Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa
File: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (raw, json)
Hash identifier: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=
Subject key identifier: 0A:33:F5:C4:A6:31:D2:04:93:B4:44:B5:21:FF:26:A9:5A:1A:1C:E6
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 7508CB21ECF9C19A4B5CED86952800281536A068
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa
Signing time: Tue 18 Feb 2025 17:55:00 +0000
ROA not before: Tue 18 Feb 2025 17:50:00 +0000
ROA not after: Tue 17 Feb 2026 17:55:00 +0000
asID: 48435
IP address blocks: 193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:08:cb:21:ec:f9:c1:9a:4b:5c:ed:86:95:28:00:28:15:36:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:50:00 2025 GMT
Not After : Feb 17 17:55:00 2026 GMT
Subject: CN=0A33F5C4A631D20493B444B521FF26A95A1A1CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:43:69:9c:62:1a:31:49:6c:6a:76:6c:1f:
c3:37:aa:51:69:d3:71:b0:4e:99:34:22:cf:e6:f5:
9f:6e:7c:5b:ea:af:16:5a:c9:f8:99:a5:77:02:ad:
c2:e3:6e:19:47:9d:39:e6:f7:8a:31:1e:32:f5:8e:
7b:51:d7:04:27:8c:80:d0:39:90:ee:15:46:68:f2:
2c:1d:c7:7f:7b:95:fb:fc:da:b8:d8:97:1c:e3:e5:
12:0c:26:1d:d5:e6:4a:14:3c:51:8e:73:5f:44:7a:
55:f5:7d:94:38:be:29:8a:72:c9:17:d5:8f:b4:9e:
1f:d7:9b:7c:52:89:f3:b6:54:b5:94:65:09:a1:9c:
a6:1e:70:74:0f:d6:e4:c4:03:0c:92:3b:67:b4:81:
29:08:ef:84:b1:7a:66:cc:dc:c0:25:5b:69:ad:ae:
c8:da:c0:85:c6:6e:d8:9c:fa:65:a1:b4:bf:0b:3f:
45:74:a3:fc:37:51:c2:45:84:78:2a:cf:d8:b7:55:
0e:d9:6b:8e:ca:ee:b4:84:a8:cf:82:9b:f9:51:07:
77:df:1f:86:ab:e3:3a:ec:26:c1:0d:2a:a6:7a:57:
4b:50:88:ad:e0:b5:09:23:16:94:2d:43:35:f7:13:
cc:ae:fa:a7:95:46:79:87:47:9e:2d:df:c1:c7:83:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:F5:C4:A6:31:D2:04:93:B4:44:B5:21:FF:26:A9:5A:1A:1C:E6
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c7:06:99:9f:76:ca:7c:53:b5:c2:c6:ec:af:bd:d0:7e:df:
60:da:1f:7a:67:4a:ba:2e:55:56:25:74:e7:46:b0:0d:ab:bb:
5a:ee:73:7f:fe:e5:6d:65:24:ea:3f:2a:0b:95:60:fc:3b:21:
2e:b4:dd:a4:b6:97:34:32:d2:fa:6a:7a:89:8e:69:8d:1f:e9:
90:21:b6:d2:bc:2f:8b:64:4f:c5:57:5d:6a:dd:f6:50:cc:62:
c9:c4:0b:75:52:cc:5c:31:2e:28:3a:df:2b:6d:8e:46:8a:ef:
11:5c:8d:fb:59:c7:64:5b:c3:ea:1c:33:03:90:53:51:e6:6d:
6c:86:41:fd:fb:5a:a9:2a:56:51:29:7a:17:44:55:21:46:a2:
e5:82:d8:26:d4:f8:06:a7:e1:4a:46:f3:0f:3e:ce:dc:26:28:
d5:25:b6:0c:19:23:8a:8b:2b:a1:9f:d4:c3:08:98:fc:43:5e:
5f:b4:a5:05:ef:ef:dc:1d:89:8f:de:97:0b:12:6f:39:ff:9d:
df:73:b3:53:aa:6e:98:c1:5e:94:7c:04:6d:59:62:1a:4b:59:
1e:15:01:42:32:9d:4b:40:c4:37:6b:7c:ba:bd:e2:e7:f7:ab:
d3:f5:c6:89:fd:f4:39:3e:93:b0:68:5b:53:c6:cf:1f:4d:f1:
e9:21:f5:01
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdQjLIez5wZpLXO2GlSgAKBU2oGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz
ZWFlYzQ3ZDAeFw0yNTAyMTgxNzUwMDBaFw0yNjAyMTcxNzU1MDBaMDMxMTAvBgNV
BAMTKDBBMzNGNUM0QTYzMUQyMDQ5M0I0NDRCNTIxRkYyNkE5NUExQTFDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EENpnGIaMUlsanZsH8M3qlFp
03GwTpk0Is/m9Z9ufFvqrxZayfiZpXcCrcLjbhlHnTnm94oxHjL1jntR1wQnjIDQ
OZDuFUZo8iwdx397lfv82rjYlxzj5RIMJh3V5koUPFGOc19EelX1fZQ4vimKcskX
1Y+0nh/Xm3xSifO2VLWUZQmhnKYecHQP1uTEAwySO2e0gSkI74SxembM3MAlW2mt
rsjawIXGbtic+mWhtL8LP0V0o/w3UcJFhHgqz9i3VQ7Za47K7rSEqM+Cm/lRB3ff
H4ar4zrsJsENKqZ6V0tQiK3gtQkjFpQtQzX3E8yu+qeVRnmHR54t38HHgxytAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCjP1xKYx0gSTtES1If8mqVoaHOYwHwYDVR0j
BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx
ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2
dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct
ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTMzMmUzMTM2MzkyZTM3
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
walOMA0GCSqGSIb3DQEBCwUAA4IBAQAJxwaZn3bKfFO1wsbsr73Qft9g2h96Z0q6
LlVWJXTnRrANq7ta7nN//uVtZSTqPyoLlWD8OyEutN2ktpc0MtL6anqJjmmNH+mQ
IbbSvC+LZE/FV11q3fZQzGLJxAt1UsxcMS4oOt8rbY5Giu8RXI37WcdkW8PqHDMD
kFNR5m1shkH9+1qpKlZRKXoXRFUhRqLlgtgm1PgGp+FKRvMPPs7cJijVJbYMGSOK
iyuhn9TDCJj8Q15ftKUF7+/cHYmP3pcLEm85/53fc7NTqm6YwV6UfARtWWIaS1ke
FQFCMp1LQMQ3a3y6veLn96vT9caJ/fQ5PpOwaFtTxs8fTfHpIfUB
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:12 2025 by rpki-client