Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa
File: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (raw, json)
Hash identifier: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=
Subject key identifier: 85:69:2F:50:F9:AF:12:67:68:6D:F4:D1:0A:18:3A:7D:B3:D2:D8:8E
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 28E91E6C3B65B3DBC868319322E34BD1FE03B965
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa
Signing time: Thu 13 Mar 2025 11:27:07 +0000
ROA not before: Thu 13 Mar 2025 11:22:07 +0000
ROA not after: Thu 12 Mar 2026 11:27:07 +0000
asID: 215026
IP address blocks: 85.117.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e9:1e:6c:3b:65:b3:db:c8:68:31:93:22:e3:4b:d1:fe:03:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 13 11:22:07 2025 GMT
Not After : Mar 12 11:27:07 2026 GMT
Subject: CN=85692F50F9AF1267686DF4D10A183A7DB3D2D88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:54:fc:5e:d0:91:73:a4:0c:fd:4b:03:2f:
f2:dc:ae:6b:95:51:10:29:77:6e:69:05:7f:70:df:
10:cd:9b:19:b3:0a:64:f1:13:0d:30:d2:d9:c0:45:
58:75:69:60:66:29:76:17:39:29:0b:03:ee:2d:d1:
4c:5d:ff:83:e0:5b:64:39:95:b3:45:9f:3b:d6:d2:
9b:2f:6b:e3:36:be:5f:a3:f4:6f:52:d2:86:7a:35:
c5:92:52:75:87:a5:a7:66:cb:0c:d1:2e:42:7c:c1:
78:b8:dd:2e:9e:e9:6c:10:a7:fd:5b:b4:38:e1:7e:
02:30:4f:ec:11:6a:20:05:11:27:47:1c:87:88:bd:
f1:95:28:5b:32:e4:da:b1:4b:47:a3:02:b8:68:c3:
7b:80:b1:96:59:33:3f:90:d4:cf:6b:4f:2d:60:16:
cd:1c:c3:bf:37:29:da:d5:97:db:7f:66:1f:3a:62:
37:54:75:8e:c1:25:fb:f0:79:9f:d5:56:ed:a0:69:
a6:59:97:a7:2c:47:ac:c7:d2:c9:fa:c7:44:1a:d9:
89:39:c8:01:28:bd:00:d8:e1:0c:f5:59:03:77:c6:
2f:6c:b4:7b:b5:ab:25:cf:52:7c:e2:1e:26:ac:20:
ee:7f:76:53:b0:2e:ca:a4:25:08:b8:75:9d:d4:91:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:2F:50:F9:AF:12:67:68:6D:F4:D1:0A:18:3A:7D:B3:D2:D8:8E
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:81:15:9d:d2:62:3a:52:6a:ae:fe:ed:6c:ee:4e:e6:a8:08:
fb:08:d9:b8:ba:56:61:72:72:26:68:a9:c3:93:35:70:aa:76:
b6:7d:bf:13:1a:a4:f9:b5:bb:36:44:78:31:e6:6e:81:7a:9d:
fb:87:66:aa:de:1d:9d:70:21:6f:7e:6c:fa:15:fd:f4:6e:81:
22:be:93:41:8f:21:ea:62:e5:1d:da:d1:fd:33:c2:0a:e1:7e:
fd:a3:96:35:b2:d6:e7:66:0d:1e:ce:08:19:1a:da:f6:86:f0:
d1:f0:be:6e:a4:8c:64:af:5d:6e:02:fd:4d:ba:30:6a:5c:ef:
e0:e4:11:0e:2d:ea:56:8f:d3:82:2f:be:cf:3f:03:1e:65:39:
b3:c3:c4:f9:48:d8:44:c3:ff:13:9a:cc:00:68:68:7c:4f:12:
24:aa:11:e6:02:9b:a6:c3:54:65:d1:19:fe:a8:43:40:3e:b1:
b6:9e:78:29:0a:4f:f9:a3:65:97:be:75:27:40:2a:88:ff:cf:
b7:90:c3:bd:7c:54:29:d8:8b:5f:10:8a:da:c9:ea:be:01:b3:
1a:93:7e:b6:29:a1:23:ff:37:78:ee:26:66:12:00:d6:c3:7e:
38:4c:3a:86:c6:7b:8b:50:31:3f:58:d2:dd:f3:94:36:62:51:
74:8f:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net