Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132322e302f32342d3234203d3e20383334.roa
File: 3231332e3135372e3132322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: XBixnko3qtEccfsl7C8E/1A0CemeZocPCP9lkkwrqDw=
Subject key identifier: 43:92:52:E3:25:CE:E9:AF:08:9D:F3:0E:6C:4E:A0:4D:61:D3:31:A9
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 61D1425502A7801249445070EB02E5632ED9DBC6
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132322e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Apr 2025 10:18:20 +0000
ROA not before: Fri 11 Apr 2025 10:13:20 +0000
ROA not after: Fri 10 Apr 2026 10:18:20 +0000
asID: 834
IP address blocks: 213.157.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d1:42:55:02:a7:80:12:49:44:50:70:eb:02:e5:63:2e:d9:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Apr 11 10:13:20 2025 GMT
Not After : Apr 10 10:18:20 2026 GMT
Subject: CN=439252E325CEE9AF089DF30E6C4EA04D61D331A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:66:de:ee:2b:b1:55:b0:7a:49:44:f5:7e:
d2:2e:4b:a0:05:5a:e4:45:17:7b:b8:37:1e:55:f2:
aa:d9:48:56:70:35:37:48:3f:52:ba:c6:e4:c8:1a:
d7:4d:59:60:58:18:00:2c:1d:37:04:97:de:45:7c:
fc:99:e2:1c:eb:ba:03:fe:78:06:23:53:84:c6:2b:
80:f5:e5:3d:09:eb:4d:d3:22:3b:9e:7d:48:4f:37:
32:4a:a0:42:82:e6:8a:48:72:ad:1a:c1:19:1c:0b:
7b:7a:94:23:34:db:29:72:3c:8b:52:8e:5a:29:03:
5a:dd:72:8b:92:8f:c0:cf:9c:1d:af:1c:6a:e9:ca:
e0:0f:3f:fe:a3:43:1a:f3:5a:16:c2:d8:0f:bb:f0:
26:cd:a7:35:42:4f:63:ad:d1:eb:f9:6d:a7:21:25:
cf:b8:10:34:f7:7d:82:3e:a6:7d:05:1f:d0:3d:45:
7c:24:e2:81:64:47:ef:9b:ff:06:58:1c:fa:40:38:
4f:f3:d6:22:c8:3e:43:73:fb:e5:9c:4b:22:34:75:
73:86:2c:9e:8d:c3:f7:19:12:a7:9f:c8:e7:e6:5c:
e2:0c:db:43:06:75:63:3f:7b:97:94:89:4f:83:da:
55:72:17:12:e9:f9:a8:16:c8:d5:73:24:18:1b:ce:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:52:E3:25:CE:E9:AF:08:9D:F3:0E:6C:4E:A0:4D:61:D3:31:A9
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.122.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bc:79:84:51:c3:45:98:2c:38:cd:78:3d:b3:f0:ed:e7:c6:
56:87:90:93:97:20:84:4e:0e:ec:04:ec:a6:02:4a:ec:8b:fe:
3b:f1:6a:5f:73:3b:da:95:1f:81:87:09:f5:48:14:be:ce:11:
f3:1f:f9:b1:cb:40:a6:8e:35:a9:77:0c:62:d0:e6:7d:c8:30:
0e:67:44:e3:91:ca:42:08:a6:05:19:bd:2e:65:56:97:34:64:
0b:f7:67:b4:b0:43:ad:e1:b9:1c:8d:61:e9:e2:4b:61:7f:78:
6d:43:56:d7:48:ea:2e:21:35:ff:73:42:87:60:c2:56:a3:d3:
e1:d4:85:44:d5:92:c5:da:c7:c1:85:d2:22:b0:f5:8d:0a:e9:
c4:f1:71:d7:6a:70:41:a5:55:f0:56:8e:fb:c8:6a:4c:b0:e0:
89:a8:0e:47:ce:2f:cb:73:80:30:75:7e:a4:16:00:96:2c:8b:
47:4a:05:cf:f3:c2:dc:4f:df:e6:c6:cc:af:de:c5:c6:c7:ad:
f2:20:59:17:30:3a:f1:10:2e:21:43:39:26:cf:06:89:58:dc:
44:6b:3f:a8:eb:3e:cf:0d:d1:3d:60:24:f5:da:e9:c0:13:95:
5d:71:79:8d:ef:e8:88:ef:e7:54:30:52:c4:cf:ef:3d:b8:f1:
cc:80:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net