Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa
File: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=
Subject key identifier: FB:D8:F0:FD:9B:01:DC:AB:F8:E4:34:30:47:AE:8F:E0:C2:3C:DC:85
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 10C3F29B7EDBC7C4AD0245777599B7EFA993DBCE
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 09 Apr 2025 17:31:25 +0000
ROA not before: Wed 09 Apr 2025 17:26:25 +0000
ROA not after: Wed 08 Apr 2026 17:31:25 +0000
asID: 395793
IP address blocks: 185.58.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:f2:9b:7e:db:c7:c4:ad:02:45:77:75:99:b7:ef:a9:93:db:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 9 17:26:25 2025 GMT
Not After : Apr 8 17:31:25 2026 GMT
Subject: CN=FBD8F0FD9B01DCABF8E4343047AE8FE0C23CDC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:f4:07:cd:1b:e2:25:34:92:3c:34:9c:cc:
b5:2d:2d:31:d8:83:57:28:3b:85:60:5e:b8:d1:fa:
4a:19:73:97:ea:9c:9c:ff:87:51:49:5d:c2:45:39:
0e:f1:48:5b:e7:43:75:6f:45:1d:6d:20:42:d6:2d:
2e:bf:b8:44:ed:82:a8:3b:67:7a:c7:c9:5f:dc:a3:
80:48:5b:bd:fb:48:10:e8:7b:11:dd:e4:54:ab:51:
b5:be:5d:08:01:65:52:43:ca:dc:f9:e3:36:e1:5d:
0a:95:4f:8a:8c:fc:52:9f:cb:a2:00:5f:06:d9:39:
44:dc:53:26:1e:e0:89:a3:52:3b:15:de:41:82:ab:
d7:51:86:b1:7d:b9:a8:4c:49:5a:5f:7d:6c:b7:08:
98:fd:f9:79:78:bb:ff:8c:72:c5:39:ff:3c:fb:23:
ee:33:90:f9:61:96:f1:07:26:3e:1e:f7:8f:b6:fa:
0e:34:84:15:6b:f0:dc:ec:64:6c:3f:85:93:05:a5:
77:1e:44:d8:d0:25:89:6d:64:3c:80:93:86:14:69:
ee:08:e4:e7:33:c2:bd:f1:bd:f2:48:0d:bb:67:5c:
73:f6:e3:48:85:31:ae:f8:8d:af:02:ba:84:8c:df:
4e:90:67:7b:59:80:bf:c1:7d:53:bf:9e:7c:a9:a7:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:F0:FD:9B:01:DC:AB:F8:E4:34:30:47:AE:8F:E0:C2:3C:DC:85
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
47:58:94:19:59:5b:48:71:80:f1:d4:9a:53:9b:09:ae:f2:2c:
b8:7d:be:1d:d9:3e:e8:84:de:95:42:18:93:fb:89:53:5d:ea:
4e:7e:e5:98:71:c7:9e:d4:b9:c7:4f:7f:8f:fd:3f:d0:83:f6:
62:32:6e:59:ab:82:47:97:65:21:29:0a:9a:a2:86:21:4c:9c:
c9:c0:84:9a:13:51:2e:ad:e2:9c:74:b8:b0:65:60:09:40:84:
c4:bb:02:f2:7b:fe:ca:f3:76:42:07:5a:16:57:ac:df:5f:f1:
5b:21:2c:8c:94:b3:8f:68:12:cf:07:09:f6:2c:68:6c:c9:3d:
f9:74:8b:10:8f:94:5b:65:b1:55:6a:8e:ba:82:b0:5d:a7:36:
1f:95:b2:d0:82:fe:16:cb:b7:26:92:c2:1a:f9:45:3c:c6:f9:
a9:ed:40:9c:ae:8e:15:38:07:5a:da:42:d7:46:7d:cf:21:cd:
74:26:e7:79:2d:46:97:dc:d2:99:78:44:f3:b5:25:22:b1:09:
87:59:0f:2e:fe:ab:c1:46:86:e9:5e:9d:ed:73:87:26:f7:09:
40:e3:f9:d7:ee:f0:53:c8:44:f3:62:52:fb:38:02:60:3f:98:
5b:b5:d5:95:47:87:e9:69:e7:1f:f3:ff:3e:5d:20:a7:e7:6a:
9f:01:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net