Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa
File: 38352e3135382e35372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: SREORumWnceyKZUdxUt+YmG7AH5MixBqFoZyQzSspas=
Subject key identifier: B0:C3:44:AC:63:6B:FB:2E:AD:0E:C9:66:6A:96:E8:AF:ED:D6:79:4A
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 46BF263702BE6A9C37E43857E1866361DF0F0DE6
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 31 Mar 2025 15:29:58 +0000
ROA not before: Mon 31 Mar 2025 15:24:58 +0000
ROA not after: Mon 30 Mar 2026 15:29:58 +0000
asID: 212238
IP address blocks: 85.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bf:26:37:02:be:6a:9c:37:e4:38:57:e1:86:63:61:df:0f:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 31 15:24:58 2025 GMT
Not After : Mar 30 15:29:58 2026 GMT
Subject: CN=B0C344AC636BFB2EAD0EC9666A96E8AFEDD6794A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:af:cc:27:54:14:37:ec:f0:d0:10:c7:70:
4d:0a:dc:90:40:85:e7:8f:8c:12:8f:dd:6a:77:ee:
eb:59:dc:ae:c9:e4:24:a5:cb:10:ed:32:fd:42:17:
d2:c5:60:33:83:ba:0f:61:24:cc:c3:a4:ba:6c:75:
6b:34:80:9a:8a:ce:31:0c:45:e5:d3:23:a0:de:1d:
dc:91:94:6d:64:1e:f3:d3:89:1b:27:10:34:0a:e4:
b6:0d:75:fc:50:23:4d:1d:be:ab:35:c5:e7:ca:2d:
0e:cf:c8:94:aa:70:06:9c:b0:28:1d:91:37:78:20:
db:08:58:bf:16:24:28:c6:e7:87:de:e1:d7:13:8d:
0d:c6:56:a2:7c:ee:5c:d1:ab:9f:06:bf:72:52:7e:
d5:37:4c:1c:6c:db:17:22:1f:37:d4:fc:81:a6:ff:
69:51:ea:5b:0b:1c:7e:2b:20:45:b4:ef:26:c2:d2:
55:c4:e9:e2:fc:1d:1a:c3:f6:33:57:da:b5:3f:9c:
b9:08:8f:18:90:3a:99:9c:1f:9f:a0:cc:5f:69:6d:
48:12:95:4a:a1:d6:45:ce:e3:b3:21:9d:2d:d2:ad:
60:05:e0:50:cd:ca:1c:58:f0:bd:ad:2e:3b:19:aa:
be:00:da:fd:58:4c:f5:a8:07:d1:cb:66:47:de:53:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:44:AC:63:6B:FB:2E:AD:0E:C9:66:6A:96:E8:AF:ED:D6:79:4A
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
42:52:69:dd:16:16:60:b2:71:21:95:2c:d0:52:fc:d0:24:27:
8e:e1:11:37:b1:1a:d0:c7:46:30:bc:11:74:c9:0d:d6:13:bb:
a7:53:3a:13:15:70:cd:c7:3b:e2:10:74:5d:09:b0:af:a2:59:
67:5f:e9:4e:8e:17:ea:1a:1c:44:89:73:5e:23:f1:2f:35:57:
17:9e:31:16:c3:16:2e:b1:2b:e2:a2:ae:ff:93:8d:9e:54:85:
a7:6c:bb:c7:1e:4c:be:bf:44:bb:96:5a:81:c4:5c:af:6f:66:
44:58:6d:f4:5a:40:a4:9b:cb:7c:b9:f6:ba:b6:6a:f8:c2:08:
a4:b3:bc:a7:24:04:2e:28:ea:01:83:2d:e3:52:46:79:50:0c:
84:6b:61:17:79:a3:03:88:b7:3f:0b:dd:63:c6:4a:92:8a:13:
29:a5:3f:91:92:13:9c:ca:12:9a:0f:28:84:8a:d7:c9:45:40:
ff:64:67:17:e3:76:02:17:e2:1b:a1:7e:96:9c:97:b9:8e:7c:
11:81:fb:b6:5a:df:78:84:3b:22:5b:77:57:9c:16:d0:b1:7a:
28:99:5c:79:10:7b:6c:a8:b3:97:13:b9:2a:d3:cc:6e:3c:ee:
9d:06:56:2a:b3:d5:47:ea:03:57:ff:bc:8f:87:4d:c5:83:be:
24:e1:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net