Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138312e302f32342d3234203d3e203438353932.roa
File: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=
Subject key identifier: 4D:36:D8:6B:87:3D:2B:51:BE:E7:76:B4:B0:64:CB:77:95:FA:6C:74
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 0508229927D2CC0A1246F3C46FC20682CD8F2B8D
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138312e302f32342d3234203d3e203438353932.roa
Signing time: Tue 25 Mar 2025 06:20:09 +0000
ROA not before: Tue 25 Mar 2025 06:15:09 +0000
ROA not after: Tue 24 Mar 2026 06:20:09 +0000
asID: 48592
IP address blocks: 185.39.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:08:22:99:27:d2:cc:0a:12:46:f3:c4:6f:c2:06:82:cd:8f:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:15:09 2025 GMT
Not After : Mar 24 06:20:09 2026 GMT
Subject: CN=4D36D86B873D2B51BEE776B4B064CB7795FA6C74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:7a:60:ad:01:72:76:29:a8:52:07:d1:fc:
4e:dd:00:f8:bc:57:9b:a8:f1:1d:3f:07:84:b9:10:
bc:6a:36:7c:f0:60:2b:a9:19:01:b3:8e:b3:db:7c:
db:ee:a8:a6:ec:34:92:40:be:89:71:9d:62:be:f7:
fa:45:53:94:74:dd:49:d4:28:d3:5f:af:75:00:cb:
09:0d:26:0c:2c:5c:0c:36:3c:e4:5c:e7:f2:8b:e3:
b9:2a:68:3d:92:3f:0d:f9:93:ba:12:10:b4:4b:63:
db:3b:08:44:e2:3d:0a:b9:64:5a:b6:01:9a:54:f8:
d8:83:bc:a8:c6:c8:a4:68:0b:1d:9a:8b:e6:4d:5e:
0d:de:ea:10:31:2c:88:49:27:50:58:69:88:d6:6c:
02:a3:c7:ba:dd:c0:9a:ca:60:74:f2:39:e5:77:0b:
ec:2d:d5:4c:7e:2c:9f:af:bb:70:77:8e:15:91:f7:
66:f4:8f:e1:9c:6d:07:01:ba:83:6d:ba:01:f7:00:
db:e6:b3:e7:82:79:26:4c:d0:5b:0c:61:b9:50:9c:
f7:1a:a5:a3:01:d0:e8:2c:31:51:00:fd:86:27:bc:
de:72:2b:b7:30:46:b5:37:cc:fd:3c:ff:a7:44:57:
e6:bb:d8:5d:24:dc:24:4f:a8:24:17:4a:3c:78:65:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:D8:6B:87:3D:2B:51:BE:E7:76:B4:B0:64:CB:77:95:FA:6C:74
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138312e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.181.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3a:e0:19:e3:7a:eb:6d:3b:b2:e5:bc:9d:a1:15:4f:26:88:
d4:91:26:d3:98:d9:ca:61:98:4d:bb:0e:c6:15:68:51:c9:4b:
0e:4d:1d:e1:05:64:d1:23:83:4e:64:c3:48:f7:26:bb:4f:3c:
2a:48:7a:e9:60:63:42:8d:9e:01:67:d2:c6:13:ca:fe:82:16:
4b:eb:88:ff:82:51:a9:be:b9:42:3a:71:1d:fe:9a:5e:24:58:
6f:60:c9:8b:96:0f:04:d5:69:e9:03:90:8d:b9:e8:00:0d:da:
23:9c:db:74:f5:44:57:0a:0f:75:1f:8b:62:f4:d8:3b:73:67:
e9:0d:68:81:d5:22:a1:4b:c0:c7:c7:99:e1:9e:1c:e7:5f:4b:
1e:d4:1d:af:b4:23:13:35:ee:1b:d5:04:43:b8:97:52:83:d5:
d5:b9:82:da:cf:a1:d4:8a:2f:7c:8a:ad:b0:8f:14:f0:07:ca:
9c:1d:c7:f6:81:4a:1d:d6:ad:51:59:87:db:5f:8c:be:eb:a1:
1a:95:68:bb:8c:84:f6:8b:27:af:4a:46:46:45:57:56:8a:a0:
d7:2c:49:b5:aa:14:13:82:bd:be:86:81:75:b5:95:f5:ca:32:
11:07:e8:0f:95:b2:9c:1e:6e:ab:26:c9:cd:44:a6:3f:69:1d:
5a:34:8b:bd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBQgimSfSzAoSRvPEb8IGgs2PK40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNTAzMjUwNjE1MDlaFw0yNjAzMjQwNjIwMDlaMDMxMTAvBgNV
BAMTKDREMzZEODZCODczRDJCNTFCRUU3NzZCNEIwNjRDQjc3OTVGQTZDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmHpgrQFydimoUgfR/E7dAPi8
V5uo8R0/B4S5ELxqNnzwYCupGQGzjrPbfNvuqKbsNJJAvolxnWK+9/pFU5R03UnU
KNNfr3UAywkNJgwsXAw2PORc5/KL47kqaD2SPw35k7oSELRLY9s7CETiPQq5ZFq2
AZpU+NiDvKjGyKRoCx2ai+ZNXg3e6hAxLIhJJ1BYaYjWbAKjx7rdwJrKYHTyOeV3
C+wt1Ux+LJ+vu3B3jhWR92b0j+GcbQcBuoNtugH3ANvms+eCeSZM0FsMYblQnPca
paMB0OgsMVEA/YYnvN5yK7cwRrU3zP08/6dEV+a72F0k3CRPqCQXSjx4ZSv/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTTbYa4c9K1G+53a0sGTLd5X6bHQwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzODM1MmUzMzM5MmUzMTM4
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzUzOTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uSe1MA0GCSqGSIb3DQEBCwUAA4IBAQCZOuAZ43rrbTuy5bydoRVPJojUkSbTmNnK
YZhNuw7GFWhRyUsOTR3hBWTRI4NOZMNI9ya7TzwqSHrpYGNCjZ4BZ9LGE8r+ghZL
64j/glGpvrlCOnEd/ppeJFhvYMmLlg8E1WnpA5CNuegADdojnNt09URXCg91H4ti
9Ng7c2fpDWiB1SKhS8DHx5nhnhznX0se1B2vtCMTNe4b1QRDuJdSg9XVuYLaz6HU
ii98iq2wjxTwB8qcHcf2gUod1q1RWYfbX4y+66EalWi7jIT2iyevSkZGRVdWiqDX
LEm1qhQTgr2+hoF1tZX1yjIRB+gPlbKcHm6rJsnNRKY/aR1aNIu9
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:56 2025 by rpki-client