Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2037303138.roa
File: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=
Subject key identifier: F9:A1:D7:4E:0A:C8:EB:5C:84:D5:6A:5B:B1:BF:61:74:F9:AC:87:04
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 3D0F03DC494E8B65FD4BB5CB6169E3D391A3BAD2
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2037303138.roa
Signing time: Tue 25 Mar 2025 06:19:50 +0000
ROA not before: Tue 25 Mar 2025 06:14:50 +0000
ROA not after: Tue 24 Mar 2026 06:19:50 +0000
asID: 7018
IP address blocks: 194.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0f:03:dc:49:4e:8b:65:fd:4b:b5:cb:61:69:e3:d3:91:a3:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:50 2025 GMT
Not After : Mar 24 06:19:50 2026 GMT
Subject: CN=F9A1D74E0AC8EB5C84D56A5BB1BF6174F9AC8704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:67:fe:10:a5:e7:2c:2c:fb:75:f6:99:68:
ff:ea:9a:9f:6f:af:f2:8f:ef:87:6c:8b:34:d5:49:
6f:3e:6b:ce:06:dd:b9:d2:84:84:d8:0e:03:29:9a:
77:c1:be:67:48:7b:06:e5:d9:7b:e9:bb:fe:16:21:
7a:b3:4a:22:e0:cb:80:df:ee:0c:07:52:0b:c9:cb:
a2:4f:58:39:cb:6e:ba:af:13:e6:0b:f5:59:3d:07:
4f:08:c8:b6:97:7c:2a:fd:e3:ba:73:77:1b:ad:32:
e8:b0:35:49:ec:5d:88:1f:d6:08:29:81:79:c3:69:
68:18:f8:62:84:80:f1:e0:d4:57:ae:46:0b:c3:35:
ad:79:09:fd:34:6f:73:35:48:3f:a1:dd:35:41:63:
30:86:1c:c0:65:16:88:60:39:dc:89:ed:cd:2c:f4:
92:f6:46:be:c3:34:f8:84:bf:e2:dd:ff:8c:e5:43:
36:92:e0:aa:bb:4c:69:5d:b4:4b:3a:27:37:33:ad:
d8:39:b6:3a:90:92:3e:86:7d:f4:d8:ce:ca:7f:b5:
f7:0e:10:75:37:49:17:55:69:e9:5f:ac:0f:cb:fc:
7e:ed:90:3b:70:89:b2:c7:85:da:bc:dd:df:60:c1:
4a:ce:ba:5b:bf:af:9a:c5:43:9a:80:fd:7d:1e:30:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:D7:4E:0A:C8:EB:5C:84:D5:6A:5B:B1:BF:61:74:F9:AC:87:04
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3e:dc:b1:44:8e:cb:2c:89:eb:87:bb:fe:15:2e:5b:e2:cb:
a3:dd:13:11:8b:ce:29:fc:f1:32:3f:ab:d8:c9:e3:79:c5:17:
f3:ca:69:b6:88:0f:dd:fb:e7:c0:69:a3:5c:91:1a:9f:8e:de:
30:bd:e5:21:2d:f5:95:d7:2a:c5:cd:b3:38:d5:8f:3c:df:cc:
1b:9f:b3:e4:37:90:dd:82:ce:03:0a:00:49:67:db:e5:05:b8:
a0:39:52:37:3f:d8:e7:78:b3:4d:a0:fd:d6:d1:f9:5d:b4:3b:
7a:72:0f:5f:6c:1b:a1:fb:b1:43:ae:3f:36:6e:61:6e:47:c6:
9d:09:4e:b9:90:a9:cd:a7:f5:53:22:cb:60:fc:53:98:0a:ac:
72:7b:10:24:5e:c2:09:48:45:c9:49:a0:9c:8a:b0:84:d1:5c:
cc:98:82:b4:da:83:10:b7:01:b4:a2:de:a4:15:cd:b7:3c:82:
0f:21:6a:e3:a9:b5:b4:f4:13:33:8c:18:a5:98:73:6c:ca:3b:
db:33:ee:02:51:74:40:67:e0:d2:60:e9:7d:4c:5a:1e:3e:23:
af:9d:e3:18:43:63:c0:e9:4e:0f:1f:aa:79:86:58:96:4a:af:
16:18:b8:cf:a5:ec:00:0d:3c:c1:8d:95:4a:f0:7f:b5:d4:15:
a3:48:d4:d0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPQ8D3ElOi2X9S7XLYWnj05GjutIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNTAzMjUwNjE0NTBaFw0yNjAzMjQwNjE5NTBaMDMxMTAvBgNV
BAMTKEY5QTFENzRFMEFDOEVCNUM4NEQ1NkE1QkIxQkY2MTc0RjlBQzg3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTWf+EKXnLCz7dfaZaP/qmp9v
r/KP74dsizTVSW8+a84G3bnShITYDgMpmnfBvmdIewbl2Xvpu/4WIXqzSiLgy4Df
7gwHUgvJy6JPWDnLbrqvE+YL9Vk9B08IyLaXfCr947pzdxutMuiwNUnsXYgf1ggp
gXnDaWgY+GKEgPHg1FeuRgvDNa15Cf00b3M1SD+h3TVBYzCGHMBlFohgOdyJ7c0s
9JL2Rr7DNPiEv+Ld/4zlQzaS4Kq7TGldtEs6Jzczrdg5tjqQkj6GffTYzsp/tfcO
EHU3SRdVaelfrA/L/H7tkDtwibLHhdq83d9gwUrOulu/r5rFQ5qA/X0eMMWvAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+aHXTgrI61yE1Wpbsb9hdPmshwQwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzOTM0MmUzMjM2MmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCGhUw
DQYJKoZIhvcNAQELBQADggEBADg+3LFEjsssieuHu/4VLlviy6PdExGLzin88TI/
q9jJ43nFF/PKabaID93758Bpo1yRGp+O3jC95SEt9ZXXKsXNszjVjzzfzBufs+Q3
kN2CzgMKAEln2+UFuKA5Ujc/2Od4s02g/dbR+V20O3pyD19sG6H7sUOuPzZuYW5H
xp0JTrmQqc2n9VMiy2D8U5gKrHJ7ECRewglIRclJoJyKsITRXMyYgrTagxC3AbSi
3qQVzbc8gg8hauOptbT0EzOMGKWYc2zKO9sz7gJRdEBn4NJg6X1MWh4+I6+d4xhD
Y8DpTg8fqnmGWJZKrxYYuM+l7AANPMGNlUrwf7XUFaNI1NA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:41 2025 by rpki-client