Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e203136323736.roa
File: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=
Subject key identifier: 74:6C:51:BF:11:D7:E1:ED:0C:92:6C:78:8E:1D:B5:99:67:B7:B6:14
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 62EBD997B41F5421CACD68E2155B2C90E76FFDE3
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e203136323736.roa
Signing time: Mon 10 Feb 2025 08:38:10 +0000
ROA not before: Mon 10 Feb 2025 08:33:10 +0000
ROA not after: Mon 09 Feb 2026 08:38:10 +0000
asID: 16276
IP address blocks: 91.235.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:eb:d9:97:b4:1f:54:21:ca:cd:68:e2:15:5b:2c:90:e7:6f:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Feb 10 08:33:10 2025 GMT
Not After : Feb 9 08:38:10 2026 GMT
Subject: CN=746C51BF11D7E1ED0C926C788E1DB59967B7B614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:b5:e5:a9:e9:ba:a1:31:3e:ab:21:db:3c:
f4:7a:35:f1:32:be:2c:3c:0e:c3:9e:d5:4b:57:e4:
40:11:a9:03:ea:72:cc:58:b2:ab:66:f4:92:b7:37:
7a:b0:e7:69:5e:f7:fc:49:94:51:2f:9b:25:a3:73:
1f:50:5f:14:5e:45:cb:b8:8d:c7:fb:fc:0a:6e:20:
86:32:fd:03:c9:e7:cf:7b:04:c2:35:b2:f1:4d:c3:
9a:4f:bb:0d:d7:d7:55:31:db:de:a1:9f:11:7c:d0:
ff:d6:56:4e:d6:03:4a:3e:a7:99:0a:b5:d9:57:67:
b3:26:b1:c2:0f:8b:50:0d:c5:ec:11:3d:d1:8d:36:
8c:34:80:ad:25:8b:f0:30:8f:d0:e8:ad:92:fd:e9:
45:08:95:5f:b9:27:48:68:1b:57:a2:ec:47:b5:2b:
b0:e8:40:44:43:f5:57:e9:1e:c4:94:92:be:2c:3c:
42:a6:92:eb:9c:42:3c:a8:15:6c:3e:7c:58:5b:b9:
4d:ec:fd:53:9a:3c:ca:a0:f8:3c:9e:6a:71:f1:f9:
07:0f:50:17:52:33:3e:c6:12:09:1e:4a:b2:3d:da:
fa:01:1c:0b:b3:25:bc:19:72:66:c0:64:88:bb:5d:
90:1a:08:4f:80:38:fb:7f:0c:41:77:0a:d4:a3:51:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:51:BF:11:D7:E1:ED:0C:92:6C:78:8E:1D:B5:99:67:B7:B6:14
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.205.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1d:4f:0d:b1:d3:d4:22:cd:97:38:04:4e:0b:71:6b:17:7a:
23:ad:2d:f9:3a:51:5b:49:46:5c:de:ef:86:88:6b:dc:bb:df:
c4:67:d7:35:b8:9b:bc:f8:ad:6d:82:04:a8:cb:0a:a8:a8:58:
67:b7:6f:57:b1:77:a0:20:55:cf:c3:3f:13:e2:eb:a0:fc:5f:
5f:9d:98:24:6e:76:54:47:a1:f9:bd:c7:4e:15:7a:07:b7:50:
8a:a8:25:fb:61:c4:6d:9a:91:3d:10:b4:a0:51:41:42:8f:63:
82:9a:47:41:6f:73:0b:01:92:a4:f5:bb:fe:6c:d8:02:20:80:
12:4b:6e:39:1f:e0:df:ed:6b:9e:bb:c3:49:2f:34:53:f6:54:
f1:d3:c5:78:85:cb:b7:ac:ca:09:54:18:a2:95:ad:6a:0c:46:
79:a1:d1:bc:09:4f:b8:1e:19:43:32:4a:b2:25:ca:75:d3:ab:
8b:e9:37:cd:c5:22:8b:4f:3d:23:a8:81:bb:c0:e0:90:87:53:
97:85:52:c7:67:4e:df:1a:0c:1d:ae:ec:2b:e2:d1:ae:14:9a:
b1:bc:4c:0b:8d:da:ae:a0:10:65:74:b1:20:7b:56:d8:8a:f6:
c9:23:70:20:48:42:f1:ce:8c:d5:32:10:77:29:9c:02:e5:b1:
a7:fe:6c:1b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUYuvZl7QfVCHKzWjiFVsskOdv/eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkyZDE0ODU4M2E0NjQyZDkwZDRjNGJjNDdiNDUwNGUx
ODBlYTBjMzAeFw0yNTAyMTAwODMzMTBaFw0yNjAyMDkwODM4MTBaMDMxMTAvBgNV
BAMTKDc0NkM1MUJGMTFEN0UxRUQwQzkyNkM3ODhFMURCNTk5NjdCN0I2MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDck7Xlqem6oTE+qyHbPPR6NfEy
viw8DsOe1UtX5EARqQPqcsxYsqtm9JK3N3qw52le9/xJlFEvmyWjcx9QXxReRcu4
jcf7/ApuIIYy/QPJ5897BMI1svFNw5pPuw3X11Ux296hnxF80P/WVk7WA0o+p5kK
tdlXZ7MmscIPi1ANxewRPdGNNow0gK0li/Awj9DorZL96UUIlV+5J0hoG1ei7Ee1
K7DoQERD9VfpHsSUkr4sPEKmkuucQjyoFWw+fFhbuU3s/VOaPMqg+DyeanHx+QcP
UBdSMz7GEgkeSrI92voBHAuzJbwZcmbAZIi7XZAaCE+AOPt/DEF3CtSjUcYfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUdGxRvxHX4e0Mkmx4jh21mWe3thQwHwYDVR0j
BBgwFoAU6S0UhYOkZC2Q1MS8R7RQThgOoMMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI4M2EzOGEtN2EzOS00Mzk3LWI1ODgtZWRiOWZiYjYy
ODE3LzAvRTkyRDE0ODU4M0E0NjQyRDkwRDRDNEJDNDdCNDUwNEUxODBFQTBDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZTMFVoWU9rWkMyUTFNUzhSN1JRVGhn
T29NTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI4M2EzOGEt
N2EzOS00Mzk3LWI1ODgtZWRiOWZiYjYyODE3LzAvMzkzMTJlMzIzMzM1MmUzMjMw
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W+vNMA0GCSqGSIb3DQEBCwUAA4IBAQA1HU8NsdPUIs2XOAROC3FrF3ojrS35OlFb
SUZc3u+GiGvcu9/EZ9c1uJu8+K1tggSoywqoqFhnt29XsXegIFXPwz8T4uug/F9f
nZgkbnZUR6H5vcdOFXoHt1CKqCX7YcRtmpE9ELSgUUFCj2OCmkdBb3MLAZKk9bv+
bNgCIIASS245H+Df7Wueu8NJLzRT9lTx08V4hcu3rMoJVBiila1qDEZ5odG8CU+4
HhlDMkqyJcp106uL6TfNxSKLTz0jqIG7wOCQh1OXhVLHZ07fGgwdruwr4tGuFJqx
vEwLjdquoBBldLEge1bYivbJI3AgSELxzozVMhB3KZwC5bGn/mwb
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:23 2025 by rpki-client