Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323135323837.roa
File: 3139332e33372e3233392e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: vpshw/kh041jsP5N/q4vGbEoL17ot4Qf4xTKjnFsmG8=
Subject key identifier: D5:32:B6:29:4A:D6:95:6B:DE:BF:FE:F8:40:0D:F9:5E:7A:4F:DE:0C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 31859AC491BDE7FE5E744C76D9AA31B4C2267C64
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 02 Mar 2025 19:00:45 +0000
ROA not before: Sun 02 Mar 2025 18:55:45 +0000
ROA not after: Sun 01 Mar 2026 19:00:45 +0000
asID: 215287
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:85:9a:c4:91:bd:e7:fe:5e:74:4c:76:d9:aa:31:b4:c2:26:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 2 18:55:45 2025 GMT
Not After : Mar 1 19:00:45 2026 GMT
Subject: CN=D532B6294AD6956BDEBFFEF8400DF95E7A4FDE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:ed:6e:02:2c:83:0b:40:1b:80:6b:92:51:
68:e4:49:e6:5d:81:71:f6:95:30:9c:a2:05:8a:15:
76:d7:58:67:c4:d6:b2:bb:fe:23:72:8a:80:30:f7:
ec:0a:93:08:67:73:06:3f:72:39:07:64:ac:6c:bd:
79:87:ef:4c:4c:71:4e:1b:58:72:47:51:d7:46:0e:
c0:cf:4f:93:08:a6:0f:73:c8:25:6d:cf:26:a0:18:
b2:3c:da:67:7b:eb:68:df:e5:98:74:c5:30:c5:11:
eb:a2:c4:d2:96:8c:80:3d:5b:90:22:c1:f4:f5:82:
98:e5:6d:31:9f:dd:4e:7a:12:b7:90:a4:88:ae:77:
5e:2f:03:03:92:76:41:27:93:67:47:6c:cd:42:3f:
8e:8d:14:40:f7:3a:f5:3a:62:cd:e3:0a:bf:b7:45:
44:15:2a:1e:7d:9d:1e:3c:eb:90:78:34:f5:b6:f5:
14:4b:3d:b9:84:5f:be:71:d1:5f:5e:3c:ba:05:f1:
71:9d:ab:8d:0e:dc:4b:c7:50:2f:78:b0:30:eb:cd:
d7:e1:03:62:12:39:e8:2d:fd:48:e0:2d:02:1d:b8:
53:ec:29:24:36:60:06:45:0e:14:31:d7:b7:01:4b:
a4:f6:68:a7:1b:a2:ae:73:e2:08:a5:bc:61:d9:4b:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:B6:29:4A:D6:95:6B:DE:BF:FE:F8:40:0D:F9:5E:7A:4F:DE:0C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9c:d5:44:70:5a:35:40:23:f3:9a:12:8d:64:cd:18:8f:23:
11:af:72:f8:b7:9e:4b:84:c8:dd:9d:77:ee:c6:97:00:cc:c8:
0b:40:90:7f:08:dd:44:25:6e:6a:a0:0b:4e:84:76:fe:8a:7e:
96:d9:82:c5:e6:6a:9d:d1:98:cf:74:5a:19:b2:a2:49:26:99:
48:b7:98:88:f5:67:1b:d4:88:9a:57:07:9d:9d:6b:14:50:0a:
53:17:1f:4d:40:23:c7:a2:ee:57:f9:be:7d:81:f2:46:00:98:
6a:be:76:8e:36:23:77:52:d4:48:8e:8b:a7:a9:e0:a3:c8:d5:
54:35:4a:17:6b:e4:56:d1:10:47:68:a0:02:0d:9c:74:32:22:
f7:c3:49:ee:f9:db:be:a7:32:76:71:9c:3c:29:b3:7d:9b:65:
e8:58:7c:76:89:a2:27:e6:16:93:1a:8f:35:dd:02:20:05:c5:
11:d7:3c:19:ef:3d:04:7d:9b:11:6a:85:f5:43:33:ee:a2:6b:
b1:b1:ca:ee:0f:26:00:b2:c5:0a:82:cb:38:5a:cc:08:e6:f2:
67:fd:a6:38:90:d4:13:2d:4e:e7:07:40:62:8b:cf:81:26:cb:
df:6c:e4:c1:75:f8:1c:36:d8:01:9b:65:50:e1:95:6f:21:1d:
34:62:81:42
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMYWaxJG95/5edEx22aoxtMImfGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNTAzMDIxODU1NDVaFw0yNjAzMDExOTAwNDVaMDMxMTAvBgNV
BAMTKEQ1MzJCNjI5NEFENjk1NkJERUJGRkVGODQwMERGOTVFN0E0RkRFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAu1uAiyDC0AbgGuSUWjkSeZd
gXH2lTCcogWKFXbXWGfE1rK7/iNyioAw9+wKkwhncwY/cjkHZKxsvXmH70xMcU4b
WHJHUddGDsDPT5MIpg9zyCVtzyagGLI82md762jf5Zh0xTDFEeuixNKWjIA9W5Ai
wfT1gpjlbTGf3U56EreQpIiud14vAwOSdkEnk2dHbM1CP46NFED3OvU6Ys3jCr+3
RUQVKh59nR4865B4NPW29RRLPbmEX75x0V9ePLoF8XGdq40O3EvHUC94sDDrzdfh
A2ISOegt/UjgLQIduFPsKSQ2YAZFDhQx17cBS6T2aKcboq5z4gilvGHZS1Q/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU1TK2KUrWlWvev/74QA35XnpP3gwwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzOTMzMmUzMzM3MmUzMjMz
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMjM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBJe8wDQYJKoZIhvcNAQELBQADggEBACWc1URwWjVAI/OaEo1kzRiPIxGvcvi3
nkuEyN2dd+7GlwDMyAtAkH8I3UQlbmqgC06Edv6KfpbZgsXmap3RmM90Whmyokkm
mUi3mIj1ZxvUiJpXB52daxRQClMXH01AI8ei7lf5vn2B8kYAmGq+do42I3dS1EiO
i6ep4KPI1VQ1Shdr5FbREEdooAINnHQyIvfDSe75276nMnZxnDwps32bZehYfHaJ
oifmFpMajzXdAiAFxRHXPBnvPQR9mxFqhfVDM+6ia7Gxyu4PJgCyxQqCyzhazAjm
8mf9pjiQ1BMtTucHQGKLz4Emy99s5MF1+Bw22AGbZVDhlW8hHTRigUI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:26 2025 by rpki-client