Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32342d3234203d3e20323135323837.roa
File: 38352e3131372e3233302e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 2nsFticNQAdOmLPl4+KjiGwvp0al3c3qaJAna6TgFpI=
Subject key identifier: 5D:F6:DB:B5:F5:89:C4:D1:C3:01:96:B3:F8:77:2E:8F:4F:84:9A:0F
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 159B973695F54718F2DA874425BB5019F407E517
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 08 Feb 2025 12:55:44 +0000
ROA not before: Sat 08 Feb 2025 12:50:44 +0000
ROA not after: Sat 07 Feb 2026 12:55:44 +0000
asID: 215287
IP address blocks: 85.117.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9b:97:36:95:f5:47:18:f2:da:87:44:25:bb:50:19:f4:07:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Feb 8 12:50:44 2025 GMT
Not After : Feb 7 12:55:44 2026 GMT
Subject: CN=5DF6DBB5F589C4D1C30196B3F8772E8F4F849A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:1b:ec:c1:e6:85:ab:16:1c:80:03:88:85:
e3:ea:0c:fe:09:53:88:a9:78:e7:be:df:19:a7:b7:
10:1e:65:de:9d:50:7a:06:3e:3c:65:68:0c:96:72:
52:19:f8:c6:c3:0c:fb:17:8c:b8:c4:d0:bc:c5:7a:
2b:e7:c6:df:ba:7d:91:84:95:07:7b:8a:23:7e:a7:
6b:4e:28:6e:1a:ad:29:df:ad:61:de:b2:4f:c2:e5:
a6:f1:1c:22:72:62:86:74:53:cd:3a:9a:4d:aa:0e:
ff:09:8b:3b:5f:e5:8d:f1:18:5e:95:82:23:ac:5b:
d4:cd:94:a8:88:d2:0d:26:8c:b4:32:0c:73:16:cc:
76:fe:1a:f9:f8:7d:97:a6:08:13:53:e4:07:97:f1:
59:11:a7:59:67:99:3e:8d:d5:0b:32:d7:7b:8d:88:
e1:12:7f:fd:38:79:cb:9e:b4:5c:73:6f:57:81:3e:
da:9d:41:bf:a9:1b:b5:2b:b5:5d:1b:c4:43:0f:0b:
2c:91:83:60:30:b9:38:07:a3:7a:03:ae:19:22:a1:
bd:ae:57:66:d9:20:d0:95:fb:f4:39:e5:bb:70:7c:
aa:38:84:b3:61:b0:db:f1:3a:ca:88:9a:15:60:db:
74:d4:0e:84:8d:ab:47:7e:2b:d9:43:9d:51:65:cd:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:DB:B5:F5:89:C4:D1:C3:01:96:B3:F8:77:2E:8F:4F:84:9A:0F
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233302e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.230.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3d:67:dd:91:f7:60:c4:c2:99:2e:54:bb:c2:71:3f:34:46:
21:e6:b6:83:60:b4:dd:25:fd:6a:a6:d2:30:28:a0:09:90:e0:
0a:75:cf:28:06:9e:2f:61:46:5e:05:af:af:3a:94:8c:79:1f:
dd:ad:76:ac:7f:f9:a5:3b:ca:a8:de:3d:f0:42:dd:d5:7e:72:
29:9c:aa:28:9e:16:cd:ec:08:e6:74:cd:78:d5:ec:d8:d5:85:
ab:ee:ff:9f:b0:77:b9:46:44:e9:19:de:bd:70:dd:07:26:b5:
71:da:fb:a3:be:26:22:ee:67:e0:3e:02:61:5d:df:9b:94:3e:
e4:19:e5:f1:1b:da:52:a8:6a:25:fd:00:f5:31:da:70:62:99:
9a:b5:b2:61:b3:10:a0:e0:6e:ff:6a:bd:f2:ae:a4:19:60:3e:
7e:2f:48:9a:6c:6c:6a:1b:c0:e5:46:81:a5:82:6b:65:57:b0:
e9:f7:91:6e:de:1b:20:d6:69:e2:27:a7:b1:d2:f3:bb:67:17:
0a:53:15:1b:f8:5c:e3:6b:b8:73:e2:47:ea:58:3c:b8:02:24:
21:f2:1f:0f:5b:48:a5:94:6d:f3:53:5e:bd:2f:5e:00:e1:2e:
50:55:9b:6e:51:f2:df:ce:a1:7d:9f:22:43:d0:17:6d:0a:33:
a7:fe:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:43 2025 by rpki-client on console.sobornost.net