Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20383334.roa
File: 3138352e35382e3135362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jqP6VhXY3g0EjUwKg6i4I/5552Xz7pNsX/dhe8uGvq8=
Subject key identifier: 45:91:C4:BC:B5:85:CC:E7:D6:B8:1B:FA:08:59:AF:6E:57:29:20:91
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 783B30685487E621987FEC4F40A29F82E81D4977
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Jan 2025 13:36:54 +0000
ROA not before: Wed 29 Jan 2025 13:31:54 +0000
ROA not after: Wed 28 Jan 2026 13:36:54 +0000
asID: 834
IP address blocks: 185.58.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3b:30:68:54:87:e6:21:98:7f:ec:4f:40:a2:9f:82:e8:1d:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jan 29 13:31:54 2025 GMT
Not After : Jan 28 13:36:54 2026 GMT
Subject: CN=4591C4BCB585CCE7D6B81BFA0859AF6E57292091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:cf:31:f4:f1:2b:af:e0:19:85:b4:f9:51:
8e:e8:55:ba:74:fa:cb:8c:e3:1c:6b:c0:36:04:fe:
86:84:cf:47:3a:0b:6a:d7:2f:76:91:9c:41:94:fb:
b6:60:d7:1f:61:f8:96:59:7e:fb:e5:ed:f0:35:cf:
a6:0c:60:ed:c5:65:53:18:61:8e:74:52:bf:22:55:
2b:6f:19:af:22:d4:14:e2:7c:d7:68:49:f4:64:04:
e3:56:ea:be:d6:a3:dc:3a:28:48:25:32:50:a3:ac:
5d:9e:6f:ac:1e:80:41:71:7b:55:eb:bf:22:3a:1e:
33:e6:92:08:f2:ac:56:c5:48:a2:39:75:86:8a:5d:
c3:d1:51:9e:dc:38:28:fc:15:ea:6d:23:f2:8d:2e:
00:6e:1b:59:36:61:16:db:e4:3f:9a:fa:0c:bd:02:
7e:6c:25:b8:79:8d:fe:51:e7:8d:cc:9b:df:ef:b9:
30:bc:09:22:6d:5e:17:83:b1:b2:f9:e6:d4:12:ce:
51:59:22:83:f9:3f:13:ca:8b:b3:f0:c3:3c:7d:38:
bd:fe:8d:43:51:29:b2:a2:0c:a7:c1:4f:6e:e0:b4:
0c:33:96:6b:2e:2f:48:4a:82:0d:32:27:9f:85:6d:
86:18:9c:fa:aa:9e:0c:fb:93:ed:79:e2:e7:12:fd:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:91:C4:BC:B5:85:CC:E7:D6:B8:1B:FA:08:59:AF:6E:57:29:20:91
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:b0:19:54:fe:52:04:06:dd:16:f4:a6:b0:21:e9:4d:2f:
b2:d0:92:5e:f6:a6:23:aa:eb:ed:39:44:29:df:67:72:0f:06:
77:78:aa:6d:2d:3b:0d:8f:33:be:68:1e:09:6f:79:cf:33:03:
47:ce:ac:85:25:67:25:10:cd:c5:20:16:66:79:f6:9b:10:35:
b3:c7:bd:b1:bc:12:56:f3:80:c4:07:8b:8b:5a:10:85:53:e2:
7a:ce:0e:4d:93:96:82:b1:9d:d5:cd:a0:3b:b0:b0:4a:19:b9:
3f:3b:5c:32:56:06:d0:53:26:68:5b:f2:c7:f0:9f:bf:48:b5:
9a:95:bc:5d:0c:1e:c7:70:04:8d:98:7f:65:9f:a3:ea:a9:0b:
32:6c:3d:db:68:30:38:9f:cf:5e:f7:23:13:88:08:22:27:c7:
b3:63:a6:dd:bc:0b:1e:de:db:a1:26:86:08:85:1f:b8:05:f1:
5a:41:03:54:6d:47:52:10:0a:bb:77:62:cd:92:2c:53:6c:f6:
07:51:3a:48:35:1b:15:9f:e5:4f:3a:65:56:18:f9:06:23:40:
a4:4b:86:a7:6f:6c:51:82:7f:0e:f5:df:21:b2:f7:c3:7f:38:
07:7c:d4:f8:89:4b:c7:70:ee:f5:26:14:d4:9e:7d:c9:13:f2:
ab:96:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:36 2025 by rpki-client