Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2035353131.roa
File: 39312e3230392e34382e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: pWHUy4sfDHhMYcXOwCmnLzzNUiYAcTbJlR4z9A6zTiI=
Subject key identifier: AA:B1:93:DB:C0:6B:21:37:35:CE:7B:58:8A:1C:CC:12:E3:B2:48:3B
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 22D9A1C63B94A852AE4E05AA9118F4FB6399A7C4
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2035353131.roa
Signing time: Fri 07 Mar 2025 09:36:59 +0000
ROA not before: Fri 07 Mar 2025 09:31:59 +0000
ROA not after: Fri 06 Mar 2026 09:36:59 +0000
asID: 5511
IP address blocks: 91.209.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d9:a1:c6:3b:94:a8:52:ae:4e:05:aa:91:18:f4:fb:63:99:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 7 09:31:59 2025 GMT
Not After : Mar 6 09:36:59 2026 GMT
Subject: CN=AAB193DBC06B213735CE7B588A1CCC12E3B2483B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:fb:6c:ba:e9:e6:29:bf:59:08:1b:35:f8:
ff:28:95:6d:ad:1a:10:51:cc:f8:4f:7e:34:a0:d6:
55:ad:f4:41:86:2c:b6:1a:15:fa:ff:66:39:b1:35:
0b:48:c9:f5:61:d3:c9:9e:98:59:b0:c2:65:ca:79:
e3:1b:06:6b:92:55:1d:53:8a:c2:23:6d:30:7f:e3:
0b:93:07:33:d6:bf:ac:00:34:f6:04:77:48:06:b8:
2b:c0:6b:fb:28:76:d8:d1:12:0c:c2:05:88:66:b2:
e8:59:3d:0b:4a:93:d5:21:35:f6:2b:ef:cb:d6:e9:
00:31:eb:aa:e7:e7:cc:1d:11:4d:83:0a:cf:e4:96:
bf:08:aa:53:c0:ac:25:76:b5:0e:f4:d8:9c:e3:61:
ca:c5:b7:a1:85:a8:8b:ff:c7:a1:be:09:23:00:ff:
9a:fc:7f:f0:be:db:eb:ca:13:67:3b:a4:6d:e6:5e:
35:9a:ad:c2:b5:a3:66:a1:27:36:8d:de:a3:9f:82:
53:60:db:f1:78:d8:6e:b2:af:ac:04:2c:8e:1d:a8:
4b:9d:b7:70:1d:75:7d:13:63:48:73:ef:01:2f:c6:
25:37:74:10:d6:35:1d:07:e1:7e:19:d2:35:f2:28:
33:63:a0:96:86:ef:d1:42:c8:d4:44:a7:79:f4:a4:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:93:DB:C0:6B:21:37:35:CE:7B:58:8A:1C:CC:12:E3:B2:48:3B
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7c:f8:a2:c3:2a:75:67:65:74:6a:c1:f3:9d:9b:c4:f5:ee:
01:2a:c7:79:de:ac:98:76:01:7a:05:e6:ad:b0:ee:69:3a:87:
03:b8:51:6c:e2:64:a4:d1:9d:81:72:8d:b7:62:06:a3:d2:e2:
a3:ee:8c:bb:d5:dc:c4:6a:85:06:f9:3b:d5:15:d2:34:60:5f:
e4:83:78:c9:88:ad:82:ea:d4:67:28:21:f2:37:e9:e3:fd:31:
7d:c3:04:8d:b6:64:95:10:12:97:4e:bb:ff:62:ea:4c:89:44:
9d:a7:86:9b:a4:ce:29:f5:de:9b:bc:e9:31:f3:26:65:2d:b8:
15:e9:fd:75:9f:df:eb:4c:02:03:6e:85:d2:ad:6d:0f:04:7e:
56:84:39:3d:95:c7:7a:36:7b:ad:a1:ce:13:34:37:d3:c7:4f:
dc:b4:c4:aa:79:43:ca:27:b1:45:90:d8:4c:49:32:3d:c3:63:
15:0b:02:f1:fb:30:3d:8c:28:78:1d:3c:39:4f:42:50:c0:a8:
fd:37:84:99:59:03:3f:eb:de:18:46:ea:64:58:34:00:5d:d3:
f8:d0:58:76:08:35:2d:98:7d:6f:93:40:cb:9f:de:d8:5c:32:
74:8a:1e:75:d0:3e:ae:41:78:76:3a:c8:bf:d5:18:f2:3f:ae:
fd:0b:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:09 2025 by rpki-client