Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa
File: 39312e3232382e3136382e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: 4QnZTlYnxqgKa2BqIleIzzsBP14fEStkeYRM4bUD280=
Subject key identifier: 9E:DE:8C:1B:3B:4B:04:3C:0C:02:AB:26:E6:C4:83:2C:D9:CB:5E:E1
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 5ED1E981F830ED8805E401FA4836EECA2BAD5BDF
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa
Signing time: Mon 06 Mar 2023 06:52:26 +0000
ROA not before: Mon 06 Mar 2023 06:47:26 +0000
ROA not after: Mon 04 Mar 2024 06:52:26 +0000
asID: 984
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d1:e9:81:f8:30:ed:88:05:e4:01:fa:48:36:ee:ca:2b:ad:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Mar 6 06:47:26 2023 GMT
Not After : Mar 4 06:52:26 2024 GMT
Subject: CN=9EDE8C1B3B4B043C0C02AB26E6C4832CD9CB5EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:0a:02:a0:37:1d:fb:f0:dd:32:58:0e:bc:
78:37:48:cd:d5:00:76:a9:30:4f:51:e3:2f:ae:4a:
49:71:81:76:28:25:7f:10:79:5e:45:59:84:55:67:
47:40:94:a9:5c:71:f0:3b:c1:d5:59:40:08:ef:ca:
18:e8:e9:67:73:c1:6b:78:1d:15:44:5f:10:62:68:
c3:fc:86:46:75:ec:7b:1d:ce:cb:40:37:4a:40:e0:
c1:dd:19:6f:32:84:3f:63:27:c3:73:3e:01:dc:82:
c8:83:b9:83:88:ca:ef:bd:22:fb:6b:04:18:98:a9:
58:77:75:9c:d0:d0:72:f9:ee:33:e3:d1:f6:c0:cb:
15:3f:ad:8d:53:e6:44:0b:13:a5:b5:b7:c5:44:f3:
02:4f:0c:05:fe:4e:62:ff:72:9a:89:f8:80:b7:55:
e6:be:b4:1b:85:41:1f:f5:d2:1e:40:49:12:aa:95:
05:7e:02:ee:ad:ec:61:92:e6:a6:78:9d:90:25:9a:
8e:34:f9:08:48:85:c0:e3:03:ce:d0:eb:8d:05:ff:
d2:55:3e:7d:ac:c7:a5:7c:36:61:d1:8d:c6:7c:d9:
0b:3f:16:be:a5:eb:9d:4a:07:f0:c4:20:03:f0:8f:
48:1b:20:ef:03:7b:fb:ba:ee:29:d4:c7:e9:48:7d:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:8C:1B:3B:4B:04:3C:0C:02:AB:26:E6:C4:83:2C:D9:CB:5E:E1
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3c:c5:47:49:43:c1:47:d7:c1:fd:90:3a:9a:19:4f:93:04:
e5:1d:25:11:1f:d9:ea:19:27:d1:b6:1c:5d:3c:6a:be:48:10:
52:74:85:ae:11:9e:26:1f:c4:e8:3f:6b:3c:16:92:3c:48:ef:
2e:65:5c:91:6c:55:ca:ca:c2:c3:38:9a:34:bd:7d:58:66:5c:
65:3a:23:e9:b5:ff:cb:e9:fa:d9:5f:d9:bf:39:22:fb:6a:82:
4d:9e:94:11:75:b8:56:49:5d:67:ed:6e:12:70:a0:4a:6b:13:
1c:92:c6:d1:60:a5:31:de:e3:81:3a:33:4c:95:71:da:fc:a5:
e7:cf:29:55:d6:94:6e:30:e1:f3:fa:88:d6:43:a7:aa:4a:29:
08:ee:4f:1b:db:e1:87:16:1c:d0:82:ed:c9:a8:10:c2:d8:43:
d4:eb:33:d4:f1:0c:bb:c1:1a:84:87:6c:b5:4d:a7:ce:1e:d4:
e4:f6:5e:9b:94:45:f1:d7:0d:5a:9f:ac:ae:89:e2:49:5d:fc:
6f:67:61:5b:89:3c:f0:64:4d:60:96:f1:9c:36:03:a4:88:6b:
90:44:db:bb:4c:b0:5c:15:99:9b:68:b6:84:cb:9f:23:c1:1a:
c7:64:18:ed:97:94:d3:38:a1:e3:c9:81:09:6a:5f:44:75:93:
60:8d:f5:77
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXtHpgfgw7YgF5AH6SDbuyiutW98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZkYTE5ZjQyODVlYjA0ZDAzMTA3MzNmNGFjMDAxMDdi
NzMzMzdhZDAeFw0yMzAzMDYwNjQ3MjZaFw0yNDAzMDQwNjUyMjZaMDMxMTAvBgNV
BAMTKDlFREU4QzFCM0I0QjA0M0MwQzAyQUIyNkU2QzQ4MzJDRDlDQjVFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+AoCoDcd+/DdMlgOvHg3SM3V
AHapME9R4y+uSklxgXYoJX8QeV5FWYRVZ0dAlKlccfA7wdVZQAjvyhjo6WdzwWt4
HRVEXxBiaMP8hkZ17HsdzstAN0pA4MHdGW8yhD9jJ8NzPgHcgsiDuYOIyu+9Ivtr
BBiYqVh3dZzQ0HL57jPj0fbAyxU/rY1T5kQLE6W1t8VE8wJPDAX+TmL/cpqJ+IC3
Vea+tBuFQR/10h5ASRKqlQV+Au6t7GGS5qZ4nZAlmo40+QhIhcDjA87Q640F/9JV
Pn2sx6V8NmHRjcZ82Qs/Fr6l651KB/DEIAPwj0gbIO8De/u67inUx+lIfY2xAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUnt6MGztLBDwMAqsm5sSDLNnLXuEwHwYDVR0j
BBgwFoAUBtoZ9ChesE0DEHM/SsABB7czN60wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzcwYmU2Y2QtMjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0
NjJkLzEvMDZEQTE5RjQyODVFQjA0RDAzMTA3MzNGNEFDMDAxMDdCNzMzMzdBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0J0b1o5Q2hlc0UwREVITV9Tc0FCQjdj
ek42MC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzcwYmU2Y2Qt
MjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0NjJkLzEvMzkzMTJlMzIzMjM4MmUzMTM2
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb5Kgw
DQYJKoZIhvcNAQELBQADggEBACg8xUdJQ8FH18H9kDqaGU+TBOUdJREf2eoZJ9G2
HF08ar5IEFJ0ha4RniYfxOg/azwWkjxI7y5lXJFsVcrKwsM4mjS9fVhmXGU6I+m1
/8vp+tlf2b85Ivtqgk2elBF1uFZJXWftbhJwoEprExySxtFgpTHe44E6M0yVcdr8
pefPKVXWlG4w4fP6iNZDp6pKKQjuTxvb4YcWHNCC7cmoEMLYQ9TrM9TxDLvBGoSH
bLVNp84e1OT2XpuURfHXDVqfrK6J4kld/G9nYVuJPPBkTWCW8Zw2A6SIa5BE27tM
sFwVmZtotoTLnyPBGsdkGO2XlNM4oePJgQlqX0R1k2CN9Xc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:20 2025 by rpki-client