Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20323136313832.roa
File: 39322e3131342e342e302f32342d3234203d3e20323136313832.roa (raw, json)
Hash identifier: ZVbO/lwzg9cSMLR25eMggHkY5uRD+typfYUl8D8mbZY=
Subject key identifier: 31:CF:12:FA:A8:C1:AC:04:B8:F0:EB:4C:75:BD:EC:23:6C:E9:4D:F0
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7A26531E583B99F5A5B7C437864F1E8B5CCACC38
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20323136313832.roa
Signing time: Tue 04 Mar 2025 02:09:00 +0000
ROA not before: Tue 04 Mar 2025 02:04:00 +0000
ROA not after: Tue 03 Mar 2026 02:09:00 +0000
asID: 216182
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:26:53:1e:58:3b:99:f5:a5:b7:c4:37:86:4f:1e:8b:5c:ca:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 4 02:04:00 2025 GMT
Not After : Mar 3 02:09:00 2026 GMT
Subject: CN=31CF12FAA8C1AC04B8F0EB4C75BDEC236CE94DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:bf:cf:21:7c:88:84:98:66:d0:cb:f5:70:
98:a5:c9:5e:74:36:00:7c:ce:54:66:ae:e1:83:7f:
61:47:48:5a:29:2e:39:18:5d:25:cf:d8:ed:5d:31:
6f:10:52:8d:b7:a1:e5:59:b0:28:06:5d:f9:dc:0f:
11:c1:48:c2:07:1f:bb:54:94:a9:0e:01:70:44:84:
1c:99:10:76:09:7f:bb:13:f5:c9:7f:e0:ac:58:89:
ea:9d:7c:68:7b:e2:2f:30:6d:db:3d:29:cf:38:47:
76:df:ae:9e:fd:0c:1e:4e:6c:58:21:09:32:aa:e9:
50:79:23:62:2d:c0:dd:f9:73:e1:20:61:61:4f:aa:
ec:85:df:c3:84:45:d9:d6:1c:09:49:1f:81:e0:7f:
26:26:27:c5:6f:b0:02:ee:5f:5b:66:92:ff:2e:52:
08:0c:71:3c:44:5b:f6:0c:72:58:68:79:ee:b5:e3:
43:1f:35:25:ae:98:37:53:08:84:3a:80:60:93:c1:
c7:d9:e2:a6:60:6c:b6:1c:07:e4:1b:00:9e:8b:c3:
f5:44:c1:62:aa:66:da:a0:68:29:63:b1:b6:0f:58:
80:83:d7:f1:83:ee:9b:f7:00:a9:f4:63:d6:1d:0a:
3e:c4:f5:54:2a:d9:27:df:7a:df:ae:53:a8:c0:ba:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:12:FA:A8:C1:AC:04:B8:F0:EB:4C:75:BD:EC:23:6C:E9:4D:F0
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20323136313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:74:ae:a7:0d:d3:e5:e7:a9:b4:f8:e0:bc:08:98:b7:e9:82:
37:3c:2f:a8:b3:43:f8:74:8a:83:56:9d:35:d2:c3:2a:66:d2:
56:6f:30:de:ff:3b:b1:61:f7:fc:af:45:f7:6e:de:bf:c6:0c:
45:e9:b5:f1:d3:2a:ec:79:05:95:c0:74:5f:47:81:75:c9:44:
95:35:c7:f3:a2:3b:ee:30:99:6d:ec:36:f7:2c:28:12:e7:c4:
7f:26:6c:68:bf:40:39:e0:10:15:d2:72:db:e1:41:00:94:45:
1a:bb:2f:9e:51:93:3a:cf:f6:65:c8:73:94:7d:54:9e:2b:24:
9a:6d:a6:f2:b2:80:72:db:e0:30:5d:44:a2:7d:c5:fe:5a:7a:
37:13:af:42:55:df:fb:8a:2d:45:ed:83:96:3e:63:34:95:a5:
fe:9a:9d:40:64:2d:f3:48:75:8c:c4:ff:88:70:8f:22:7d:29:
ba:32:1d:6b:2b:6e:30:d9:d6:95:9c:80:5a:7d:79:69:83:7c:
4c:4f:54:15:07:a9:a4:db:30:f4:7d:2e:d0:0a:38:b8:c7:78:
86:ee:be:e3:bf:43:de:c3:06:53:48:ae:bc:30:bb:86:ea:b3:
e8:d6:f7:c5:f6:d0:86:db:04:ec:75:55:ab:d0:c3:09:ca:87:
e0:40:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:05 2025 by rpki-client