Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e203537303433.roa
File: 38352e3131372e3232382e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: 0F2ZCq0KjFsB9Wo0lzZmRuXtSN4tq+iBavG/mS9flCw=
Subject key identifier: DF:BF:7D:F3:68:62:B4:81:AE:B9:03:E3:04:D0:FB:61:08:E0:65:E6
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 79EDDE033DDFA343E1A06998D4EC7B1F93665E7D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e203537303433.roa
Signing time: Wed 12 Feb 2025 09:54:46 +0000
ROA not before: Wed 12 Feb 2025 09:49:46 +0000
ROA not after: Wed 11 Feb 2026 09:54:46 +0000
asID: 57043
IP address blocks: 85.117.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ed:de:03:3d:df:a3:43:e1:a0:69:98:d4:ec:7b:1f:93:66:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Feb 12 09:49:46 2025 GMT
Not After : Feb 11 09:54:46 2026 GMT
Subject: CN=DFBF7DF36862B481AEB903E304D0FB6108E065E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:a8:87:c7:f2:de:fc:97:ef:af:67:a3:fb:
cb:b5:48:85:14:99:fa:6b:1a:2c:92:ed:1f:7f:ed:
fe:d5:b8:33:e2:3b:36:bf:c1:19:f4:1c:b0:d2:df:
6a:d1:d5:19:d6:18:06:bb:1e:75:52:11:20:2a:06:
78:1e:23:a8:51:58:2d:cd:ba:ee:8c:fb:37:a9:15:
54:bb:73:b7:4c:fc:40:2b:3f:7c:ba:22:71:48:df:
70:81:74:e0:9f:eb:5d:4c:eb:30:76:fb:c6:bb:d0:
79:01:0f:2c:e8:9b:99:3b:78:6d:57:9f:ba:55:56:
4f:7f:eb:1d:57:2b:d6:99:0c:a6:b9:62:02:8c:4a:
43:fe:5f:4b:27:0e:c3:ee:b2:9f:a6:75:e6:ec:d3:
43:84:33:46:44:c9:d5:9f:97:b9:40:5d:9a:6c:66:
90:63:73:b8:2a:28:e1:01:d8:d0:37:3b:c4:e7:79:
f4:1c:1e:9f:f0:2d:41:cb:07:e1:b3:33:9c:84:75:
1d:e0:52:0f:4e:90:81:d0:cc:10:86:4e:18:89:e9:
23:56:8a:69:ab:fb:3b:ec:15:e1:99:39:25:d6:47:
95:bf:7b:10:68:5a:71:41:6b:06:50:80:00:02:cc:
24:b6:d1:cf:c4:6c:d6:ff:be:3b:c0:2a:88:79:ce:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:7D:F3:68:62:B4:81:AE:B9:03:E3:04:D0:FB:61:08:E0:65:E6
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9f:42:81:eb:91:67:c0:36:55:3d:36:70:a6:5e:a1:ba:03:
8c:9c:3f:51:cd:0a:07:d9:a3:98:f4:c5:11:45:79:64:94:23:
60:ed:02:60:9a:27:f0:a9:03:51:c7:bf:cb:34:88:c3:f5:94:
63:48:96:45:2f:1a:28:c4:f5:05:75:76:6f:ed:09:3f:6e:98:
bb:af:a7:eb:6d:81:bc:11:6f:86:f0:35:31:ae:73:18:df:1b:
85:d4:60:b5:cf:ca:85:14:fe:90:01:d9:94:7e:c4:1f:d2:2f:
3f:4c:7f:dd:17:46:78:2e:14:94:a4:c7:65:4a:10:eb:6f:d4:
8e:ef:3f:2c:1b:1d:33:38:90:36:15:1e:91:f1:32:4b:6e:e9:
10:9f:b1:ae:bd:1c:e0:d2:cd:36:92:26:6a:40:f5:2b:b1:7a:
cc:7b:1f:b8:ba:f9:89:6d:b1:69:b2:d4:83:4c:1c:ec:67:c5:
bd:71:70:2a:18:0c:21:af:05:fd:60:9c:10:29:09:c1:9b:15:
3c:56:15:92:0b:41:0b:09:b2:c9:52:fe:32:4d:22:9e:af:4e:
37:f1:e7:18:2d:13:c2:11:31:69:f5:a5:08:ea:79:02:ad:3f:
d3:36:00:2d:16:87:2f:bb:0f:10:05:fc:28:e2:2d:21:eb:37:
d9:ac:87:31
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUee3eAz3fo0PhoGmY1Ox7H5NmXn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNTAyMTIwOTQ5NDZaFw0yNjAyMTEwOTU0NDZaMDMxMTAvBgNV
BAMTKERGQkY3REYzNjg2MkI0ODFBRUI5MDNFMzA0RDBGQjYxMDhFMDY1RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXaiHx/Le/Jfvr2ej+8u1SIUU
mfprGiyS7R9/7f7VuDPiOza/wRn0HLDS32rR1RnWGAa7HnVSESAqBngeI6hRWC3N
uu6M+zepFVS7c7dM/EArP3y6InFI33CBdOCf611M6zB2+8a70HkBDyzom5k7eG1X
n7pVVk9/6x1XK9aZDKa5YgKMSkP+X0snDsPusp+mdebs00OEM0ZEydWfl7lAXZps
ZpBjc7gqKOEB2NA3O8TnefQcHp/wLUHLB+GzM5yEdR3gUg9OkIHQzBCGThiJ6SNW
immr+zvsFeGZOSXWR5W/exBoWnFBawZQgAACzCS20c/EbNb/vjvAKoh5zun5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU379982hitIGuuQPjBND7YQjgZeYwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzgzNTJlMzEzMTM3MmUzMjMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM3MzAzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
VXXkMA0GCSqGSIb3DQEBCwUAA4IBAQCEn0KB65FnwDZVPTZwpl6hugOMnD9RzQoH
2aOY9MURRXlklCNg7QJgmifwqQNRx7/LNIjD9ZRjSJZFLxooxPUFdXZv7Qk/bpi7
r6frbYG8EW+G8DUxrnMY3xuF1GC1z8qFFP6QAdmUfsQf0i8/TH/dF0Z4LhSUpMdl
ShDrb9SO7z8sGx0zOJA2FR6R8TJLbukQn7GuvRzg0s02kiZqQPUrsXrMex+4uvmJ
bbFpstSDTBzsZ8W9cXAqGAwhrwX9YJwQKQnBmxU8VhWSC0ELCbLJUv4yTSKer043
8ecYLRPCETFp9aUI6nkCrT/TNgAtFocvuw8QBfwo4i0h6zfZrIcx
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:43 2025 by rpki-client on console.sobornost.net