Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
File: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=
Subject key identifier: 35:D5:1C:44:A8:97:0B:87:FA:9E:9A:77:74:45:83:C2:A9:0E:2E:11
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 7C5163C1856B519949E5A3FF09C9BBA98948F200
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
Signing time: Thu 06 Mar 2025 07:38:24 +0000
ROA not before: Thu 06 Mar 2025 07:33:24 +0000
ROA not after: Thu 05 Mar 2026 07:38:24 +0000
asID: 5065
IP address blocks: 31.185.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:51:63:c1:85:6b:51:99:49:e5:a3:ff:09:c9:bb:a9:89:48:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 6 07:33:24 2025 GMT
Not After : Mar 5 07:38:24 2026 GMT
Subject: CN=35D51C44A8970B87FA9E9A77744583C2A90E2E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:5a:ad:f7:fc:6c:2b:55:d7:f9:7c:f7:7d:
ad:cd:85:4c:22:7f:8b:b1:18:e6:68:bd:9d:7d:02:
00:41:55:f5:00:55:71:a9:9f:4e:9e:df:1b:3c:96:
54:5f:f6:26:6f:47:cd:50:ae:d2:bc:27:b4:0d:56:
b0:e6:02:45:19:c0:3e:e1:6d:9b:85:13:90:ad:23:
81:6f:a6:d9:39:35:88:0e:ed:b8:ba:d1:61:2e:21:
59:cc:ac:3d:e4:8b:29:7d:6d:d0:c4:fd:6b:b4:e5:
5f:19:6a:b2:d4:b2:3f:f3:16:6f:fc:c2:d2:01:7d:
fd:28:ea:e2:14:38:cf:3d:78:c3:f2:2e:3e:ac:62:
a5:66:4d:6b:3b:94:0e:df:d9:b1:b8:ce:46:75:a1:
64:1f:9f:09:c4:4e:86:ae:70:04:e7:ec:92:83:3c:
8f:d2:5a:16:f0:b8:99:53:9f:fa:4a:ce:a0:91:7d:
ec:67:4a:56:c4:0a:d8:59:25:b1:7d:8c:fe:25:03:
09:e1:bb:a7:12:da:8c:06:91:99:ad:98:e5:bc:b1:
b0:2f:94:66:8e:c9:80:24:d6:8f:10:67:bf:a7:de:
8d:2f:81:18:28:6d:dd:5f:d4:ca:39:2a:89:92:9f:
9e:c0:86:aa:67:5c:f0:9a:c2:79:3b:e0:13:12:0f:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:1C:44:A8:97:0B:87:FA:9E:9A:77:74:45:83:C2:A9:0E:2E:11
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130392e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:84:65:c9:8f:9e:03:29:a2:a1:46:15:ea:41:45:1f:5d:33:
d7:7d:68:b3:81:dd:9d:91:34:bd:4e:db:01:e8:3b:58:55:d3:
1b:ec:a7:e6:bc:e0:d8:ea:2f:a6:8e:8d:03:ad:d4:62:c5:39:
3c:71:0e:71:f9:d2:0d:1c:a8:4f:72:22:b4:b1:f9:64:07:0b:
ab:9b:22:9d:a1:61:ee:67:52:eb:67:07:0a:87:c8:a4:46:ad:
c8:9d:42:bf:d7:4a:3b:a2:38:18:8f:9b:8d:75:99:95:ec:ac:
f8:79:0e:b6:ae:bf:17:8e:5e:d7:25:70:99:d6:10:79:16:24:
e0:0a:65:1a:a5:1e:d4:93:0e:32:82:ce:f5:4d:04:af:4d:a7:
6f:e8:d6:65:36:96:8f:35:cd:87:c4:65:75:3a:49:c6:84:c2:
80:00:7f:c1:bb:61:cb:69:88:d2:69:84:ce:e6:4a:b0:11:e9:
85:74:87:69:74:41:26:d8:05:3d:19:69:64:93:c5:c0:f7:46:
2a:57:87:ae:81:e8:84:07:34:51:af:d4:d0:7d:23:f8:15:79:
5a:f1:2f:ed:c4:1e:7e:e5:54:6f:07:a7:c2:87:de:02:cb:b2:
1a:9e:04:d7:f2:34:61:3a:19:db:0c:74:f0:a0:e4:a4:07:4f:
6a:09:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net