Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20383334.roa
File: 39312e3230392e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: My0Iswoqh7a+8mieGVNZumPtlSd7uYXw0IOapqM6Llo=
Subject key identifier: 13:18:D8:C6:A2:92:13:88:B5:B2:37:DD:E2:44:F9:55:46:5F:B6:62
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 67A7CF5C1E1282BCA3FFF30CA2C0E4D0A310A9D3
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 07 Mar 2025 09:36:58 +0000
ROA not before: Fri 07 Mar 2025 09:31:58 +0000
ROA not after: Fri 06 Mar 2026 09:36:58 +0000
asID: 834
IP address blocks: 91.209.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a7:cf:5c:1e:12:82:bc:a3:ff:f3:0c:a2:c0:e4:d0:a3:10:a9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 7 09:31:58 2025 GMT
Not After : Mar 6 09:36:58 2026 GMT
Subject: CN=1318D8C6A2921388B5B237DDE244F955465FB662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:ee:4d:99:07:18:b9:02:5f:b9:cf:d3:84:
3b:4e:14:68:6e:de:c3:6a:6a:8a:fe:f9:a2:95:c6:
ca:0d:af:5c:6e:d6:6d:32:76:8a:d2:23:84:d9:c7:
81:65:b5:84:4f:91:15:fd:7b:c0:0f:4a:79:94:00:
c2:9c:93:bd:9c:4c:e7:ca:96:fc:7a:ab:9c:fd:b1:
0f:25:a3:64:a1:b9:25:df:f7:01:a7:46:1e:79:05:
60:73:5d:ae:89:87:34:98:c3:3a:c7:07:2c:d7:15:
4e:91:6b:77:0b:07:9d:c4:70:2b:a3:b0:d8:c4:81:
5d:29:20:ba:6d:94:54:01:6d:8b:16:b6:22:fe:60:
7f:26:82:03:bc:0d:fb:9a:08:5e:fc:f7:2c:e1:76:
0f:ac:3a:5d:35:c3:a8:77:ba:c7:0e:fd:24:bb:8a:
41:39:7c:32:e4:7e:ec:85:c3:29:94:20:c0:33:f1:
7f:df:40:17:bd:77:0b:4f:74:4f:f7:ee:f5:3a:4e:
f5:ea:81:09:98:cd:57:5b:b4:b5:f2:ae:a7:94:76:
eb:b5:1c:9c:ad:5d:a0:c8:a7:fc:c1:e8:e0:0c:31:
79:0d:bc:f7:e9:1d:b1:b7:13:f6:c7:39:ab:f4:04:
7f:21:e6:4b:d7:ac:df:06:75:65:72:85:57:5b:79:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:D8:C6:A2:92:13:88:B5:B2:37:DD:E2:44:F9:55:46:5F:B6:62
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
80:66:e7:85:93:b7:cb:ab:c4:c6:e7:0b:22:87:d0:60:15:f5:
9d:43:90:f4:07:a4:c7:dc:1d:89:12:8a:5f:90:99:ff:2a:29:
12:82:1b:1c:73:85:f4:31:03:c7:04:ee:ad:d6:0b:e5:96:a9:
3e:dd:07:2b:7c:cf:55:9a:2f:48:72:ab:d3:e8:35:eb:f7:db:
bd:a4:b7:a4:57:d5:55:a8:09:34:e7:dc:05:5f:26:a5:8e:05:
79:f3:fd:bb:26:50:3a:b7:e6:72:2b:7e:19:0f:07:11:a6:76:
ec:28:d6:d6:74:9f:fc:79:69:8c:ed:17:e9:70:87:8c:2d:17:
c2:96:1a:8f:7e:60:39:7b:9c:14:de:9b:23:38:e8:98:89:46:
d0:38:2c:4e:fd:4a:5e:12:d9:ed:97:96:46:91:06:35:c1:be:
79:6a:78:a9:bd:a5:d3:a7:06:28:14:43:3c:e2:26:73:41:50:
c2:df:d3:98:90:c7:6d:7d:91:06:cc:77:e6:94:80:c5:fd:95:
55:52:96:a5:af:fa:d8:c2:a0:3d:8c:8b:f4:ab:17:4e:03:b8:
03:93:36:86:23:fb:29:14:30:f8:d3:e6:a6:8f:9e:4a:dd:c4:
3f:75:17:20:d4:41:0f:6c:fd:f7:2c:f3:ea:10:9f:e0:86:5b:
98:7a:8a:22
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUZ6fPXB4Sgryj//MMosDk0KMQqdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNTAzMDcwOTMxNThaFw0yNjAzMDYwOTM2NThaMDMxMTAvBgNV
BAMTKDEzMThEOEM2QTI5MjEzODhCNUIyMzdEREUyNDRGOTU1NDY1RkI2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDI+5NmQcYuQJfuc/ThDtOFGhu
3sNqaor++aKVxsoNr1xu1m0ydorSI4TZx4FltYRPkRX9e8APSnmUAMKck72cTOfK
lvx6q5z9sQ8lo2ShuSXf9wGnRh55BWBzXa6JhzSYwzrHByzXFU6Ra3cLB53EcCuj
sNjEgV0pILptlFQBbYsWtiL+YH8mggO8DfuaCF789yzhdg+sOl01w6h3uscO/SS7
ikE5fDLkfuyFwymUIMAz8X/fQBe9dwtPdE/37vU6TvXqgQmYzVdbtLXyrqeUduu1
HJytXaDIp/zB6OAMMXkNvPfpHbG3E/bHOav0BH8h5kvXrN8GdWVyhVdbeclxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUExjYxqKSE4i1sjfd4kT5VUZftmIwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt
ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzkzMTJlMzIzMDM5MmUzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EyMA0G
CSqGSIb3DQEBCwUAA4IBAQCAZueFk7fLq8TG5wsih9BgFfWdQ5D0B6TH3B2JEopf
kJn/KikSghscc4X0MQPHBO6t1gvllqk+3QcrfM9Vmi9IcqvT6DXr99u9pLekV9VV
qAk059wFXyaljgV58/27JlA6t+ZyK34ZDwcRpnbsKNbWdJ/8eWmM7RfpcIeMLRfC
lhqPfmA5e5wU3psjOOiYiUbQOCxO/UpeEtntl5ZGkQY1wb55anipvaXTpwYoFEM8
4iZzQVDC39OYkMdtfZEGzHfmlIDF/ZVVUpalr/rYwqA9jIv0qxdOA7gDkzaGI/sp
FDD40+amj55K3cQ/dRcg1EEPbP33LPPqEJ/ghluYeooi
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:55:26 2025 by rpki-client