Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e20313337383937.roa
File: 39312e3230392e34302e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: eXBnQ+s+mB7Cc4NOSlBtRRCSpKfKjJW6/ZyNzVf/Dqo=
Subject key identifier: C1:6D:3F:99:9F:0C:0F:2A:E5:DA:95:36:1F:DE:80:F7:CD:B3:9F:0E
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 38E99BDF230C828928248312DCF69196B97ED571
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e20313337383937.roa
Signing time: Fri 07 Mar 2025 09:39:33 +0000
ROA not before: Fri 07 Mar 2025 09:34:33 +0000
ROA not after: Fri 06 Mar 2026 09:39:33 +0000
asID: 137897
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e9:9b:df:23:0c:82:89:28:24:83:12:dc:f6:91:96:b9:7e:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 7 09:34:33 2025 GMT
Not After : Mar 6 09:39:33 2026 GMT
Subject: CN=C16D3F999F0C0F2AE5DA95361FDE80F7CDB39F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:ce:58:26:38:4d:4c:85:08:a2:51:2f:1b:
b9:aa:ad:59:5f:26:80:28:51:0c:34:0c:b6:de:2b:
db:38:c4:6a:f9:ac:54:73:e2:07:31:2a:45:ac:ff:
e6:a3:57:e4:f2:8a:9c:fe:3e:f8:fe:bd:7a:28:45:
1e:e1:14:bd:84:91:34:fb:6f:eb:9b:2d:67:ad:54:
9b:63:5a:a1:3b:d8:ac:5a:5b:63:04:05:66:22:64:
f9:0d:83:20:e8:c3:d6:8a:f7:17:a5:63:82:e7:7d:
5e:62:47:67:c8:e1:4f:8f:ca:0c:e9:b9:f5:6c:8c:
ac:15:4e:66:f8:c1:bd:91:21:9f:d0:45:4f:68:6c:
5f:45:2b:55:ea:14:aa:1d:ac:38:0e:0c:38:fb:38:
c8:49:1e:0f:a0:4b:6f:86:22:ec:7d:e2:02:ac:fb:
d1:1e:fe:85:49:6e:c6:1f:9b:d7:49:9a:aa:7c:37:
6d:35:56:76:31:b8:a1:53:b4:e5:15:67:f3:3f:94:
d0:b5:65:f9:aa:58:be:0b:eb:56:b7:eb:f8:56:aa:
81:e4:59:b2:7f:a1:dd:6e:18:43:d9:69:9d:5d:a5:
16:f6:b3:e7:b3:aa:27:da:eb:db:dc:4d:1e:1e:a5:
dc:e2:35:0e:34:23:31:0a:01:70:64:4e:93:b7:d3:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:3F:99:9F:0C:0F:2A:E5:DA:95:36:1F:DE:80:F7:CD:B3:9F:0E
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:30:73:38:d7:1e:29:ab:b2:47:1b:d5:77:1e:73:76:bf:9a:
1d:90:30:93:c2:f2:cb:62:32:78:44:53:1b:a3:e4:62:84:a2:
e5:ea:3b:0c:68:3e:ec:dd:85:c7:fb:a5:09:e8:25:cb:53:c7:
7f:7d:ae:de:7b:0b:a7:6d:1d:99:d6:3f:69:01:fa:d9:a7:b9:
c8:c7:cd:aa:b5:f1:14:0b:28:f6:61:0c:78:d7:3c:e8:0b:d9:
98:b5:82:dc:97:bd:2b:f0:4f:0f:63:69:11:85:d5:48:98:2d:
45:9f:bf:9a:e6:f6:52:06:3f:56:01:07:48:e3:9d:35:f4:8e:
ba:70:bc:36:4c:73:a3:3d:ef:92:7d:40:8b:03:09:e8:6d:dc:
2c:30:54:c7:50:b3:ab:4c:e6:b2:a3:33:3d:e1:44:56:0b:c6:
fa:3b:bd:46:aa:76:c6:c2:c0:9a:28:f7:71:0a:67:83:1b:68:
a0:40:42:e7:6b:a5:25:d6:29:1d:48:ad:67:0d:b9:3e:77:e2:
df:01:2c:49:bf:91:bc:aa:df:cd:e4:64:d1:e0:35:c1:b4:54:
07:d2:b3:ff:e1:9e:e8:bf:c5:1b:26:75:d0:de:84:b7:44:93:
cd:1e:c7:5b:25:f3:e9:9a:aa:d7:dd:a1:b5:e2:cb:5a:c1:8b:
78:a8:14:66
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOOmb3yMMgokoJIMS3PaRlrl+1XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNTAzMDcwOTM0MzNaFw0yNjAzMDYwOTM5MzNaMDMxMTAvBgNV
BAMTKEMxNkQzRjk5OUYwQzBGMkFFNURBOTUzNjFGREU4MEY3Q0RCMzlGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NM5YJjhNTIUIolEvG7mqrVlf
JoAoUQw0DLbeK9s4xGr5rFRz4gcxKkWs/+ajV+Tyipz+Pvj+vXooRR7hFL2EkTT7
b+ubLWetVJtjWqE72KxaW2MEBWYiZPkNgyDow9aK9xelY4LnfV5iR2fI4U+Pygzp
ufVsjKwVTmb4wb2RIZ/QRU9obF9FK1XqFKodrDgODDj7OMhJHg+gS2+GIux94gKs
+9Ee/oVJbsYfm9dJmqp8N201VnYxuKFTtOUVZ/M/lNC1ZfmqWL4L61a36/hWqoHk
WbJ/od1uGEPZaZ1dpRb2s+ezqifa69vcTR4epdziNQ40IzEKAXBkTpO308/tAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUwW0/mZ8MDyrl2pU2H96A982znw4wHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzkzMTJlMzIzMDM5MmUzNDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzgzOTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W9EoMA0GCSqGSIb3DQEBCwUAA4IBAQAKMHM41x4pq7JHG9V3HnN2v5odkDCTwvLL
YjJ4RFMbo+RihKLl6jsMaD7s3YXH+6UJ6CXLU8d/fa7eewunbR2Z1j9pAfrZp7nI
x82qtfEUCyj2YQx41zzoC9mYtYLcl70r8E8PY2kRhdVImC1Fn7+a5vZSBj9WAQdI
45019I66cLw2THOjPe+SfUCLAwnobdwsMFTHULOrTOayozM94URWC8b6O71GqnbG
wsCaKPdxCmeDG2igQELna6Ul1ikdSK1nDbk+d+LfASxJv5G8qt/N5GTR4DXBtFQH
0rP/4Z7ov8UbJnXQ3oS3RJPNHsdbJfPpmqrX3aG14stawYt4qBRm
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:01:38 2025 by rpki-client