Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3138372e38352e33322e302f32302d3234203d3e203236353631.roa
File: 3138372e38352e33322e302f32302d3234203d3e203236353631.roa (raw, json)
Hash identifier: CuZEltRNxSPDRR4955+ISTqRZF7KGPnfuTS40aV3XmA=
Subject key identifier: 1E:7B:8F:5D:7B:B6:14:3F:2E:1F:C1:8A:43:AC:46:AF:AB:DA:C2:21
Certificate issuer: /CN=9687E9759E87C680DEC08116FB6F44EC73175390
Certificate serial: 23DCFBE02184B2BEE347997836ED6399A05E5723
Authority key identifier: 96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3138372e38352e33322e302f32302d3234203d3e203236353631.roa
Signing time: Mon 28 Apr 2025 15:15:23 +0000
ROA not before: Mon 28 Apr 2025 15:10:23 +0000
ROA not after: Mon 27 Apr 2026 15:15:23 +0000
asID: 26561
IP address blocks: 187.85.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:dc:fb:e0:21:84:b2:be:e3:47:99:78:36:ed:63:99:a0:5e:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9687E9759E87C680DEC08116FB6F44EC73175390
Validity
Not Before: Apr 28 15:10:23 2025 GMT
Not After : Apr 27 15:15:23 2026 GMT
Subject: CN=1E7B8F5D7BB6143F2E1FC18A43AC46AFABDAC221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:92:b9:d4:72:24:45:94:11:1b:78:7f:6e:
8c:05:f3:3b:be:c7:5e:80:b8:c3:88:bd:b8:ea:87:
3d:71:32:a0:3d:92:02:88:71:99:67:0b:2d:52:09:
eb:83:82:bf:74:da:dd:2a:85:80:4b:aa:89:dd:c0:
ec:98:dc:1c:46:2f:77:94:61:4e:e8:43:25:f0:ef:
0f:f8:49:ad:70:37:5d:9f:be:a4:8e:54:a5:66:49:
2a:6e:ef:8e:66:32:ba:a8:da:c8:e3:87:d7:41:d7:
04:09:a8:d8:f2:3b:40:92:3b:3c:68:84:ca:b9:7a:
2a:6c:02:4e:27:73:07:f1:c3:06:d7:3f:a9:4f:11:
59:83:bd:3b:4f:0c:12:2b:42:6b:d9:2d:ce:6d:37:
1d:7a:66:22:54:9a:3c:26:31:8c:76:60:90:ae:c9:
7c:b7:c8:fa:e2:8c:68:d4:e8:b0:4a:45:d8:5b:af:
19:42:b7:2a:02:1d:4f:d3:b6:31:59:50:09:1b:e8:
4b:fd:a6:11:42:cf:62:1a:89:2e:d4:85:1c:ce:ec:
b9:ee:ac:90:ec:15:ca:50:33:b8:d5:87:fb:be:2f:
ae:e5:f9:23:7e:52:9b:57:ec:00:61:87:2b:c4:56:
70:33:bc:f5:52:cf:e2:0b:7f:a8:d3:d8:2d:7f:95:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:8F:5D:7B:B6:14:3F:2E:1F:C1:8A:43:AC:46:AF:AB:DA:C2:21
X509v3 Authority Key Identifier:
keyid:96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/9687E9759E87C680DEC08116FB6F44EC73175390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3138372e38352e33322e302f32302d3234203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.32.0/20
Signature Algorithm: sha256WithRSAEncryption
57:c3:57:7d:bf:9a:38:9f:8a:e5:3a:33:bf:82:5c:13:6c:18:
2a:d4:7f:ef:05:c3:68:39:1f:4f:40:76:45:f2:65:b1:44:63:
19:32:30:a3:be:cf:ec:bd:13:66:2c:53:f5:9f:58:bb:82:66:
a4:a7:cb:a0:8f:2a:5e:4e:f8:df:5e:07:6f:1e:6f:a7:21:2f:
f0:bf:54:0c:01:40:2b:8b:b5:a4:57:e9:e5:13:3d:6b:52:a4:
56:dc:40:25:eb:25:93:63:a4:51:6f:94:89:58:8e:9c:24:03:
5f:95:7a:93:0b:93:d2:b4:04:3d:fd:57:77:fa:2c:8f:68:93:
6c:ed:51:35:75:9b:36:c9:9c:0a:15:65:d3:84:fc:dd:cf:d4:
d8:55:55:48:08:28:68:0a:c6:5f:35:06:5b:ec:51:64:b4:f6:
39:8d:35:9c:dd:aa:1b:68:3d:de:27:35:28:3f:26:30:98:f8:
f4:2f:c5:85:ee:fb:5d:cb:78:66:d4:e7:2f:7e:a4:e9:04:51:
fb:76:fc:a7:7f:5c:97:9f:20:cd:a0:20:58:6b:d5:83:11:56:
56:4c:12:0d:50:d3:51:a6:8f:68:bb:d0:e6:58:0d:69:9d:2b:
90:6d:e0:81:3d:80:84:9e:c0:80:27:59:c0:8e:66:63:e9:8d:
a0:55:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:24 2025 by rpki-client