Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138322e302f32342d3234203d3e203438353932.roa
File: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=
Subject key identifier: 08:2F:29:F5:76:9B:D6:9C:25:CB:2B:23:B5:B7:9C:BF:38:28:71:4F
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 3FFEF65DE8222E183C446D4C8A5B4EFCBAA9CEF9
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138322e302f32342d3234203d3e203438353932.roa
Signing time: Tue 25 Mar 2025 06:20:11 +0000
ROA not before: Tue 25 Mar 2025 06:15:11 +0000
ROA not after: Tue 24 Mar 2026 06:20:11 +0000
asID: 48592
IP address blocks: 185.39.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fe:f6:5d:e8:22:2e:18:3c:44:6d:4c:8a:5b:4e:fc:ba:a9:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:15:11 2025 GMT
Not After : Mar 24 06:20:11 2026 GMT
Subject: CN=082F29F5769BD69C25CB2B23B5B79CBF3828714F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:08:d7:35:8e:db:cb:45:8d:ff:5f:1d:7c:
e1:ec:db:e4:cc:7b:05:9b:c3:26:a5:12:12:c3:b8:
60:b1:79:b6:29:ea:58:03:d2:60:b7:79:e9:46:58:
46:e3:8e:ff:3a:98:0e:74:c7:2f:76:36:b3:e5:70:
33:50:69:00:f5:87:39:47:da:a6:c4:22:6c:f5:3f:
d9:60:c3:4a:e7:c7:37:8d:14:d7:e0:47:8a:a6:58:
5f:71:25:38:08:42:5d:22:ca:99:11:75:24:04:78:
de:af:75:1f:59:4a:87:80:70:fe:e8:ee:60:4b:24:
39:69:24:5a:07:76:12:8a:ef:2f:65:db:48:0d:7b:
66:93:2a:71:87:c7:0f:df:4c:36:53:dd:3a:88:a3:
d8:37:b2:81:eb:28:5f:e7:91:a0:0b:2b:14:57:6f:
ff:dc:6c:a8:d4:69:7f:4a:9c:1c:0b:aa:c4:6a:fc:
8b:a4:d1:d6:9b:f1:ff:26:04:d4:82:35:2e:5a:65:
0f:6d:e0:0a:9d:73:c5:ea:1b:1b:17:60:f9:83:df:
a6:f5:3f:fe:2d:2b:a5:f9:d3:70:f4:cb:0b:b5:75:
37:3e:67:72:4c:1b:06:4e:ba:16:2c:ba:f5:9d:47:
40:e7:c3:ea:3e:53:a9:ec:dd:4c:65:24:1f:02:21:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:29:F5:76:9B:D6:9C:25:CB:2B:23:B5:B7:9C:BF:38:28:71:4F
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138322e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.182.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7c:fb:59:b6:4d:f1:1a:8c:38:15:8b:f3:8b:87:ee:70:e8:
69:7d:bd:6c:ed:c8:e2:40:3a:e7:51:5f:7b:5d:fc:1e:c5:9b:
bc:54:f3:ed:3e:38:c2:1a:ec:73:73:e7:74:38:09:ba:63:d2:
a7:6f:0f:57:5c:eb:70:9e:5b:30:28:4a:b5:f4:3c:a3:df:f4:
32:28:3c:84:42:3e:e7:47:5b:c3:bf:f6:76:e0:c1:59:4c:51:
7a:17:b9:d3:0a:34:5f:fb:a3:39:6e:4f:11:49:97:6c:93:fb:
f7:2e:59:b0:18:ef:1d:42:06:80:2a:83:e9:2e:36:19:88:2b:
98:31:40:0e:ac:db:af:45:36:a1:2a:55:ea:07:cd:66:5f:4c:
08:6c:d7:1d:d5:d2:a1:9d:6c:9f:48:4c:ab:1a:4c:33:86:b1:
8e:e3:42:30:db:48:2e:be:6d:d4:77:52:35:d6:21:80:02:30:
95:4c:f3:aa:64:c3:21:c4:40:13:8b:15:00:80:00:e6:47:a9:
e2:51:26:7f:40:47:64:e4:cb:b1:e5:b7:07:63:79:29:10:57:
e8:a3:13:c2:c3:a1:ab:73:47:a4:1f:bf:60:c8:da:c9:2f:ee:
6d:fe:e9:14:1f:e1:53:23:99:76:73:84:b4:ef:f4:ab:3b:b9:
17:88:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:24 2025 by rpki-client