Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131312e302f32342d3234203d3e203433383437.roa
File: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=
Subject key identifier: 3D:E1:99:DF:83:F7:4D:2E:E5:05:4B:40:58:C8:80:65:EF:13:CD:A3
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 74B4C231A7984F34BBEF0334D7B82C5E5E323BFE
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131312e302f32342d3234203d3e203433383437.roa
Signing time: Wed 09 Apr 2025 03:07:39 +0000
ROA not before: Wed 09 Apr 2025 03:02:39 +0000
ROA not after: Wed 08 Apr 2026 03:07:39 +0000
asID: 43847
IP address blocks: 31.185.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b4:c2:31:a7:98:4f:34:bb:ef:03:34:d7:b8:2c:5e:5e:32:3b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 9 03:02:39 2025 GMT
Not After : Apr 8 03:07:39 2026 GMT
Subject: CN=3DE199DF83F74D2EE5054B4058C88065EF13CDA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:e2:48:2d:2b:be:3f:87:5d:7d:d5:dd:f9:
e5:c3:e8:fa:94:85:a6:a9:11:a2:0d:06:a9:c9:84:
d4:af:0b:7d:4e:a4:55:9d:99:a5:88:af:07:8d:39:
e4:9b:ec:1e:9d:ed:4d:22:d7:48:b0:64:ea:7a:c9:
c5:cd:91:ce:58:b3:f5:8c:13:cf:67:c0:99:f0:92:
f8:40:8e:88:9c:78:98:0f:ee:09:45:59:9f:91:09:
cd:80:67:70:53:d4:19:cc:b7:47:44:16:42:61:66:
61:1e:6f:c7:7f:c7:58:53:a0:20:08:66:ed:f2:71:
f5:41:63:c0:56:74:f4:7f:d2:36:56:15:66:be:29:
2e:e2:c5:05:1e:dc:4f:d3:cd:1b:ba:cc:4f:75:eb:
4b:e2:32:e1:33:f4:d7:1a:88:bc:1f:1a:81:bf:8d:
4a:40:93:84:d6:1a:be:36:48:b3:1c:57:26:6f:9a:
d7:d1:60:b2:09:df:f3:a5:ca:e6:be:69:37:ac:2e:
77:6b:ee:a0:63:3d:ee:5b:9d:73:c4:c5:e5:89:46:
80:4f:7e:fe:59:27:e7:bd:19:45:48:21:e5:0c:14:
1b:9e:d7:23:83:8a:7f:44:ad:c2:e5:bc:ea:1e:c4:
a0:51:54:4c:48:40:98:a0:ca:3c:68:dd:67:c4:5b:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:99:DF:83:F7:4D:2E:E5:05:4B:40:58:C8:80:65:EF:13:CD:A3
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3131312e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1a:76:9d:e3:70:ce:26:b1:ff:6c:eb:4e:07:d8:b9:3d:a1:
79:a6:ba:a9:00:da:02:b6:1d:99:2b:6b:16:2a:71:4e:50:ba:
3a:36:5b:ec:07:95:bd:f4:57:07:82:d9:c1:34:bb:cb:ce:09:
87:fd:38:9d:9d:a8:7e:95:82:28:84:1b:95:51:fc:1a:27:60:
65:02:75:85:02:5a:c6:12:fb:44:86:b6:0d:d2:3a:83:28:8d:
13:ed:37:15:e3:20:76:22:56:aa:91:46:9c:a0:18:31:e8:38:
61:69:46:43:f2:cf:9d:94:0c:59:27:43:f7:29:f5:5e:d9:f6:
c1:f2:86:c9:35:f5:57:55:99:99:33:d6:bc:fa:85:06:28:6a:
7b:1e:9a:e3:16:60:a1:d1:ab:2e:85:f7:00:eb:00:eb:65:78:
f1:b8:43:9c:e7:ef:61:66:95:cf:4d:fa:e0:e7:47:43:35:e3:
6f:6e:2f:49:b3:7d:f9:04:8d:f9:96:81:7e:7c:dc:f5:aa:60:
36:2b:2e:34:da:3a:ad:7e:8e:8f:37:18:d1:e4:8c:07:36:06:
cb:9b:36:c3:9c:58:af:09:a9:98:77:e8:86:cf:1d:74:44:ec:
cd:1a:24:92:0a:69:30:99:7b:9b:ff:08:d4:3c:ee:d7:dc:54:
99:7f:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net