Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323130373033.roa
File: 3139332e33352e3232362e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier: wK9x2MFrz3d3M9mBgS0nSvum13y/Mr00EelcrL6P6dI=
Subject key identifier: C8:15:C6:87:DF:77:EC:D5:B3:41:4E:39:6D:4A:B4:44:4B:38:E9:D2
Certificate issuer: /CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Certificate serial: 36D59A33648C3D61AD1A756CD359E61A2A6D5D03
Authority key identifier: 8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323130373033.roa
Signing time: Wed 22 Mar 2023 19:56:04 +0000
ROA not before: Wed 22 Mar 2023 19:51:04 +0000
ROA not after: Wed 20 Mar 2024 19:56:04 +0000
asID: 210703
IP address blocks: 193.35.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d5:9a:33:64:8c:3d:61:ad:1a:75:6c:d3:59:e6:1a:2a:6d:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Validity
Not Before: Mar 22 19:51:04 2023 GMT
Not After : Mar 20 19:56:04 2024 GMT
Subject: CN=C815C687DF77ECD5B3414E396D4AB4444B38E9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:97:f9:c1:86:57:33:2b:45:43:ee:26:ca:
1b:73:79:62:93:1f:ce:25:8f:05:12:a7:1e:ad:c2:
9f:f1:53:63:fc:16:2c:c7:8c:00:65:7b:fc:1b:c3:
21:11:04:e9:48:1a:ef:dc:4d:7f:3c:c5:e5:43:ea:
b5:40:6e:a9:59:0a:f8:7d:b0:8e:cc:7c:6e:ce:55:
55:71:ad:9d:1a:6f:9f:2b:c6:09:bd:9c:c0:91:ba:
a6:ea:02:42:07:83:98:b5:62:48:36:29:0c:8e:04:
bd:91:84:a7:fd:61:3e:f6:0f:56:89:04:58:70:f3:
35:de:ff:76:64:01:a2:b5:b7:5f:4e:c1:a8:65:8d:
2d:e5:5a:61:2c:aa:8e:0a:1a:a0:27:a2:72:81:01:
b5:41:49:fe:cd:42:81:13:ba:53:af:63:c6:ae:bd:
8d:79:2c:6d:82:44:f5:1f:a7:d8:57:ab:2c:c6:a7:
a7:4f:96:b6:49:2a:6a:5b:14:ff:98:fb:17:86:b3:
04:16:ea:1f:37:53:41:ad:fb:10:50:64:a4:69:59:
d9:b9:38:46:ab:34:08:bd:b6:7e:8a:3c:18:6f:b2:
d8:04:15:70:30:79:51:ff:83:23:44:99:42:6f:d6:
7b:d3:76:d7:aa:80:5a:c6:4e:30:45:f6:7c:79:d2:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:C6:87:DF:77:EC:D5:B3:41:4E:39:6D:4A:B4:44:4B:38:E9:D2
X509v3 Authority Key Identifier:
keyid:8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323130373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:45:8c:e0:e8:3a:68:f2:e4:6c:af:1a:66:31:54:43:7b:90:
a3:74:f2:81:fd:b5:24:7d:90:a4:4e:21:96:9a:68:eb:71:53:
c6:ec:3b:01:6d:91:10:08:ab:2f:2a:35:dd:7b:a0:bd:21:c2:
d5:af:0d:66:d1:91:96:dc:cf:e9:62:47:60:1f:00:8b:21:b2:
cf:2c:83:15:ee:5b:75:fa:ff:97:a0:2c:e4:3d:3a:9d:af:6d:
e9:31:eb:67:89:83:9a:21:06:24:e9:e1:ac:c1:5c:3c:b6:68:
e6:91:3f:5b:7e:73:41:6f:33:04:f8:25:df:3a:10:78:97:73:
06:d2:6b:a2:9a:13:fa:1a:ca:27:ff:2b:f4:30:d2:9f:80:2a:
1e:c7:56:e9:4b:27:b8:e8:8e:39:31:9d:be:0b:a0:e3:e2:c4:
b4:c8:05:fb:fe:dd:47:82:a5:70:0c:c3:da:38:23:be:f9:b7:
3e:f5:b4:2f:37:38:0f:7e:35:39:bf:ed:4e:e8:57:03:d1:12:
02:88:8e:db:13:43:9b:1c:84:c8:62:6c:3e:8f:4f:c8:82:25:
c1:1d:6a:fb:ea:08:97:f8:91:22:86:f3:0e:72:91:ee:11:e7:
26:8f:12:4c:79:8b:0c:2e:76:e6:01:42:dc:a7:17:a9:e7:dd:
03:07:88:e2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNtWaM2SMPWGtGnVs01nmGiptXQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGZmYjViZjhjZTQxMDZlYjI3ZDA1YmRiN2Y4MWY2MGI0
MGU0OGViODAeFw0yMzAzMjIxOTUxMDRaFw0yNDAzMjAxOTU2MDRaMDMxMTAvBgNV
BAMTKEM4MTVDNjg3REY3N0VDRDVCMzQxNEUzOTZENEFCNDQ0NEIzOEU5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRpf5wYZXMytFQ+4myhtzeWKT
H84ljwUSpx6twp/xU2P8FizHjABle/wbwyERBOlIGu/cTX88xeVD6rVAbqlZCvh9
sI7MfG7OVVVxrZ0ab58rxgm9nMCRuqbqAkIHg5i1Ykg2KQyOBL2RhKf9YT72D1aJ
BFhw8zXe/3ZkAaK1t19OwahljS3lWmEsqo4KGqAnonKBAbVBSf7NQoETulOvY8au
vY15LG2CRPUfp9hXqyzGp6dPlrZJKmpbFP+Y+xeGswQW6h83U0Gt+xBQZKRpWdm5
OEarNAi9tn6KPBhvstgEFXAweVH/gyNEmUJv1nvTdteqgFrGTjBF9nx50pqXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUyBXGh9937NWzQU45bUq0REs46dIwHwYDVR0j
BBgwFoAUj/tb+M5BBusn0Fvbf4H2C0DkjrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExZjA4NWItNjU4Zi00NGViLTg3ZTUtMzYyYTQwYzdl
ZWYxLzAvOEZGQjVCRjhDRTQxMDZFQjI3RDA1QkRCN0Y4MUY2MEI0MEU0OEVCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pfdGItTTVCQnVzbjBGdmJmNEgyQzBE
a2pyZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExZjA4NWIt
NjU4Zi00NGViLTg3ZTUtMzYyYTQwYzdlZWYxLzAvMzEzOTMzMmUzMzM1MmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzAzNzMwMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBI+IwDQYJKoZIhvcNAQELBQADggEBAI5FjODoOmjy5GyvGmYxVEN7kKN08oH9
tSR9kKROIZaaaOtxU8bsOwFtkRAIqy8qNd17oL0hwtWvDWbRkZbcz+liR2AfAIsh
ss8sgxXuW3X6/5egLOQ9Op2vbekx62eJg5ohBiTp4azBXDy2aOaRP1t+c0FvMwT4
Jd86EHiXcwbSa6KaE/oayif/K/Qw0p+AKh7HVulLJ7jojjkxnb4LoOPixLTIBfv+
3UeCpXAMw9o4I775tz71tC83OA9+NTm/7U7oVwPREgKIjtsTQ5schMhibD6PT8iC
JcEdavvqCJf4kSKG8w5yke4R5yaPEkx5iwwuduYBQtynF6nn3QMHiOI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:24 2025 by rpki-client