Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20313336353031.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e20313336353031.roa (raw, json)
Hash identifier: AxC7i2u4NpeIZ0gkis61uVwmDhcCvt5SP+8N+ZKUrd8=
Subject key identifier: DB:14:63:4F:EF:20:86:11:4C:C1:32:B7:47:8C:FB:C3:00:24:1A:27
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 61C43FFDA87D0D38BBE539EF177223C3C6B3315C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20313336353031.roa
Signing time: Sat 22 Feb 2025 08:20:22 +0000
ROA not before: Sat 22 Feb 2025 08:15:22 +0000
ROA not after: Sat 21 Feb 2026 08:20:22 +0000
asID: 136501
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c4:3f:fd:a8:7d:0d:38:bb:e5:39:ef:17:72:23:c3:c6:b3:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 22 08:15:22 2025 GMT
Not After : Feb 21 08:20:22 2026 GMT
Subject: CN=DB14634FEF2086114CC132B7478CFBC300241A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:fc:95:82:94:07:09:a4:b8:35:80:32:c9:
0e:f9:27:53:d5:7d:c0:1d:2c:c5:97:be:eb:68:3b:
bf:1c:86:24:30:7f:16:fa:b3:0b:a4:66:0a:62:8c:
a5:b3:b1:c3:76:a7:78:f5:9e:a3:0b:8e:a4:14:12:
6f:dc:8d:4f:97:95:9f:95:0c:2a:11:f0:f1:9e:ac:
27:9c:11:1c:45:93:39:2a:49:b0:96:76:c0:d8:87:
6d:5f:49:89:5f:90:0e:7e:3d:a3:4b:de:66:f8:11:
17:8e:47:e2:ac:fd:3c:62:9d:f1:74:0b:4b:bd:7a:
21:9d:77:09:79:88:20:6c:e3:bb:f0:ee:f1:9a:cc:
14:78:b6:9c:6c:17:bd:1c:e2:e0:ed:36:2d:0a:f1:
9b:ee:1d:f4:f3:22:6d:86:ac:32:67:c2:06:32:2b:
78:c0:68:95:bf:3d:7f:b0:05:16:66:35:2b:a4:62:
4b:c8:7d:30:3c:da:e4:aa:cf:05:58:73:91:a7:65:
4e:4d:11:8b:09:df:16:e7:62:0a:74:f3:00:0e:8d:
e1:1a:d1:5c:17:ec:fb:52:a0:3c:15:b2:96:95:f7:
1b:83:d3:54:94:cf:19:dc:29:f6:17:c5:d7:47:30:
30:46:b7:60:f2:13:f1:d4:c5:31:90:45:00:7c:53:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:63:4F:EF:20:86:11:4C:C1:32:B7:47:8C:FB:C3:00:24:1A:27
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e20313336353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8b:4c:1d:ae:33:37:5e:0d:19:71:f4:63:43:51:13:b9:82:
ba:c3:af:6a:26:2e:9e:78:4d:ec:62:ce:0a:84:15:d0:51:1c:
3d:3a:43:b2:f3:e4:59:07:08:39:58:db:29:32:5a:f4:0e:6c:
d0:6d:c8:d6:76:2d:43:95:b8:4c:53:ea:f4:52:06:14:ee:0b:
0d:3b:81:f8:e3:3f:5a:ec:2a:c1:d6:44:88:35:6d:96:5d:8d:
e6:3f:f6:63:9d:06:a7:8d:55:11:2f:ca:fb:00:79:b8:ba:12:
ff:6d:a5:c0:9f:b0:29:67:9e:3f:fc:72:ab:b1:9a:06:bc:be:
ca:52:58:b0:ae:97:36:30:a8:a1:01:6c:93:e6:52:ad:57:e7:
96:ef:9c:5e:1b:ba:5c:9d:3d:69:42:ea:fe:2c:f7:11:b9:59:
f4:83:32:24:1e:d4:f6:97:ed:36:d5:ac:4c:30:db:50:66:67:
94:2d:fb:5e:3f:f2:0b:d4:9d:63:66:f5:3e:64:d6:d9:e2:66:
7a:a5:8f:99:3b:14:9b:f0:26:49:a0:03:42:1d:30:b9:04:2b:
a0:ef:6d:d2:d9:bf:00:6a:15:a6:cd:0b:7a:5d:ce:10:93:f8:
d0:70:f8:c1:5c:50:74:73:6b:05:f7:cc:d2:aa:d8:8b:40:c5:
0a:28:74:c5
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYcQ//ah9DTi75TnvF3Ijw8azMVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTAyMjIwODE1MjJaFw0yNjAyMjEwODIwMjJaMDMxMTAvBgNV
BAMTKERCMTQ2MzRGRUYyMDg2MTE0Q0MxMzJCNzQ3OENGQkMzMDAyNDFBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQ/yVgpQHCaS4NYAyyQ75J1PV
fcAdLMWXvutoO78chiQwfxb6swukZgpijKWzscN2p3j1nqMLjqQUEm/cjU+XlZ+V
DCoR8PGerCecERxFkzkqSbCWdsDYh21fSYlfkA5+PaNL3mb4EReOR+Ks/TxinfF0
C0u9eiGddwl5iCBs47vw7vGazBR4tpxsF70c4uDtNi0K8ZvuHfTzIm2GrDJnwgYy
K3jAaJW/PX+wBRZmNSukYkvIfTA82uSqzwVYc5GnZU5NEYsJ3xbnYgp08wAOjeEa
0VwX7PtSoDwVspaV9xuD01SUzxncKfYXxddHMDBGt2DyE/HUxTGQRQB8U06fAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU2xRjT+8ghhFMwTK3R4z7wwAkGicwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM1MzAzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMH2pDANBgkqhkiG9w0BAQsFAAOCAQEAKYtMHa4zN14NGXH0Y0NRE7mCusOv
aiYunnhN7GLOCoQV0FEcPTpDsvPkWQcIOVjbKTJa9A5s0G3I1nYtQ5W4TFPq9FIG
FO4LDTuB+OM/WuwqwdZEiDVtll2N5j/2Y50Gp41VES/K+wB5uLoS/22lwJ+wKWee
P/xyq7GaBry+ylJYsK6XNjCooQFsk+ZSrVfnlu+cXhu6XJ09aULq/iz3EblZ9IMy
JB7U9pftNtWsTDDbUGZnlC37Xj/yC9SdY2b1PmTW2eJmeqWPmTsUm/AmSaADQh0w
uQQroO9t0tm/AGoVps0Lel3OEJP40HD4wVxQdHNrBffM0qrYi0DFCih0xQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:53 2025 by rpki-client