Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3136392e312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VwU+DneI/jNSRIEgPeUVPTz2a3asbaqFWEE57chHryk=
Subject key identifier: 5B:AA:AC:24:10:B3:32:F2:86:83:3E:29:8D:DE:71:C3:47:14:96:2C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 35B69A2FD63CE3761C0F684632814DAC921EBE47
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:03 +0000
ROA not before: Sun 13 Apr 2025 11:41:03 +0000
ROA not after: Sun 12 Apr 2026 11:46:03 +0000
asID: 136787
IP address blocks: 185.169.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b6:9a:2f:d6:3c:e3:76:1c:0f:68:46:32:81:4d:ac:92:1e:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 13 11:41:03 2025 GMT
Not After : Apr 12 11:46:03 2026 GMT
Subject: CN=5BAAAC2410B332F286833E298DDE71C34714962C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:1b:a3:90:ab:80:07:c0:6f:9e:ca:be:a5:
19:fb:e7:0d:35:f0:eb:64:9f:eb:59:4c:81:3f:82:
eb:5b:70:0e:a3:df:95:13:05:34:b3:10:f5:14:fb:
c9:b6:85:cb:48:55:7e:ef:4c:6f:41:f8:dc:ad:60:
4a:ce:b4:0c:25:8c:0f:1d:9c:86:b6:07:c5:b5:35:
aa:09:3e:86:4f:81:41:a5:e9:58:3a:da:54:ed:e3:
57:5b:4a:59:0a:6c:2c:20:21:0b:f1:d4:8f:59:dd:
ad:00:88:aa:b1:80:3c:51:a8:9b:ef:9d:a5:06:b6:
24:f2:7a:a3:9f:85:8c:f1:93:c7:92:c7:a2:b2:59:
18:f1:2e:2a:01:a0:92:f8:8a:2b:85:49:2c:c9:69:
75:16:8a:b0:5e:e4:10:92:81:f6:3c:cb:3c:47:8b:
d3:02:c8:45:36:45:89:70:4c:f3:0e:64:c1:af:2b:
40:d9:da:09:77:a0:92:e2:a3:54:b1:ec:73:61:e7:
5e:7e:e4:fd:95:a8:5e:0d:0c:fe:fe:fe:5d:b7:3f:
db:ca:c3:f5:0a:4b:4e:c3:b2:67:81:5c:51:71:8a:
12:00:c5:ba:de:74:10:8d:ef:81:79:03:c9:8f:0b:
d3:b5:95:7a:8d:00:d9:99:6a:27:00:ab:9e:a8:e0:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:AC:24:10:B3:32:F2:86:83:3E:29:8D:DE:71:C3:47:14:96:2C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.1.0/24
Signature Algorithm: sha256WithRSAEncryption
38:71:aa:aa:c7:7b:7d:66:fe:7a:c8:53:b5:d5:84:74:a5:bd:
a4:37:7c:c8:c2:28:b5:3e:2f:63:f2:56:4c:a5:2b:05:01:1b:
31:fc:97:a9:e7:d9:df:5a:52:1d:9d:38:bb:eb:0a:c7:0b:12:
47:48:d1:ca:b5:08:1c:67:1b:36:f6:12:9d:a0:4c:b2:aa:3f:
48:a8:9b:55:6a:a4:67:2a:a2:82:4e:74:ce:da:2f:1f:bd:c2:
f0:ac:cf:f8:ae:9f:d0:10:04:b5:08:6a:3a:5d:ab:3d:ba:40:
94:e6:0c:22:ff:c3:0f:b8:a7:a4:a3:20:67:20:22:43:21:98:
4d:b9:13:ce:74:99:2f:9f:5c:75:ea:46:f8:61:e2:8d:98:0f:
72:f3:b0:34:93:b5:70:04:a2:ca:b8:32:23:f2:05:0e:b6:6f:
d5:41:ac:f3:31:c4:ce:2e:d4:1c:bd:f2:02:80:2c:d4:f3:30:
f8:bd:69:6c:90:0e:fc:95:b3:ad:c9:ef:77:97:15:d3:c7:c1:
aa:a9:11:d2:2d:42:10:cf:7b:2e:73:8b:46:35:eb:04:21:7c:
7d:90:c6:eb:4f:7f:d7:5a:3a:8b:6b:3c:79:ae:dd:63:18:0d:
d2:db:02:b8:46:25:81:88:3c:64:ce:fa:49:55:ef:fc:a7:61:
9f:06:e0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:31 2025 by rpki-client on console.sobornost.net