Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa
File: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=
Subject key identifier: AA:C4:97:F0:AF:27:40:58:36:7B:54:DB:1F:F1:45:86:84:F1:D8:C5
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 45BC586E27F2E04B5956AD75ECA0840B685B3257
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa
Signing time: Fri 11 Apr 2025 10:15:23 +0000
ROA not before: Fri 11 Apr 2025 10:10:23 +0000
ROA not after: Fri 10 Apr 2026 10:15:23 +0000
asID: 137517
IP address blocks: 213.157.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bc:58:6e:27:f2:e0:4b:59:56:ad:75:ec:a0:84:0b:68:5b:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Apr 11 10:10:23 2025 GMT
Not After : Apr 10 10:15:23 2026 GMT
Subject: CN=AAC497F0AF274058367B54DB1FF1458684F1D8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:8c:df:a8:e4:3b:a6:f9:9f:19:e2:3b:ca:
ae:0b:a7:8b:7f:b4:75:27:4e:c4:a9:77:d2:2b:3d:
60:91:72:55:9c:e2:9c:7d:43:3b:8c:ff:cf:f7:db:
4e:cc:83:ba:ec:e7:10:c0:6c:f0:22:a9:a5:ee:95:
5d:fa:c9:7f:28:ff:31:18:13:64:6c:48:6c:b8:70:
12:d8:ea:10:73:ab:52:55:3b:66:5c:ee:d9:7c:85:
57:66:52:a5:db:34:e6:ba:d9:f5:82:39:3f:8b:a3:
28:60:55:3b:fa:e0:3e:b4:01:d7:e8:c5:47:09:1c:
c1:93:3f:dc:9a:b0:6d:98:25:72:16:b1:0e:d0:05:
49:ec:10:b4:df:3f:2c:2d:a1:bf:e4:e8:ce:90:36:
01:dd:e6:74:97:95:90:7d:4c:fb:ec:eb:80:44:d2:
57:3b:d6:22:05:c6:e1:61:f1:31:75:7f:be:78:b2:
6c:e5:c0:3d:a8:91:7b:04:5e:00:33:b1:7c:4f:4c:
35:55:66:b4:f3:dd:b8:cf:e8:91:43:0a:d3:b8:f4:
16:ff:38:74:26:bf:4d:60:85:b2:06:11:0f:07:10:
01:35:cd:ad:90:16:4b:57:e1:86:d9:3a:41:4a:58:
4a:cc:24:21:0e:72:d0:cc:97:bc:38:7b:3a:b2:09:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:97:F0:AF:27:40:58:36:7B:54:DB:1F:F1:45:86:84:F1:D8:C5
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f6:23:47:d4:79:99:34:ff:de:b2:ad:24:41:15:8d:69:e2:
10:6c:4a:d9:a4:83:ce:da:78:1d:07:14:5e:d0:0a:a4:82:93:
76:8f:50:a1:4e:2e:b8:62:a7:93:21:b8:7c:b8:f1:07:8f:34:
76:7e:df:28:66:4f:72:b3:ee:cd:04:a1:78:d7:97:61:c3:13:
a4:0b:55:3c:9e:3b:77:7b:17:e9:80:ee:d9:97:e1:81:f2:d5:
40:5b:da:e4:21:0d:ab:4e:01:4f:32:2a:7b:4c:27:d8:c2:8f:
71:fd:53:7d:84:f6:90:c0:74:27:f3:74:1c:b1:99:29:14:d8:
3b:a1:52:4b:05:f0:c7:3f:dd:d2:1a:f3:68:c6:82:50:0e:7c:
b4:74:59:d5:b6:06:e4:55:72:87:b8:d7:9d:d2:0e:81:69:78:
d6:2a:a9:d2:ce:ec:26:a6:b6:ec:2c:e7:29:05:99:27:bf:90:
1e:02:89:45:58:00:2f:e6:bb:8e:ca:56:86:c8:75:fe:7e:48:
51:b7:6d:5c:2a:b4:f9:2e:20:49:7c:7a:cd:ac:a5:d7:aa:aa:
a3:6c:1f:cf:19:74:3d:0e:6e:75:70:75:04:37:e0:8c:7a:18:
03:78:98:5a:1f:ee:c0:d2:78:90:fd:45:18:0f:ab:2b:af:e0:
4e:d6:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net