Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e203230343733.roa
File: 39312e3231372e3231392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: gMov7KMaz2hcLgMijx6DnACH0vJay3R/SZ0HKKkYbOo=
Subject key identifier: 78:8F:BB:90:D2:71:68:9C:3E:98:8C:88:9E:5F:84:E3:60:6D:D3:1C
Certificate issuer: /CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Certificate serial: 6FDF014D1AA62077C256BF25036F8EDCBCBD0D14
Authority key identifier: 40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e203230343733.roa
Signing time: Tue 26 Mar 2024 18:58:29 +0000
ROA not before: Tue 26 Mar 2024 18:53:29 +0000
ROA not after: Tue 25 Mar 2025 18:58:29 +0000
asID: 20473
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:df:01:4d:1a:a6:20:77:c2:56:bf:25:03:6f:8e:dc:bc:bd:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Validity
Not Before: Mar 26 18:53:29 2024 GMT
Not After : Mar 25 18:58:29 2025 GMT
Subject: CN=788FBB90D271689C3E988C889E5F84E3606DD31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:86:87:11:da:a0:a8:21:d8:2d:5b:be:25:
02:9b:03:de:f3:81:aa:e8:11:60:e5:3d:8c:12:35:
bf:8d:f1:e4:74:ed:f4:5d:42:eb:2a:8e:b8:d7:d6:
98:2b:3e:22:36:a5:37:58:de:02:6c:d7:21:32:10:
64:73:e8:3c:54:fb:52:ad:ec:76:f5:d9:eb:dc:c3:
1b:ae:a0:fd:8d:87:59:f6:d8:34:d6:dd:b2:10:0a:
8d:18:d2:d5:99:76:24:2f:d3:81:a6:f2:26:ae:57:
63:20:92:f6:3b:2d:04:4b:3f:3b:46:72:47:39:7c:
38:87:cb:49:e8:4b:0b:00:ac:50:17:f3:05:af:ed:
57:8c:c7:f3:94:b8:86:79:70:dc:35:4c:6e:29:c8:
b7:f8:6e:a7:f3:96:16:a9:51:1a:40:a1:74:d0:ce:
f4:14:6d:86:33:ee:ff:0f:01:9e:74:c8:83:4e:9b:
d9:00:f2:48:03:6b:11:bd:78:01:2c:82:02:05:69:
68:d7:62:e4:21:21:5d:e5:e8:56:23:4e:59:2d:6a:
d4:49:c4:9e:25:2e:e7:4c:13:46:a5:fd:ef:6d:c6:
7c:44:d3:bb:fa:98:97:e8:e1:72:ba:90:d5:ba:32:
ea:17:6e:0b:87:8f:52:9d:f1:f3:0a:24:e2:52:80:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:BB:90:D2:71:68:9C:3E:98:8C:88:9E:5F:84:E3:60:6D:D3:1C
X509v3 Authority Key Identifier:
keyid:40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
29:93:5f:a3:d4:7e:3f:26:dd:71:fc:38:89:88:b0:74:2f:54:
f2:46:16:1b:53:9b:81:5f:5b:e8:c5:25:35:df:62:46:ca:30:
95:73:d9:14:d6:06:f8:14:ff:9e:fa:1d:28:e7:a0:1d:23:88:
85:33:25:ec:09:ce:18:1f:68:16:a6:06:e4:cb:1e:72:9a:aa:
76:2c:a8:62:06:97:31:4f:08:75:ef:ef:61:4e:34:3d:4f:9e:
72:bf:9f:fe:82:d4:ca:29:ea:e6:fa:5f:bc:69:e5:61:b5:1c:
93:c8:5f:6e:a1:1e:71:48:b8:b5:f0:fa:7f:25:f1:a6:6d:06:
65:05:76:85:c5:ab:97:27:8f:50:bb:29:10:6a:fb:3f:1e:4f:
2a:0c:6b:bd:17:bb:7b:16:51:3c:78:9f:b8:20:1b:cc:5b:3a:
e2:55:92:3e:74:61:ac:69:56:20:7e:f6:25:d7:3d:02:0f:1c:
3d:0b:62:85:37:87:c1:e8:7b:f3:a3:7f:16:20:84:75:43:3f:
85:d3:90:62:7d:09:fe:4a:66:03:94:4d:5e:f0:95:60:af:fa:
84:d8:31:34:fd:e5:15:c8:02:0b:0a:e3:cb:d9:6e:fb:85:96:
2f:9e:af:e0:fd:2b:9a:34:97:3e:8d:e8:e2:67:88:7e:82:c4:
30:94:f9:15
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb98BTRqmIHfCVr8lA2+O3Ly9DRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA1NWQxMzNlNmM0ZTM0MmExZTI4ZTVmNmM0N2NhNDlh
ZWJkMzVmMTAeFw0yNDAzMjYxODUzMjlaFw0yNTAzMjUxODU4MjlaMDMxMTAvBgNV
BAMTKDc4OEZCQjkwRDI3MTY4OUMzRTk4OEM4ODlFNUY4NEUzNjA2REQzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10YaHEdqgqCHYLVu+JQKbA97z
garoEWDlPYwSNb+N8eR07fRdQusqjrjX1pgrPiI2pTdY3gJs1yEyEGRz6DxU+1Kt
7Hb12evcwxuuoP2Nh1n22DTW3bIQCo0Y0tWZdiQv04Gm8iauV2MgkvY7LQRLPztG
ckc5fDiHy0noSwsArFAX8wWv7VeMx/OUuIZ5cNw1TG4pyLf4bqfzlhapURpAoXTQ
zvQUbYYz7v8PAZ50yINOm9kA8kgDaxG9eAEsggIFaWjXYuQhIV3l6FYjTlktatRJ
xJ4lLudME0al/e9txnxE07v6mJfo4XK6kNW6MuoXbguHj1Kd8fMKJOJSgK/fAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeI+7kNJxaJw+mIyInl+E42Bt0xwwHwYDVR0j
BBgwFoAUQFXRM+bE40Kh4o5fbEfKSa69NfEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWJhNTNjMzgtNmU2Yy00OGQwLTlmMjktNTQyOGE0ZjM3
NDRhLzAvNDA1NUQxMzNFNkM0RTM0MkExRTI4RTVGNkM0N0NBNDlBRUJEMzVGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FGWFJNLWJFNDBLaDRvNWZiRWZLU2E2
OU5mRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNWJhNTNjMzgt
NmU2Yy00OGQwLTlmMjktNTQyOGE0ZjM3NDRhLzAvMzkzMTJlMzIzMTM3MmUzMjMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W9nbMA0GCSqGSIb3DQEBCwUAA4IBAQApk1+j1H4/Jt1x/DiJiLB0L1TyRhYbU5uB
X1voxSU132JGyjCVc9kU1gb4FP+e+h0o56AdI4iFMyXsCc4YH2gWpgbkyx5ymqp2
LKhiBpcxTwh17+9hTjQ9T55yv5/+gtTKKerm+l+8aeVhtRyTyF9uoR5xSLi18Pp/
JfGmbQZlBXaFxauXJ49QuykQavs/Hk8qDGu9F7t7FlE8eJ+4IBvMWzriVZI+dGGs
aVYgfvYl1z0CDxw9C2KFN4fB6Hvzo38WIIR1Qz+F05BifQn+SmYDlE1e8JVgr/qE
2DE0/eUVyAILCuPL2W77hZYvnq/g/SuaNJc+jejiZ4h+gsQwlPkV
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org