Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (raw, json)
Hash identifier: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=
Subject key identifier: FF:99:D8:F3:93:88:E5:5A:A2:4F:15:B7:3C:5C:08:95:33:D3:30:B7
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 741CA58434988780AC9852C348224EC487CE46C0
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa
Signing time: Mon 13 Jan 2025 17:23:11 +0000
ROA not before: Mon 13 Jan 2025 17:18:11 +0000
ROA not after: Mon 12 Jan 2026 17:23:11 +0000
asID: 212150
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1c:a5:84:34:98:87:80:ac:98:52:c3:48:22:4e:c4:87:ce:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 13 17:18:11 2025 GMT
Not After : Jan 12 17:23:11 2026 GMT
Subject: CN=FF99D8F39388E55AA24F15B73C5C089533D330B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:e2:92:da:01:ab:12:29:e7:b7:53:18:75:
43:c4:19:5f:5e:19:fd:64:5b:61:2f:f0:b0:3c:cd:
75:03:48:73:53:56:9d:dc:6a:5e:bf:2a:10:93:bb:
3e:5e:0d:84:89:c0:db:32:31:b5:fd:7e:09:1e:60:
1e:24:fc:0a:c4:79:d6:08:b3:fe:35:10:60:6c:07:
44:14:cb:d5:b4:db:22:e5:36:a2:04:b1:47:b2:85:
d0:d0:44:e0:ec:39:59:e5:d8:72:49:b5:e5:4d:3d:
72:ef:f7:b5:b6:2b:a9:8b:51:eb:3f:ca:33:9f:6c:
47:8a:a3:98:46:3c:a8:f5:bb:bc:aa:63:5e:a4:29:
43:ca:07:30:4b:69:42:17:b6:ad:a9:ec:bf:b8:bf:
35:2c:76:c8:f6:b1:32:62:85:55:58:27:70:fa:f5:
b0:01:a3:f9:4a:7f:99:8e:3b:12:9b:da:d5:f8:a1:
29:56:ef:c5:27:7b:00:83:c4:57:96:4c:b9:99:e7:
f5:3e:c4:0f:13:7e:b4:1d:03:30:b6:c0:bf:c0:7e:
b3:c6:41:87:67:01:85:18:89:62:a2:54:af:05:3a:
13:f0:7b:44:21:00:ef:62:7d:57:ba:9d:fb:7a:f5:
e6:50:e2:81:71:47:3c:03:09:87:43:89:65:ce:b2:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:D8:F3:93:88:E5:5A:A2:4F:15:B7:3C:5C:08:95:33:D3:30:B7
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
89:af:c8:19:13:0a:c9:7c:5e:5e:a6:aa:11:3a:67:31:00:7a:
ec:86:b8:bc:59:e8:c0:e2:a3:84:50:25:01:ab:e9:1f:20:b8:
b7:70:fe:6d:35:f1:4c:66:13:8a:8f:96:63:b6:68:20:a2:1a:
9e:2d:13:63:d8:b7:c2:d2:e0:a0:4f:ec:ab:80:44:ee:45:d6:
2e:59:0a:ea:1e:8e:72:d3:cc:b1:fe:8f:c5:ba:aa:e2:f7:39:
91:28:4f:ca:8f:56:49:b5:d9:a3:57:34:2f:7e:71:d4:40:e9:
35:b3:3a:6b:66:99:8f:c5:8b:1e:85:30:25:63:80:91:bc:8e:
26:bb:4c:70:28:4b:91:12:4e:55:a7:3c:08:eb:d3:fd:14:bf:
d2:a8:99:9b:0e:0b:45:e2:90:70:28:49:c8:e3:56:6d:df:f7:
c8:bc:60:b0:77:d1:4c:e9:8e:9e:89:9b:59:63:cb:e0:db:48:
bf:40:af:8f:d6:5c:bc:44:54:58:01:48:d2:d6:66:cf:86:46:
b0:5d:42:34:af:79:d4:68:ab:a6:6b:f6:83:25:f3:74:72:c2:
23:5c:66:83:c9:c7:31:69:3c:c0:c6:31:b1:fb:ec:b9:03:86:
85:6f:23:07:08:6b:bb:87:26:e9:0c:3f:a0:ee:b7:37:fc:c9:
b5:c3:2e:e2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdBylhDSYh4CsmFLDSCJOxIfORsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNTAxMTMxNzE4MTFaFw0yNjAxMTIxNzIzMTFaMDMxMTAvBgNV
BAMTKEZGOTlEOEYzOTM4OEU1NUFBMjRGMTVCNzNDNUMwODk1MzNEMzMwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyOKS2gGrEinnt1MYdUPEGV9e
Gf1kW2Ev8LA8zXUDSHNTVp3cal6/KhCTuz5eDYSJwNsyMbX9fgkeYB4k/ArEedYI
s/41EGBsB0QUy9W02yLlNqIEsUeyhdDQRODsOVnl2HJJteVNPXLv97W2K6mLUes/
yjOfbEeKo5hGPKj1u7yqY16kKUPKBzBLaUIXtq2p7L+4vzUsdsj2sTJihVVYJ3D6
9bABo/lKf5mOOxKb2tX4oSlW78UnewCDxFeWTLmZ5/U+xA8TfrQdAzC2wL/AfrPG
QYdnAYUYiWKiVK8FOhPwe0QhAO9ifVe6nft69eZQ4oFxRzwDCYdDiWXOst09AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/5nY85OI5VqiTxW3PFwIlTPTMLcwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMTM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi08wDQYJKoZIhvcNAQELBQADggEBAImvyBkTCsl8Xl6mqhE6ZzEAeuyGuLxZ
6MDio4RQJQGr6R8guLdw/m018UxmE4qPlmO2aCCiGp4tE2PYt8LS4KBP7KuARO5F
1i5ZCuoejnLTzLH+j8W6quL3OZEoT8qPVkm12aNXNC9+cdRA6TWzOmtmmY/Fix6F
MCVjgJG8jia7THAoS5ESTlWnPAjr0/0Uv9KomZsOC0XikHAoScjjVm3f98i8YLB3
0Uzpjp6Jm1ljy+DbSL9Ar4/WXLxEVFgBSNLWZs+GRrBdQjSvedRoq6Zr9oMl83Ry
wiNcZoPJxzFpPMDGMbH77LkDhoVvIwcIa7uHJukMP6Dutzf8ybXDLuI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:12 2025 by rpki-client