Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa
File: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (raw, json)
Hash identifier: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=
Subject key identifier: BB:86:03:00:19:4B:36:56:61:01:E4:2A:B2:DE:FB:37:3F:09:8E:2B
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7DD559865C24CC2D61E5C0C9BBAAA551115F7EF8
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa
Signing time: Mon 17 Feb 2025 14:09:06 +0000
ROA not before: Mon 17 Feb 2025 14:04:06 +0000
ROA not after: Mon 16 Feb 2026 14:09:06 +0000
asID: 400909
IP address blocks: 195.211.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d5:59:86:5c:24:cc:2d:61:e5:c0:c9:bb:aa:a5:51:11:5f:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Feb 17 14:04:06 2025 GMT
Not After : Feb 16 14:09:06 2026 GMT
Subject: CN=BB860300194B36566101E42AB2DEFB373F098E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:94:73:10:eb:45:62:04:89:db:35:fd:48:
f4:77:20:af:c2:ce:cb:41:39:f9:98:d4:9e:1b:63:
f7:e3:05:9b:ab:2f:70:54:fb:49:bb:32:e6:e9:65:
a2:50:b9:1e:3c:81:99:68:c6:4c:44:2c:5b:e8:d9:
69:49:6f:ba:3b:81:22:1b:37:36:0e:c9:1d:d0:38:
22:9a:d4:49:c5:41:9c:5b:1e:5a:ec:ed:3d:bd:09:
a5:80:a9:9c:a5:4d:e4:2a:ae:dc:72:04:e3:5c:d9:
a8:d4:65:8b:3b:02:17:a1:25:b8:3c:b7:46:2d:c9:
0b:79:8b:2d:32:aa:d1:e9:52:20:ea:6e:b2:9e:97:
ab:20:2f:0e:08:52:25:a7:9d:fb:d9:94:ce:37:0c:
c8:0a:25:be:b5:4a:89:ec:17:a2:9f:f7:f4:25:22:
ca:f6:be:b8:58:92:93:11:4a:42:09:f9:cb:90:3d:
a1:cb:fc:69:50:ab:7f:95:e2:bb:46:6e:b7:0e:a0:
77:e0:be:af:de:bd:45:93:03:fd:bd:3f:3a:8e:dd:
51:68:fa:2d:ad:7a:01:e7:05:fd:bd:1f:52:3a:43:
41:4b:8a:0a:e8:d2:9c:d6:23:21:97:55:a5:81:52:
18:51:47:f8:03:52:46:aa:07:d6:c2:d4:fe:79:d1:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:03:00:19:4B:36:56:61:01:E4:2A:B2:DE:FB:37:3F:09:8E:2B
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:04:0b:aa:53:da:20:4a:91:1b:64:3b:b9:86:61:0b:e6:de:
8d:62:2f:f2:06:3f:84:2e:7a:50:c3:29:9b:58:2b:05:6f:32:
cd:78:46:01:bb:a7:6b:c4:11:06:4f:b7:aa:8b:51:c1:60:bf:
45:7b:95:1c:a3:4b:45:18:98:8b:46:07:fd:57:64:90:28:27:
51:fc:fc:ca:d4:24:29:55:93:5e:3d:03:c4:57:ca:99:4d:98:
53:23:6d:e8:44:fd:65:bb:1d:f5:56:ad:b1:c1:4d:4b:06:13:
8d:06:e5:2a:91:f1:24:7a:0d:80:39:bc:ea:9b:92:e0:bf:68:
9e:bb:74:05:c8:6c:05:70:b4:4b:68:e0:8a:78:4b:1a:68:9d:
f0:48:7f:82:2a:27:19:67:05:ef:fb:e0:a4:2d:d0:94:e9:1f:
18:e7:63:f9:ba:d0:48:35:76:b5:d9:12:10:58:91:29:27:96:
a1:8b:42:ec:22:e1:51:6c:e7:cb:08:ae:6e:b3:49:35:6f:bc:
3c:89:a2:b6:6f:63:16:0f:9f:4c:e8:61:89:ae:11:58:03:96:
b2:32:c1:84:ba:ba:e6:e6:21:2b:ac:51:72:df:ae:e9:30:94:
11:b7:08:cb:cf:83:57:4d:43:a3:1b:b0:32:fb:0c:69:da:af:
ab:2d:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:23 2025 by rpki-client