Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130382e302f32342d3234203d3e203133333335.roa
File: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=
Subject key identifier: 86:86:3C:8C:A0:E8:43:46:E3:E2:5B:47:84:C8:A9:C0:C8:F9:23:8E
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 643A187B11A3B4DEFD699A6CF72207D81079F303
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130382e302f32342d3234203d3e203133333335.roa
Signing time: Wed 05 Mar 2025 11:40:56 +0000
ROA not before: Wed 05 Mar 2025 11:35:56 +0000
ROA not after: Wed 04 Mar 2026 11:40:56 +0000
asID: 13335
IP address blocks: 31.185.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3a:18:7b:11:a3:b4:de:fd:69:9a:6c:f7:22:07:d8:10:79:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 5 11:35:56 2025 GMT
Not After : Mar 4 11:40:56 2026 GMT
Subject: CN=86863C8CA0E84346E3E25B4784C8A9C0C8F9238E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:e1:56:3b:87:c6:a0:81:02:e2:c4:a6:91:
4e:37:75:bb:af:eb:d5:5e:df:cb:e3:b9:3f:e9:fb:
95:58:fe:e2:9d:7c:00:4e:dc:ef:cc:5e:1d:61:25:
08:bb:b6:c1:fb:c5:99:a1:db:e1:6c:2b:03:8e:8c:
bb:08:47:55:6d:0c:1b:46:a2:73:1e:73:1e:95:42:
78:bc:0e:97:94:d9:d5:8b:b7:a0:95:99:21:38:f8:
1e:ef:2f:e0:60:0e:16:67:51:3a:6a:46:a7:26:70:
cd:41:ed:32:c9:35:c6:fd:11:e4:ca:55:dd:46:2a:
cc:96:34:84:48:7a:ae:a0:06:59:39:a5:12:a7:6a:
eb:98:6c:cc:c9:30:1c:81:eb:e7:4c:a4:2f:d7:57:
1e:36:e1:12:a1:52:4c:82:0e:8e:ed:38:e0:79:78:
59:e8:f7:93:31:c8:f2:2f:4f:97:f4:b9:2b:ad:06:
40:ad:df:18:a6:e7:4a:f8:72:ae:ec:b2:0e:48:fa:
d1:94:49:1f:25:f0:4e:59:4a:33:23:34:2c:23:dd:
06:47:00:f8:c0:07:8c:b2:1d:44:ae:f1:98:ae:73:
b6:e1:9c:e6:7e:f3:7e:ee:d6:bd:f5:57:ef:d7:d9:
f6:a0:a3:b7:65:79:e0:1e:b3:b9:67:a4:30:cb:1c:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:3C:8C:A0:E8:43:46:E3:E2:5B:47:84:C8:A9:C0:C8:F9:23:8E
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130382e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.108.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4f:66:ac:e0:18:ab:52:e0:09:5e:ea:78:e9:2f:c9:6b:c4:
1e:75:d8:9e:bf:6b:8f:eb:0f:f2:f8:2c:45:d4:67:6b:06:78:
46:50:b1:5e:79:d6:2d:eb:64:66:63:5f:d3:6f:12:f4:5a:b2:
f3:45:d2:4c:e1:c3:a6:14:5a:c4:d2:09:56:00:cb:28:be:9e:
49:b4:58:06:8a:4f:12:9c:b0:af:4e:d0:23:d2:64:4f:a5:83:
b4:78:22:23:e1:ea:e1:86:20:f7:3b:37:2e:28:dc:4e:ca:a1:
1d:99:9d:a2:0d:9a:2b:87:92:61:ce:10:f2:7f:2c:ad:57:c9:
33:07:a9:56:9e:2f:3a:51:e9:85:0b:44:8a:96:05:9c:19:8f:
e9:80:52:ae:5a:40:fa:2f:0e:69:89:47:7e:c6:01:8a:a1:57:
3c:7e:dc:c8:f4:65:8c:64:69:44:15:d0:0e:8c:c1:cb:f7:e3:
5a:7c:13:23:f5:eb:59:f0:09:13:8b:ad:1b:b0:da:79:b3:fd:
20:ae:8a:4b:ba:dd:48:39:d6:de:22:a8:87:ef:1d:23:db:77:
ee:d3:fe:d3:b2:d0:8f:13:0a:81:40:37:42:f7:c5:bb:0f:a9:
5f:25:f7:36:ab:e3:c1:ee:67:4c:0a:3a:a5:f8:3b:68:0b:eb:
af:1a:eb:ab
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZDoYexGjtN79aZps9yIH2BB58wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNTAzMDUxMTM1NTZaFw0yNjAzMDQxMTQwNTZaMDMxMTAvBgNV
BAMTKDg2ODYzQzhDQTBFODQzNDZFM0UyNUI0Nzg0QzhBOUMwQzhGOTIzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K+FWO4fGoIEC4sSmkU43dbuv
69Ve38vjuT/p+5VY/uKdfABO3O/MXh1hJQi7tsH7xZmh2+FsKwOOjLsIR1VtDBtG
onMecx6VQni8DpeU2dWLt6CVmSE4+B7vL+BgDhZnUTpqRqcmcM1B7TLJNcb9EeTK
Vd1GKsyWNIRIeq6gBlk5pRKnauuYbMzJMByB6+dMpC/XVx424RKhUkyCDo7tOOB5
eFno95MxyPIvT5f0uSutBkCt3xim50r4cq7ssg5I+tGUSR8l8E5ZSjMjNCwj3QZH
APjAB4yyHUSu8Ziuc7bhnOZ+837u1r31V+/X2fago7dleeAes7lnpDDLHHoBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhoY8jKDoQ0bj4ltHhMipwMj5I44wHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt
NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzMzMTJlMzEzODM1MmUzMTMw
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
H7lsMA0GCSqGSIb3DQEBCwUAA4IBAQCTT2as4BirUuAJXup46S/Ja8Qeddiev2uP
6w/y+CxF1GdrBnhGULFeedYt62RmY1/TbxL0WrLzRdJM4cOmFFrE0glWAMsovp5J
tFgGik8SnLCvTtAj0mRPpYO0eCIj4erhhiD3OzcuKNxOyqEdmZ2iDZorh5JhzhDy
fyytV8kzB6lWni86UemFC0SKlgWcGY/pgFKuWkD6Lw5piUd+xgGKoVc8ftzI9GWM
ZGlEFdAOjMHL9+NafBMj9etZ8AkTi60bsNp5s/0gropLut1IOdbeIqiH7x0j23fu
0/7TstCPEwqBQDdC98W7D6lfJfc2q+PB7mdMCjql+DtoC+uvGuur
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:15 2025 by rpki-client