Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323130373332.roa
File: 3139342e32362e32302e302f32342d3234203d3e20323130373332.roa (raw, json)
Hash identifier: tT1wyhQtNYuEkQ+eyJ48jXUB9g2vmRFlZCizzCPBgqg=
Subject key identifier: 9C:07:48:B0:BB:78:5C:95:A6:B0:7E:A3:D6:A1:E3:45:57:1A:78:7A
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 31BB98319040A5800CF68BD5849F4FB3BB34939B
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323130373332.roa
Signing time: Sat 05 Apr 2025 20:29:23 +0000
ROA not before: Sat 05 Apr 2025 20:24:23 +0000
ROA not after: Sat 04 Apr 2026 20:29:23 +0000
asID: 210732
IP address blocks: 194.26.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bb:98:31:90:40:a5:80:0c:f6:8b:d5:84:9f:4f:b3:bb:34:93:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Apr 5 20:24:23 2025 GMT
Not After : Apr 4 20:29:23 2026 GMT
Subject: CN=9C0748B0BB785C95A6B07EA3D6A1E345571A787A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:bd:5f:e3:f6:13:45:32:98:7d:bc:12:c6:
2a:70:38:b4:d9:34:11:6f:67:4d:c8:17:08:bd:c4:
bc:64:ab:cd:bd:21:c4:37:6f:9a:cd:eb:66:17:63:
76:0d:2b:d7:bd:0e:01:12:89:5c:c1:1a:7b:c8:83:
4f:25:ed:f7:3d:55:46:95:c1:c5:03:bc:8c:f2:32:
17:d2:86:b1:37:1c:19:aa:45:fc:50:29:9d:01:36:
32:97:97:ed:77:0f:f5:59:3f:d7:24:0b:67:ab:33:
ec:09:36:33:71:29:6e:7f:f0:63:fc:d5:01:65:bb:
7a:b3:e5:68:b8:41:6a:0f:7d:96:55:5c:7b:46:6f:
b6:a3:b8:9d:67:5d:d8:40:92:1d:c9:39:34:69:b6:
84:c8:ac:92:03:5c:5d:da:e6:f5:f9:c4:f1:7a:68:
16:56:a3:e4:b6:2a:c2:d1:39:0e:00:78:e7:c2:07:
27:a9:4e:2b:41:47:c2:dc:3b:1c:1a:cb:5e:f7:74:
77:90:53:76:82:2b:cf:e3:5b:32:1b:29:14:06:51:
3b:8f:56:c2:be:fd:c5:24:18:5a:56:ad:48:d7:f7:
23:41:87:4e:2d:4b:9e:b1:a5:56:ce:84:7c:f7:1d:
25:52:b7:7b:1d:a3:52:9e:17:94:68:7c:01:7a:e8:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:48:B0:BB:78:5C:95:A6:B0:7E:A3:D6:A1:E3:45:57:1A:78:7A
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32302e302f32342d3234203d3e20323130373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.20.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0b:e4:52:c0:c4:9c:ca:5e:65:47:5d:93:2f:a6:cd:47:20:
db:cc:eb:6d:ce:1b:b0:6f:d7:2d:ed:e5:87:7a:11:4d:27:e8:
89:58:59:5d:55:6d:ab:e9:83:32:58:ce:ea:ff:2d:f8:b6:22:
b5:17:c6:40:65:8e:9c:5a:69:41:51:52:10:c2:2e:1e:8c:2f:
f7:77:8e:75:0c:18:19:72:33:a8:91:4f:19:0b:57:9c:00:51:
02:68:4c:8f:e7:66:ee:81:52:ce:ce:11:8b:0a:90:12:f5:cc:
ad:cc:f4:29:35:75:d6:73:ba:e0:4a:5d:79:42:69:9d:88:c9:
e5:5c:e8:7f:f0:65:12:8d:62:49:b3:ad:d3:bd:42:8d:dd:be:
e8:73:15:1b:0e:4a:67:f8:d9:c7:f9:63:ca:5a:00:1d:8c:aa:
24:5a:14:a8:fd:6e:70:ce:ac:fc:65:40:3a:19:73:e2:0f:04:
ba:88:ad:20:67:03:8d:da:cb:6a:d8:26:3c:e8:e0:6f:e9:96:
de:69:2c:c6:cf:a1:fe:b1:04:88:d8:e0:ad:6b:d0:c8:0f:8a:
c1:82:82:20:1b:45:ab:86:db:d1:71:5c:bc:2e:41:7c:f7:99:
6e:73:18:c3:ab:71:b2:36:48:79:04:e4:ac:62:7c:d4:80:41:
dc:ff:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net