Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: KNy/04N9eFJhLGLziKUtLlKXZyCJA/5l8BcpkU/cTQk=
Subject key identifier: C4:92:30:D2:74:A3:B4:FD:7A:29:C8:0E:0D:38:3C:12:75:8D:70:EC
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 7471F9269083AD62D17B0A680EABB576AEBF2D6D
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS39521.roa
Signing time: Tue 08 Apr 2025 20:22:41 +0000
ROA not before: Tue 08 Apr 2025 20:17:41 +0000
ROA not after: Tue 07 Apr 2026 20:22:41 +0000
asID: 39521
IP address blocks: 85.8.160.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:71:f9:26:90:83:ad:62:d1:7b:0a:68:0e:ab:b5:76:ae:bf:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 8 20:17:41 2025 GMT
Not After : Apr 7 20:22:41 2026 GMT
Subject: CN=C49230D274A3B4FD7A29C80E0D383C12758D70EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:70:7b:f3:d1:2f:a4:fb:ed:f8:79:4a:6c:
3f:45:dc:14:c9:31:4c:f0:bd:54:8f:35:da:34:d7:
47:5d:b8:1e:1a:e7:a8:96:64:43:e2:e3:b5:b0:8e:
b3:c9:94:4c:1f:5b:10:4f:77:62:c0:44:27:d5:6e:
30:fe:ab:d6:66:19:8b:6f:7b:a2:b1:44:f1:72:79:
24:04:54:1b:a8:5e:24:97:5e:e1:0f:d6:cd:5e:68:
a2:2f:aa:85:36:79:33:ee:7f:8b:61:d8:56:f2:57:
3c:8b:f1:f6:0a:00:13:dc:3c:ba:27:71:66:50:2a:
cb:f9:13:00:13:40:fe:23:c6:85:52:b7:cf:ff:18:
0a:47:9a:4e:b1:77:45:11:cc:18:95:47:0a:eb:ca:
17:f2:99:cc:47:07:40:f9:27:1f:a2:57:05:2a:74:
58:c5:9d:d7:1f:f1:d0:56:d0:b4:5e:7d:37:e7:e4:
c7:c7:5b:6e:40:04:c7:8e:5e:68:61:e2:2b:02:8d:
c9:fa:51:a7:ca:ac:aa:f5:c4:3f:a1:e1:9f:80:02:
db:5d:0d:e2:95:b4:e0:bf:85:cd:0e:3f:f7:48:3f:
3f:82:6e:e1:13:f8:ca:97:4b:23:64:d2:4d:ae:aa:
ad:e9:e8:4f:49:c5:2a:0a:ad:f9:9c:4d:9e:b8:9b:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:30:D2:74:A3:B4:FD:7A:29:C8:0E:0D:38:3C:12:75:8D:70:EC
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.160.0/22
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
15:26:04:dd:4f:87:9e:60:9a:aa:9d:42:ea:bd:3c:69:2f:77:
08:d0:31:22:17:50:8e:1b:3c:14:ef:85:99:78:1e:50:57:14:
08:bb:ae:19:e9:87:44:8b:b7:05:79:44:ed:78:5f:c3:25:e5:
e8:6e:aa:0a:7b:f0:fc:3e:fd:62:2a:70:37:59:66:4b:02:68:
dd:04:91:a1:29:f1:e8:5f:48:76:c8:4c:41:8e:a2:09:4a:45:
87:fa:20:ea:da:31:1f:5c:eb:fa:46:96:89:e1:65:40:08:54:
91:b2:e9:9e:50:54:ac:f9:c3:81:18:cd:a9:31:0e:09:68:fc:
a4:94:ae:1d:7c:6d:e3:a2:88:d2:19:67:28:4e:b1:49:80:f1:
c0:16:8f:c0:be:e6:1c:55:e0:8c:56:3e:a0:f9:0b:40:37:e6:
e1:02:c7:b0:a9:ab:72:44:b3:9b:7b:3b:be:90:39:5f:22:74:
ed:13:89:27:37:aa:cb:e5:ae:53:d8:86:c9:cf:a8:a4:13:e5:
4b:3f:52:a4:fe:b4:6b:ef:bd:ed:56:80:26:31:d0:18:df:33:
31:7f:25:01:77:60:2a:4e:96:3e:6d:87:01:e3:93:b1:fb:53:
3c:10:eb:98:88:f3:73:fd:8d:c5:a8:ed:b5:1b:dc:31:79:01:
66:1f:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net