f3:00:67:9a:5a:c5:55:41:d1:a5:82:87:81:96:
c9:bc:82:1b:2b:29:38:5d:d4:f7:09:06:4e:7a:99:8c:5d:a9:
3e:28:f3:e8:9e:b2:da:1e:b3:ff:bf:ac:a8:ca:9a:59:45:2b:
11:f7:77:31:05:c9:1a:ca:00:55:8e:11:25:52:25:d3:49:ec:
4a:87:e8:be:3a:a2:77:ec:77:23:b0:24:06:47:e3:40:eb:ff:
f1:17:4b:b4:da:0d:2c:24:5c:d7:ae:99:41:0a:71:71:08:3c:
21:ad:11:f3:88:fd:26:af:56:c9:1b:a6:73:4a:f7:2f:2d:6e:
fc:32:a4:bc:af:c2:96:fe:fb:95:72:19:24:18:86:30:13:7e:
cd:d5:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net