Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa
File: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i8URk7FWCHq4tSSPNveO7eSmGX60ufJGKLcVeCwzmRY=
Subject key identifier: E0:AC:F2:FA:54:E6:2D:44:1C:B4:AE:26:46:0C:CC:71:30:99:39:07
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 0BEF9D2324B5E0225F5FCF8A3D50B645F1161396
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jan 2025 07:47:37 +0000
ROA not before: Fri 17 Jan 2025 07:42:37 +0000
ROA not after: Fri 16 Jan 2026 07:47:37 +0000
asID: 834
IP address blocks: 188.164.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ef:9d:23:24:b5:e0:22:5f:5f:cf:8a:3d:50:b6:45:f1:16:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jan 17 07:42:37 2025 GMT
Not After : Jan 16 07:47:37 2026 GMT
Subject: CN=E0ACF2FA54E62D441CB4AE26460CCC7130993907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:5e:dc:b6:0d:6d:02:f7:8d:0e:7d:ec:f9:
2b:05:73:2e:28:b6:40:88:5d:c0:d9:f0:fc:00:f1:
96:8f:e0:73:12:f3:e0:7c:93:6e:d8:49:65:67:cd:
72:cc:7c:c3:c1:9c:b5:45:27:7e:70:4f:18:17:03:
87:df:ed:33:d4:67:15:21:0b:96:c7:3c:1b:34:c3:
c9:fa:ee:98:1c:ee:46:e0:7c:b7:c3:de:a1:1a:b5:
91:33:6c:22:d4:f7:a0:32:87:68:08:16:9e:d3:13:
51:b1:c7:cc:04:2c:d1:98:39:69:6e:d0:dd:24:d0:
8f:d4:45:03:ff:46:c7:7a:4b:c9:36:02:92:2a:07:
7a:88:ad:c1:0e:45:a5:22:c7:22:b8:3e:24:fd:a0:
8c:be:c9:9a:ba:c6:9a:39:20:e3:50:b6:82:f4:bc:
0f:5a:42:7b:d6:c1:a6:f0:1a:98:30:bb:24:0a:33:
42:d1:77:80:62:20:97:d3:1f:cf:6e:d6:ea:bf:f5:
18:fb:e9:90:80:1a:1d:a9:f3:d5:f3:54:eb:14:18:
56:c9:dc:0e:d4:d2:12:ff:4f:07:24:9c:a6:ed:6f:
38:f5:65:df:05:0e:60:c1:6c:0c:1c:54:7b:05:56:
8f:9f:84:3f:b9:b5:7d:d4:c2:bc:11:84:4c:cc:09:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:F2:FA:54:E6:2D:44:1C:B4:AE:26:46:0C:CC:71:30:99:39:07
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.156.0/24
Signature Algorithm: sha256WithRSAEncryption
10:61:05:25:64:17:18:8a:36:5f:44:d1:8b:f0:05:d1:ea:bd:
5a:2b:b5:27:82:f2:f7:e3:75:a2:bf:19:75:b1:48:ae:6f:ee:
e6:59:4c:41:10:80:c0:40:f0:4f:b0:18:63:ed:a5:8f:6b:1c:
51:61:07:16:50:18:60:01:60:63:2f:f9:42:04:fa:ea:71:1d:
67:51:ff:d9:22:b5:cf:94:82:00:15:05:6c:3b:ed:07:18:10:
fd:ce:ac:83:c3:2f:2b:75:1a:93:3e:d2:64:65:6f:ec:2a:90:
8f:7c:54:41:5c:90:a0:86:85:80:d0:61:b4:53:60:e0:a4:0e:
1e:66:db:aa:9b:50:48:f8:1c:48:3f:2a:a9:41:f2:96:96:5c:
50:f2:6e:03:ba:4c:2c:eb:d4:c9:74:9b:f3:29:f6:5f:59:1a:
6d:78:a0:e3:f9:5f:a1:41:94:d9:a8:2d:ab:8b:40:ed:c9:0a:
98:7b:1e:24:fa:74:90:d3:46:f6:c5:75:9d:5f:47:14:91:3a:
c8:5c:08:38:c2:38:43:25:8c:c5:1f:67:4d:83:5e:6e:ad:44:
30:fd:8a:56:76:83:0a:6e:0b:5b:ce:8a:de:b0:db:6b:93:35:
0d:4c:80:a6:02:42:bf:d4:89:fa:86:4b:af:d1:91:e9:f9:a8:
e8:db:81:dd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUC++dIyS14CJfX8+KPVC2RfEWE5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yNTAxMTcwNzQyMzdaFw0yNjAxMTYwNzQ3MzdaMDMxMTAvBgNV
BAMTKEUwQUNGMkZBNTRFNjJENDQxQ0I0QUUyNjQ2MENDQzcxMzA5OTM5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl17ctg1tAveNDn3s+SsFcy4o
tkCIXcDZ8PwA8ZaP4HMS8+B8k27YSWVnzXLMfMPBnLVFJ35wTxgXA4ff7TPUZxUh
C5bHPBs0w8n67pgc7kbgfLfD3qEatZEzbCLU96Ayh2gIFp7TE1Gxx8wELNGYOWlu
0N0k0I/URQP/Rsd6S8k2ApIqB3qIrcEORaUixyK4PiT9oIy+yZq6xpo5IONQtoL0
vA9aQnvWwabwGpgwuyQKM0LRd4BiIJfTH89u1uq/9Rj76ZCAGh2p89XzVOsUGFbJ
3A7U0hL/TwcknKbtbzj1Zd8FDmDBbAwcVHsFVo+fhD+5tX3UwrwRhEzMCbrZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU4Kzy+lTmLUQctK4mRgzMcTCZOQcwHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt
ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx
MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyk
nDANBgkqhkiG9w0BAQsFAAOCAQEAEGEFJWQXGIo2X0TRi/AF0eq9Wiu1J4Ly9+N1
or8ZdbFIrm/u5llMQRCAwEDwT7AYY+2lj2scUWEHFlAYYAFgYy/5QgT66nEdZ1H/
2SK1z5SCABUFbDvtBxgQ/c6sg8MvK3Uakz7SZGVv7CqQj3xUQVyQoIaFgNBhtFNg
4KQOHmbbqptQSPgcSD8qqUHylpZcUPJuA7pMLOvUyXSb8yn2X1kabXig4/lfoUGU
2agtq4tA7ckKmHseJPp0kNNG9sV1nV9HFJE6yFwIOMI4QyWMxR9nTYNebq1EMP2K
VnaDCm4LW86K3rDba5M1DUyApgJCv9SJ+oZLr9GR6fmo6NuB3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:02 2025 by rpki-client