Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa
File: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (raw, json)
Hash identifier: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=
Subject key identifier: C5:85:B6:0E:6B:BF:D8:A7:6A:A9:A0:73:5C:84:00:A2:D0:37:D3:4C
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 505B3B8D2715B394E49D91E6AFE15636658A1797
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa
Signing time: Wed 22 Jan 2025 20:53:52 +0000
ROA not before: Wed 22 Jan 2025 20:48:52 +0000
ROA not after: Wed 21 Jan 2026 20:53:52 +0000
asID: 206216
IP address blocks: 146.19.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:3b:8d:27:15:b3:94:e4:9d:91:e6:af:e1:56:36:65:8a:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jan 22 20:48:52 2025 GMT
Not After : Jan 21 20:53:52 2026 GMT
Subject: CN=C585B60E6BBFD8A76AA9A0735C8400A2D037D34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:b9:eb:bd:55:e7:7b:98:e8:4d:7f:b1:5e:
e8:9c:9f:87:7f:3c:b3:b1:85:c7:27:0c:da:0e:59:
35:ea:86:9d:8e:c2:62:79:0f:94:e9:3c:49:d3:59:
bd:e4:60:09:b0:16:43:76:65:44:07:c6:4a:5a:5a:
29:6b:27:b8:47:c1:4d:19:2d:c0:29:02:a0:1c:53:
8f:24:11:5a:44:ce:60:d3:cf:a8:a8:bc:77:1c:c6:
11:61:70:e9:1c:b9:fb:3d:ac:28:f5:17:c6:f6:0d:
63:ff:4c:7f:21:54:e9:38:fc:c0:17:f2:e8:03:d6:
dd:aa:08:2d:14:90:17:21:f1:0a:d6:ee:30:59:ce:
f5:e5:b9:2e:67:9e:bf:4b:d8:07:80:4b:5a:b2:dc:
dd:f3:70:82:23:4d:6d:8f:ad:0c:7e:5b:32:6d:53:
3c:92:6d:d7:aa:35:7e:af:5f:d4:46:a0:80:d6:c8:
98:69:af:e7:76:13:a9:e8:e4:73:ae:a5:1d:5d:13:
f6:3d:32:05:bf:fd:c5:50:78:aa:82:6c:db:ea:a7:
52:0f:b2:6c:23:b9:b2:03:35:d5:1a:b2:ed:73:45:
27:f4:96:67:cc:96:76:d1:79:3d:99:cd:f0:0c:d8:
26:af:9d:6e:3b:2f:64:17:0f:6a:3e:67:b4:1f:cb:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:B6:0E:6B:BF:D8:A7:6A:A9:A0:73:5C:84:00:A2:D0:37:D3:4C
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:26:7a:6b:32:ce:13:c4:42:6c:47:51:c9:f5:ed:3c:76:31:
5a:ff:8e:2b:4f:57:10:53:f9:aa:b7:15:42:82:e7:9e:87:90:
26:04:aa:60:54:3b:c2:b0:24:fe:d7:08:4c:43:4b:bc:96:cd:
25:24:0e:ea:30:6c:13:9a:53:8f:d3:e3:0e:6f:63:64:90:de:
ba:57:b6:31:a0:ee:63:de:3a:4f:93:10:7f:79:23:a2:ca:49:
99:c8:f8:30:c7:be:5d:27:e9:42:42:79:64:c1:a9:42:d5:0e:
d4:9b:d6:69:83:2b:ed:a3:02:96:94:83:b4:67:20:10:a7:05:
01:50:c4:aa:33:55:3e:66:3f:81:e6:6b:7c:c2:b4:2b:e5:64:
b6:92:51:59:2a:7d:ad:e1:b2:f5:f9:54:c2:17:13:00:cc:15:
d6:58:05:61:77:f9:56:9f:b6:88:42:3c:47:60:64:5f:bc:f5:
d2:bc:92:2c:a2:6e:b4:a6:fc:7b:fe:5e:ff:7c:01:b6:dd:36:
7f:32:b1:b7:f5:67:cc:41:5e:01:90:a5:cb:ec:82:46:c2:9a:
8e:54:86:64:85:b3:10:5c:03:57:74:e5:d5:86:24:a3:00:60:
d0:88:7a:79:fa:7b:66:62:89:e3:00:1a:35:c5:37:c3:0f:38:
a9:21:15:21
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUFs7jScVs5TknZHmr+FWNmWKF5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTAxMjIyMDQ4NTJaFw0yNjAxMjEyMDUzNTJaMDMxMTAvBgNV
BAMTKEM1ODVCNjBFNkJCRkQ4QTc2QUE5QTA3MzVDODQwMEEyRDAzN0QzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfrnrvVXne5joTX+xXuicn4d/
PLOxhccnDNoOWTXqhp2OwmJ5D5TpPEnTWb3kYAmwFkN2ZUQHxkpaWilrJ7hHwU0Z
LcApAqAcU48kEVpEzmDTz6iovHccxhFhcOkcufs9rCj1F8b2DWP/TH8hVOk4/MAX
8ugD1t2qCC0UkBch8QrW7jBZzvXluS5nnr9L2AeAS1qy3N3zcIIjTW2PrQx+WzJt
UzySbdeqNX6vX9RGoIDWyJhpr+d2E6no5HOupR1dE/Y9MgW//cVQeKqCbNvqp1IP
smwjubIDNdUasu1zRSf0lmfMlnbReT2ZzfAM2CavnW47L2QXD2o+Z7Qfy4tRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUxYW2Dmu/2KdqqaBzXIQAotA300wwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzNDM2MmUzMTM5MmUzMjMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMjMxMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACSE9cwDQYJKoZIhvcNAQELBQADggEBALAmemsyzhPEQmxHUcn17Tx2MVr/jitP
VxBT+aq3FUKC556HkCYEqmBUO8KwJP7XCExDS7yWzSUkDuowbBOaU4/T4w5vY2SQ
3rpXtjGg7mPeOk+TEH95I6LKSZnI+DDHvl0n6UJCeWTBqULVDtSb1mmDK+2jApaU
g7RnIBCnBQFQxKozVT5mP4Hma3zCtCvlZLaSUVkqfa3hsvX5VMIXEwDMFdZYBWF3
+VaftohCPEdgZF+89dK8kiyibrSm/Hv+Xv98AbbdNn8ysbf1Z8xBXgGQpcvsgkbC
mo5UhmSFsxBcA1d05dWGJKMAYNCIenn6e2ZiieMAGjXFN8MPOKkhFSE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:21 2025 by rpki-client