Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32332d3233203d3e20323132323338.roa
File: 3134312e39382e34322e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: 8w+tR95BBNABqvA0I3FwH0x+LxZUE+Mmu2GMZ2l0Ya0=
Subject key identifier: 12:8F:5E:DB:F0:FF:1D:17:20:B9:AB:69:4D:6E:6A:DC:D0:3D:8B:40
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 66520AD69D934C0BA7F0F9111E09DE7EB49A8631
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 05 Feb 2025 13:27:35 +0000
ROA not before: Wed 05 Feb 2025 13:22:35 +0000
ROA not after: Wed 04 Feb 2026 13:27:35 +0000
asID: 212238
IP address blocks: 141.98.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:52:0a:d6:9d:93:4c:0b:a7:f0:f9:11:1e:09:de:7e:b4:9a:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Feb 5 13:22:35 2025 GMT
Not After : Feb 4 13:27:35 2026 GMT
Subject: CN=128F5EDBF0FF1D1720B9AB694D6E6ADCD03D8B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:0c:cf:5a:d2:05:f5:c2:64:e6:89:19:e4:
f3:36:0b:63:26:aa:75:c0:30:d2:f1:0a:08:4e:b2:
db:4d:06:cd:3d:90:2f:60:fc:1e:75:ed:e0:c2:66:
84:57:62:10:b3:1d:39:9e:56:b5:c0:41:6d:62:13:
ba:2c:37:e2:86:1b:27:a8:0c:e7:59:87:35:51:ad:
c9:f8:95:ad:28:ed:1e:83:45:c2:2c:ad:05:60:19:
69:20:f7:d8:45:20:48:de:77:2b:bd:5b:aa:42:a5:
99:6a:ed:61:b9:30:2b:25:1f:a6:4d:99:94:63:9a:
ee:b9:7b:1c:a2:7e:03:13:72:99:1e:ac:32:b9:ab:
73:c2:4d:6f:da:64:69:c1:0d:86:8b:34:ab:d9:b2:
b0:be:73:fd:dc:9e:27:3a:07:81:7a:40:8d:ca:85:
d2:c4:d0:04:77:cb:d4:65:20:00:f8:b4:db:03:71:
40:0e:1d:d0:ea:0e:87:25:39:8b:f7:f1:06:3d:98:
06:ab:28:04:2c:23:61:4c:3e:d5:a7:e5:44:da:66:
20:8e:44:53:b5:ab:76:14:c5:bb:bd:f1:d5:60:e3:
e4:f8:a7:a5:d3:73:74:ba:f4:b8:eb:c2:40:3f:f0:
f9:55:5b:c4:f2:5d:4f:a1:a6:f8:ea:ca:65:be:4f:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:5E:DB:F0:FF:1D:17:20:B9:AB:69:4D:6E:6A:DC:D0:3D:8B:40
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.42.0/23
Signature Algorithm: sha256WithRSAEncryption
58:cb:9a:f1:9b:f1:92:93:25:96:53:b2:57:9c:70:f2:e0:d5:
9a:2e:ad:0a:d8:36:f4:f2:a4:d8:34:01:25:7b:5c:cd:e6:4b:
a6:d4:dd:9e:7c:ff:37:35:2f:54:4b:15:f4:96:1e:1b:c8:8a:
84:5c:37:cd:7c:42:06:72:ef:00:73:59:51:52:de:cf:a1:58:
f6:5b:b5:1c:00:f5:42:f3:27:df:8d:b4:19:fb:10:ad:65:10:
29:7e:bf:95:cb:4f:08:85:ca:62:7a:58:ed:19:e3:7e:d7:46:
8b:ef:a4:3c:67:6a:31:35:b2:84:2d:c1:62:0d:bc:5c:27:60:
18:8c:3f:10:63:0e:4a:66:2a:ec:0e:5d:ce:46:90:30:ce:7e:
17:46:1e:6e:26:17:c5:eb:80:64:b4:21:94:b1:bc:f4:fc:b0:
ad:89:59:42:c0:c4:3e:56:ee:85:2b:c0:b1:37:b5:ea:c3:2a:
5b:65:33:c1:18:61:bf:43:bf:4b:e1:07:95:0a:aa:11:b8:c3:
23:dd:27:8b:37:9b:fe:08:bf:99:0c:d6:77:5f:a0:4b:c1:bd:
4e:a0:dc:82:88:4a:44:2d:43:63:a8:ba:c2:4f:ec:d6:c8:0e:
ca:ca:07:fa:70:9e:ad:17:6a:be:32:e2:4c:ca:c9:95:a5:fb:
a0:46:ec:cd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZlIK1p2TTAun8PkRHgnefrSahjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw
YjVkNDgxMDAeFw0yNTAyMDUxMzIyMzVaFw0yNjAyMDQxMzI3MzVaMDMxMTAvBgNV
BAMTKDEyOEY1RURCRjBGRjFEMTcyMEI5QUI2OTRENkU2QURDRDAzRDhCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbngzPWtIF9cJk5okZ5PM2C2Mm
qnXAMNLxCghOsttNBs09kC9g/B517eDCZoRXYhCzHTmeVrXAQW1iE7osN+KGGyeo
DOdZhzVRrcn4la0o7R6DRcIsrQVgGWkg99hFIEjedyu9W6pCpZlq7WG5MCslH6ZN
mZRjmu65exyifgMTcpkerDK5q3PCTW/aZGnBDYaLNKvZsrC+c/3cnic6B4F6QI3K
hdLE0AR3y9RlIAD4tNsDcUAOHdDqDoclOYv38QY9mAarKAQsI2FMPtWn5UTaZiCO
RFO1q3YUxbu98dVg4+T4p6XTc3S69LjrwkA/8PlVW8TyXU+hpvjqymW+T+6xAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEo9e2/D/HRcguatpTW5q3NA9i0AwHwYDVR0j
BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi
ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0
ZFNCQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt
ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzEzNDMxMmUzOTM4MmUzNDMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
jWIqMA0GCSqGSIb3DQEBCwUAA4IBAQBYy5rxm/GSkyWWU7JXnHDy4NWaLq0K2Db0
8qTYNAEle1zN5kum1N2efP83NS9USxX0lh4byIqEXDfNfEIGcu8Ac1lRUt7PoVj2
W7UcAPVC8yffjbQZ+xCtZRApfr+Vy08IhcpieljtGeN+10aL76Q8Z2oxNbKELcFi
DbxcJ2AYjD8QYw5KZirsDl3ORpAwzn4XRh5uJhfF64BktCGUsbz0/LCtiVlCwMQ+
Vu6FK8CxN7XqwypbZTPBGGG/Q79L4QeVCqoRuMMj3SeLN5v+CL+ZDNZ3X6BLwb1O
oNyCiEpELUNjqLrCT+zWyA7Kygf6cJ6tF2q+MuJMysmVpfugRuzN
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:38 2025 by rpki-client