Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/38352e3139332e37372e302f32342d3234203d3e20313337353137.roa
File: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=
Subject key identifier: 61:A6:FB:94:7E:8C:59:37:B4:9B:3B:25:55:5B:CF:9F:B5:55:94:E7
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 4401A57166EE4C384FB4D381E5A1F6CD8DA3618D
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/38352e3139332e37372e302f32342d3234203d3e20313337353137.roa
Signing time: Tue 08 Apr 2025 06:19:38 +0000
ROA not before: Tue 08 Apr 2025 06:14:38 +0000
ROA not after: Tue 07 Apr 2026 06:19:38 +0000
asID: 137517
IP address blocks: 85.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:01:a5:71:66:ee:4c:38:4f:b4:d3:81:e5:a1:f6:cd:8d:a3:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Apr 8 06:14:38 2025 GMT
Not After : Apr 7 06:19:38 2026 GMT
Subject: CN=61A6FB947E8C5937B49B3B25555BCF9FB55594E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:a3:6b:dc:1e:98:37:cf:92:11:39:a1:4a:
c3:ad:a2:18:e6:06:ba:3c:ca:b5:3a:dd:8e:ab:25:
47:cb:03:76:86:fe:2b:7a:f4:b4:37:91:d2:09:ac:
45:95:4a:66:97:f0:84:58:87:42:ce:d8:21:40:e2:
da:7c:5c:1e:3c:8c:79:80:94:f3:09:44:56:4a:c0:
fc:09:c5:ea:b5:34:e8:9b:f6:b8:b9:72:e2:0f:3d:
b1:e1:98:76:24:54:23:1a:99:0a:2b:0b:09:a9:a9:
59:4d:79:49:50:1f:0a:16:80:f0:8c:11:51:8e:d3:
c4:4e:2f:71:43:1f:a6:df:4b:4c:46:54:4d:1c:a4:
9c:b9:dc:b1:62:23:8e:6f:35:f6:ac:c0:51:17:bc:
35:77:97:d8:3f:c5:83:d4:1f:65:3a:04:d5:aa:15:
44:28:8d:cf:4b:27:a2:22:d9:15:af:9d:3d:6a:f7:
96:22:57:f1:26:d0:94:67:1a:3e:5d:15:0d:cb:9b:
00:69:70:70:88:58:57:49:5b:e9:b1:24:34:57:3f:
d8:3c:63:43:dd:ca:e8:72:b6:66:4c:a5:8b:39:ff:
93:fe:4a:f8:9d:b7:56:1a:8f:29:39:b9:8c:58:d3:
26:52:2e:48:42:d2:52:70:9e:38:98:bf:44:17:53:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:FB:94:7E:8C:59:37:B4:9B:3B:25:55:5B:CF:9F:B5:55:94:E7
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/38352e3139332e37372e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e3:b2:10:68:44:07:60:71:b6:11:3d:03:35:3c:58:cd:76:
17:f2:af:2e:3d:cc:06:3b:3a:15:09:1d:8c:83:77:28:01:48:
36:74:a8:7d:eb:52:75:16:24:0e:b2:bf:75:8b:0c:44:5d:d7:
ed:da:30:b3:1e:cb:17:8e:d2:cc:51:74:b1:62:f2:a2:c7:fc:
56:78:97:98:cc:ec:63:d4:26:79:fd:80:90:08:23:b7:45:ba:
ab:2c:f2:76:46:2a:9d:2c:00:7a:bf:3e:14:85:57:f1:1a:8f:
f2:f0:07:38:ed:37:4c:eb:91:ae:a7:18:25:5f:31:99:37:38:
a1:53:ed:30:58:43:3d:d6:4c:03:d6:d6:c4:a9:11:f0:d1:e5:
b6:ea:ca:81:11:5f:3c:7c:e5:71:e9:b3:49:1c:fc:2a:61:cb:
ed:fb:ff:f7:60:ed:2a:17:e6:9c:02:cf:04:7d:6b:8c:37:81:
84:11:d8:a7:77:1d:f9:77:1b:21:68:de:c4:c8:ae:8b:6b:94:
89:da:24:f9:70:e1:bd:6f:94:e0:d7:51:53:ea:7b:d0:ac:2c:
d2:0b:52:0b:32:55:4d:39:78:5e:96:a7:e8:7e:1e:73:80:20:
e7:fa:1e:0c:d7:7c:e0:de:60:f3:a2:a6:bc:f3:15:f5:0a:e7:
8d:0d:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net