Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32342d3234203d3e203433383437.roa
File: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=
Subject key identifier: 19:70:7D:DF:CD:68:12:D5:DA:3A:06:08:1D:2D:6A:06:AF:E7:3B:8B
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 4460C7AB960A458DB2567FB209F31A3D1616E013
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32342d3234203d3e203433383437.roa
Signing time: Wed 09 Apr 2025 03:07:51 +0000
ROA not before: Wed 09 Apr 2025 03:02:51 +0000
ROA not after: Wed 08 Apr 2026 03:07:51 +0000
asID: 43847
IP address blocks: 46.182.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:60:c7:ab:96:0a:45:8d:b2:56:7f:b2:09:f3:1a:3d:16:16:e0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 9 03:02:51 2025 GMT
Not After : Apr 8 03:07:51 2026 GMT
Subject: CN=19707DDFCD6812D5DA3A06081D2D6A06AFE73B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:74:49:cf:44:82:f7:32:82:41:b1:5c:1b:
7e:3f:0b:7e:a8:7d:b0:35:34:c6:73:32:5a:7b:e2:
23:54:c9:87:d5:63:5b:f5:c1:f4:96:f1:1f:3b:a0:
25:15:e9:60:5e:80:fb:e0:37:29:9b:48:95:22:9e:
51:43:dc:4e:51:1f:bc:2b:21:f7:e4:14:56:af:4c:
39:05:ff:7b:fc:95:61:c1:4b:91:ca:f4:14:27:bc:
5b:c7:6e:3d:1d:9f:1d:93:95:f8:63:e4:f6:7b:55:
84:47:42:ce:91:cf:3b:7a:4a:75:d8:68:ee:f6:52:
82:43:7c:a8:92:c0:76:71:16:94:a8:ec:7a:12:8d:
cd:19:29:c7:e5:b1:a7:5a:ff:6d:ec:7a:be:3a:05:
a4:c7:d4:96:16:b8:56:70:18:5e:59:5a:a0:81:23:
9f:d5:b3:10:b5:1b:4d:ac:26:e2:34:b0:88:92:69:
14:8c:f8:ac:df:03:00:66:c7:df:55:76:f1:26:25:
02:36:dd:14:13:e1:0e:08:e2:58:f4:23:be:fc:87:
da:66:47:c5:f3:61:a5:d5:4e:78:c2:ad:b5:89:e2:
67:dc:01:68:60:f5:06:9e:2a:49:2f:96:45:2e:bf:
ab:2e:06:e7:fc:36:b3:a7:9d:cb:00:42:15:1f:5c:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:7D:DF:CD:68:12:D5:DA:3A:06:08:1D:2D:6A:06:AF:E7:3B:8B
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32302e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.20.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5f:11:c1:7d:46:a1:31:de:c5:0a:d1:c7:8d:e7:2a:ae:7d:
e2:8b:b5:c7:67:91:25:2e:c6:ee:10:da:96:ef:99:4c:b9:a8:
75:61:6b:db:9b:28:a2:cf:b1:a1:68:b8:d4:a7:be:d2:17:6c:
74:3b:c2:35:d3:c2:58:95:b5:73:2a:6b:f3:44:88:db:0f:35:
d9:4c:3a:6b:63:8d:96:59:8e:40:e1:1e:49:20:46:4c:69:de:
20:78:63:21:68:e2:fd:bc:2d:64:ce:b5:4d:43:aa:d5:83:32:
47:45:a5:6c:2e:9b:81:4c:15:5e:d5:21:64:25:60:f1:f0:7e:
23:5a:fe:5a:c2:26:db:3d:50:db:d1:32:fd:6e:9b:7c:75:da:
bf:b7:25:d5:e4:b2:df:e6:c0:a2:24:ce:9d:0a:61:68:d7:f3:
15:66:81:9f:e5:a2:18:24:42:88:37:94:ab:dc:d8:de:3c:e7:
10:14:8d:4d:2d:64:95:be:0e:56:18:78:05:6b:cf:a2:0d:67:
7e:d2:9a:9e:a9:7d:f2:41:3e:12:1a:59:7f:38:54:16:11:44:
5e:a8:49:ec:0c:13:25:2d:ac:f8:c3:51:54:30:51:05:1e:16:
52:0a:8a:76:97:d0:34:19:94:2d:20:a5:5b:4a:63:45:4d:2f:
16:05:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net