Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: ryFzXqOZ/8yFLllURTNDpf5IViFCVPMYrv9vsU/KR5A=
Subject key identifier: 96:36:72:4C:F2:CD:12:C0:CF:4C:7D:17:58:F5:B3:55:19:9F:06:BA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 29B4B55BB30EA8EAFF0DB4084C769D3AA75A2328
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211440.roa
Signing time: Thu 27 Mar 2025 14:01:09 +0000
ROA not before: Thu 27 Mar 2025 13:56:09 +0000
ROA not after: Thu 26 Mar 2026 14:01:09 +0000
asID: 211440
IP address blocks: 95.135.171.0/24 maxlen: 24
95.135.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b4:b5:5b:b3:0e:a8:ea:ff:0d:b4:08:4c:76:9d:3a:a7:5a:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 27 13:56:09 2025 GMT
Not After : Mar 26 14:01:09 2026 GMT
Subject: CN=9636724CF2CD12C0CF4C7D1758F5B355199F06BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:75:ac:39:56:06:a9:ac:98:e7:b6:59:fb:
91:4e:bd:f3:2f:a2:ea:a5:cb:17:4f:e7:73:26:55:
b6:9a:1d:95:c4:b8:22:63:34:3b:cc:58:00:f7:ea:
db:53:36:61:23:97:3f:34:cf:74:69:f1:3d:99:3e:
b3:25:58:6c:12:b4:37:c1:4d:e8:3d:bd:e2:37:e4:
e9:13:b5:dc:be:6c:93:c2:32:05:16:10:c1:b6:bf:
3e:0c:39:47:1b:24:b5:a5:79:80:df:a5:97:97:fd:
64:14:a8:b5:71:bb:24:d5:e2:11:aa:f8:a4:21:2b:
54:ed:80:b3:c1:e0:f4:30:81:45:aa:c3:ce:a1:f2:
b5:6b:c6:df:34:dd:f3:f6:de:81:b9:76:b6:e0:cb:
a3:f2:7f:b0:6c:c4:1b:20:11:5d:3f:2a:5f:5c:d3:
84:6c:63:9b:23:62:76:3f:46:39:34:05:ad:57:16:
45:ab:62:32:16:47:f6:f7:c4:f1:ed:09:30:08:54:
8e:71:c0:c3:f6:3b:dd:dd:66:7e:39:1c:43:c8:6c:
91:b3:2b:14:39:30:53:64:e0:d0:0a:fd:6e:b9:7b:
b5:37:7b:4a:2a:aa:f6:d4:08:33:93:aa:34:e6:c9:
a9:e3:fc:27:0b:f2:8d:cd:d5:14:c6:cd:94:91:57:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:72:4C:F2:CD:12:C0:CF:4C:7D:17:58:F5:B3:55:19:9F:06:BA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.171.0/24
95.135.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2b:31:15:a0:f0:dc:cf:7e:c7:b4:f5:de:69:b2:7d:71:86:
fd:38:6a:51:cf:d5:c7:cf:a4:b4:e2:6c:c7:23:b1:86:26:8a:
61:73:16:3a:88:dc:5b:b9:79:0f:53:e9:a3:92:b9:48:ad:b9:
ee:53:72:d6:ce:16:a1:55:9b:5d:3a:bc:ee:4a:ff:78:ac:ac:
6b:96:1c:30:86:9b:c7:76:e0:aa:31:8b:0f:69:6c:49:53:1f:
93:f5:ff:7b:32:bc:42:04:dc:f0:73:85:10:fd:80:a8:c3:8c:
3e:fc:b4:18:f4:1b:0f:2b:f9:2e:39:14:53:4c:8b:1d:ac:62:
6e:64:fa:43:68:11:2a:c1:49:67:2b:75:3a:ae:c6:46:95:5d:
96:d1:89:e0:c1:15:77:99:0d:56:90:f0:2e:e6:04:23:1b:6f:
9e:03:04:ab:36:9c:8c:72:16:fe:0b:bf:74:81:e0:cb:4a:07:
e4:2d:d8:ec:14:7b:2f:bd:e6:b3:9a:08:5d:69:9d:58:87:68:
7a:d8:08:ef:8f:07:9c:03:4c:ec:94:0a:2a:36:11:0d:74:a2:
72:7d:63:b0:d1:86:01:83:86:9d:7a:11:8e:f7:a7:66:cb:72:
29:b7:cc:b2:0d:a5:17:33:48:b6:03:b7:7a:17:14:90:3e:8e:
45:08:de:dc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUKbS1W7MOqOr/DbQITHadOqdaIygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMjcxMzU2MDlaFw0yNjAzMjYxNDAxMDlaMDMxMTAvBgNV
BAMTKDk2MzY3MjRDRjJDRDEyQzBDRjRDN0QxNzU4RjVCMzU1MTk5RjA2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu33WsOVYGqayY57ZZ+5FOvfMv
ouqlyxdP53MmVbaaHZXEuCJjNDvMWAD36ttTNmEjlz80z3Rp8T2ZPrMlWGwStDfB
Teg9veI35OkTtdy+bJPCMgUWEMG2vz4MOUcbJLWleYDfpZeX/WQUqLVxuyTV4hGq
+KQhK1TtgLPB4PQwgUWqw86h8rVrxt803fP23oG5drbgy6Pyf7BsxBsgEV0/Kl9c
04RsY5sjYnY/Rjk0Ba1XFkWrYjIWR/b3xPHtCTAIVI5xwMP2O93dZn45HEPIbJGz
KxQ5MFNk4NAK/W65e7U3e0oqqvbUCDOTqjTmyanj/CcL8o3N1RTGzZSRV5KLAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUljZyTPLNEsDPTH0XWPWzVRmfBrowHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjExNDQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4er
AwQAX4e+MA0GCSqGSIb3DQEBCwUAA4IBAQA8KzEVoPDcz37HtPXeabJ9cYb9OGpR
z9XHz6S04mzHI7GGJophcxY6iNxbuXkPU+mjkrlIrbnuU3LWzhahVZtdOrzuSv94
rKxrlhwwhpvHduCqMYsPaWxJUx+T9f97MrxCBNzwc4UQ/YCow4w+/LQY9BsPK/ku
ORRTTIsdrGJuZPpDaBEqwUlnK3U6rsZGlV2W0YngwRV3mQ1WkPAu5gQjG2+eAwSr
NpyMchb+C790geDLSgfkLdjsFHsvveazmghdaZ1Yh2h62AjvjwecA0zslAoqNhEN
dKJyfWOw0YYBg4adehGO96dmy3Ipt8yyDaUXM0i2A7d6FxSQPo5FCN7c
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:56 2025 by rpki-client