Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa
File: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=
Subject key identifier: 99:E5:E0:F1:2A:84:19:8D:9E:66:9A:52:E8:0B:9D:60:10:E3:C7:96
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 1735B6D78ED2D47EB3FAAE1154BAA6085C8486D2
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa
Signing time: Tue 08 Apr 2025 15:56:14 +0000
ROA not before: Tue 08 Apr 2025 15:51:14 +0000
ROA not after: Tue 07 Apr 2026 15:56:14 +0000
asID: 42831
IP address blocks: 213.157.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:35:b6:d7:8e:d2:d4:7e:b3:fa:ae:11:54:ba:a6:08:5c:84:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Apr 8 15:51:14 2025 GMT
Not After : Apr 7 15:56:14 2026 GMT
Subject: CN=99E5E0F12A84198D9E669A52E80B9D6010E3C796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:19:fa:8a:5c:74:01:72:4c:cc:f3:b7:26:
92:ed:52:d9:99:20:fb:2a:99:e8:f3:9c:57:b0:b4:
ef:6a:d5:57:8d:c6:b6:67:e5:1a:93:28:fa:ef:45:
cc:d2:bd:fd:d0:59:e6:f4:05:07:78:7f:c3:75:dc:
42:09:59:05:63:ae:26:c4:a9:75:3e:bc:2d:88:05:
98:8c:33:2e:4e:9c:b1:f9:82:3c:21:9d:7d:58:38:
5b:6e:83:13:e6:a3:15:43:56:a0:d7:6c:39:4d:91:
70:18:8b:6b:c7:d1:cd:51:17:88:80:a6:9c:e5:64:
31:d9:6f:2f:46:4e:23:74:f5:ef:9e:3c:1d:49:f5:
1a:5f:ea:6d:96:82:98:e9:77:5f:34:c9:79:5a:6e:
f6:9f:48:e3:e6:1f:63:af:17:a2:22:26:e2:90:f2:
8a:5d:0b:70:29:64:91:33:5c:bf:9d:a4:6a:9c:d7:
43:8a:ca:01:80:65:ca:98:7c:a6:e5:3e:71:92:1c:
a4:47:80:42:83:fb:88:71:79:bb:4d:65:d2:2e:6c:
2e:f7:f0:f1:cc:fd:7e:b5:9d:9b:62:32:cb:93:83:
76:56:cf:19:61:90:82:51:ea:2a:06:35:31:15:df:
df:6d:fd:09:0c:7a:d9:e2:e2:0a:a4:af:b3:7c:06:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E5:E0:F1:2A:84:19:8D:9E:66:9A:52:E8:0B:9D:60:10:E3:C7:96
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:72:e9:48:2c:18:a1:f3:6e:fa:87:21:89:fe:36:9a:98:07:
28:2f:07:d8:7d:65:82:5a:88:2a:1e:9c:4f:6d:d0:18:8c:50:
71:13:e4:dd:3b:20:44:d7:9d:33:f5:40:d6:77:83:ff:5e:a1:
51:e7:41:59:7c:b0:f2:17:11:c0:47:12:46:36:ed:69:3c:b9:
1f:13:36:65:45:34:aa:4f:c3:97:3f:ed:9d:5b:99:12:26:0b:
ad:2c:70:b0:84:8a:9d:24:44:c9:46:35:60:0f:08:dd:e4:bd:
12:ea:da:46:3e:b8:f8:80:44:fa:65:4b:b8:71:9f:d2:fd:b9:
ff:23:4d:7d:d1:e4:d1:61:9a:d5:0d:b6:50:86:a6:1a:a8:0b:
2f:0c:7b:ce:ca:83:f8:22:ac:e8:08:6e:d4:88:16:fa:f3:24:
15:af:fc:21:68:56:65:86:7a:2a:9b:23:7a:46:62:93:a0:7a:
e7:f8:15:35:af:8a:58:fa:78:c6:f3:a0:24:69:81:0d:95:65:
e3:22:78:b4:68:7e:7e:6a:9e:72:5d:3f:68:00:b5:7e:0b:0a:
d1:04:8d:e0:f3:45:e3:4e:3d:22:6e:59:8e:bb:8b:b0:64:f7:
5b:99:d1:2d:de:55:ef:13:76:31:48:ce:b1:58:bd:82:06:2e:
4e:49:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net