Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
File: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (raw, json)
Hash identifier: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=
Subject key identifier: 33:0B:F1:89:20:61:E3:6A:38:08:DF:DB:AD:1C:75:31:25:E7:7F:22
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 0DBB7DF33DBFB261D720D2BA84597E7EFE9CE4F2
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
Signing time: Sat 08 Mar 2025 02:22:40 +0000
ROA not before: Sat 08 Mar 2025 02:17:40 +0000
ROA not after: Sat 07 Mar 2026 02:22:40 +0000
asID: 209372
IP address blocks: 91.209.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bb:7d:f3:3d:bf:b2:61:d7:20:d2:ba:84:59:7e:7e:fe:9c:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 8 02:17:40 2025 GMT
Not After : Mar 7 02:22:40 2026 GMT
Subject: CN=330BF1892061E36A3808DFDBAD1C753125E77F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:87:15:0b:53:90:7c:d1:f0:28:75:71:c0:
3a:e7:89:81:cb:bb:fa:7f:16:06:c6:25:3f:ae:8e:
eb:8d:98:76:c7:04:c3:1d:f5:1a:86:ea:a7:21:73:
9d:82:74:44:61:d9:a7:19:c8:e5:df:07:0c:9b:c9:
dc:2a:c6:b7:9e:b2:4a:81:4d:1d:48:81:9f:89:6f:
bd:a3:f8:15:bf:8e:05:0d:72:20:e9:ed:1b:9b:e0:
e4:70:82:20:b9:6a:eb:c4:d0:95:8e:c9:45:c0:6c:
82:36:07:29:5a:aa:58:94:38:c4:3f:d0:dc:f1:2b:
e1:f7:53:8c:58:1b:06:c9:38:df:70:a4:56:1c:4e:
ab:38:53:c2:c8:b3:e2:9b:7d:00:f3:e2:c3:50:d0:
97:7a:10:ce:5a:bc:e8:70:74:88:8b:a9:14:27:8c:
b9:dd:d8:98:1e:68:bd:49:18:cf:65:ec:c1:a7:ce:
40:86:3d:5c:96:5f:2a:4f:f8:bf:84:54:60:a6:d3:
63:5a:d4:3b:1f:b8:02:ea:85:b8:cb:26:1f:ce:9d:
04:27:8d:88:7d:dd:c5:73:f7:70:42:6a:b9:8d:76:
ff:46:71:d2:a1:3d:8d:cc:99:28:96:4e:32:1d:85:
45:78:a6:a1:3c:f6:e9:b6:ac:cd:9e:2f:5b:95:47:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:F1:89:20:61:E3:6A:38:08:DF:DB:AD:1C:75:31:25:E7:7F:22
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8a:2b:55:39:e2:fd:1b:dd:bc:9c:bc:94:d4:ee:73:57:1c:
49:18:9e:ad:6a:2f:9b:83:93:05:d3:2c:9e:8f:2c:0c:ac:b2:
e9:e1:84:4f:36:fc:03:82:c6:e6:91:93:ab:94:83:d8:da:a0:
6c:28:00:b8:53:18:6a:48:22:97:bd:fd:6a:ca:ce:c1:15:d6:
52:c4:00:ad:43:23:d1:23:43:00:23:01:55:d2:73:c5:57:1b:
ba:1b:0c:e6:df:e2:a3:a0:7d:9e:7d:58:f4:d2:af:a5:34:38:
ae:7c:e8:f8:8e:88:50:4d:e4:7f:91:cc:13:59:49:56:4e:db:
28:1c:85:5f:5c:5f:59:b4:a2:46:8a:97:25:74:ac:de:2d:3f:
a2:4d:77:2b:21:2c:01:fd:ff:73:df:86:73:a3:ac:6b:fd:ee:
51:be:28:f1:43:e3:3c:4a:11:b5:c0:5d:a8:5c:20:dc:1d:01:
cb:33:1e:7a:85:52:ab:12:58:8d:93:0a:9e:58:b2:67:20:48:
ab:34:e3:f9:63:1c:35:e2:c8:77:dd:3d:b8:cd:92:b3:5e:ac:
c3:fe:4b:7c:0b:18:63:aa:65:41:25:bd:13:f1:51:6a:10:70:
f5:b6:a8:76:be:b5:21:64:0e:ed:bd:37:00:44:46:f9:19:ad:
57:58:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:09 2025 by rpki-client