Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
File: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: 3xqnEjRyTSra4EruGtCCDXREoEbIM2WrXuK5JAJ8sEo=
Subject key identifier: 05:2B:88:63:DC:CF:B9:6E:88:F3:DD:0E:F8:DB:95:32:8D:60:26:8B
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6693439919A414EEA8FFA4C663788E670693BC30
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
Signing time: Tue 04 Mar 2025 14:51:01 +0000
ROA not before: Tue 04 Mar 2025 14:46:01 +0000
ROA not after: Tue 03 Mar 2026 14:51:01 +0000
asID: 5065
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:93:43:99:19:a4:14:ee:a8:ff:a4:c6:63:78:8e:67:06:93:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Mar 4 14:46:01 2025 GMT
Not After : Mar 3 14:51:01 2026 GMT
Subject: CN=052B8863DCCFB96E88F3DD0EF8DB95328D60268B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:6d:d2:f6:29:ee:02:bf:5a:dc:fc:1b:6a:
08:cf:7d:a5:f9:c6:82:ce:c4:55:1c:b5:2f:a3:49:
86:a8:91:12:05:5d:02:0b:18:69:bc:95:59:1c:87:
03:e2:bc:9f:da:90:35:19:c7:9a:81:5b:b7:97:1e:
15:26:da:ac:5d:60:55:ca:bf:49:b5:6a:fc:9c:aa:
b8:53:8a:32:57:91:32:20:13:7f:7b:cd:42:a0:01:
36:8d:bc:3a:11:69:32:fd:2e:82:09:96:39:a3:9c:
8a:c1:87:d5:3f:d0:5a:1f:27:14:e9:04:86:ea:2b:
8e:df:90:72:9e:9b:c9:cb:0b:de:40:d3:b0:72:c4:
0d:af:65:5f:db:3d:87:8b:49:2d:e9:bc:76:11:ac:
36:9f:4e:16:7c:ea:2e:80:a6:82:fc:69:e9:a1:86:
47:96:50:7f:ab:06:3c:4b:00:a6:59:57:3a:4d:67:
14:ec:0d:a5:34:ba:e1:08:57:1e:64:11:67:1a:4f:
60:55:53:bf:94:3c:75:67:88:9f:54:b2:2d:77:df:
a5:eb:f5:be:be:39:72:fd:48:04:82:8f:84:37:bc:
34:aa:fc:28:81:9b:a4:99:6b:00:36:58:0f:62:fd:
36:59:aa:32:07:eb:bd:d5:77:e1:4a:94:c3:be:f6:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:88:63:DC:CF:B9:6E:88:F3:DD:0E:F8:DB:95:32:8D:60:26:8B
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
45:85:74:47:fa:48:5f:6f:eb:05:50:26:14:dd:d6:5b:06:ac:
14:a5:e0:d5:8f:f0:7b:76:48:8c:fe:6c:04:b8:c5:de:e4:84:
f8:a5:a4:d1:54:d5:35:49:9b:13:cb:7e:ac:ec:04:1c:64:b1:
23:62:3c:fa:1f:6b:1c:01:76:6f:cc:40:41:b6:1f:3d:21:86:
ee:c8:79:e9:31:6e:15:d7:52:94:28:48:22:35:bd:82:af:a0:
c3:b9:52:d0:4b:6f:f1:f7:3a:f5:df:b6:e6:13:fe:be:51:1a:
72:28:61:1c:51:1a:2f:bc:3a:7c:17:ec:0c:80:52:57:13:b3:
b0:88:33:fb:32:84:6f:a3:06:52:ee:28:d6:20:37:ca:d2:c6:
40:31:d5:dd:f0:5a:28:98:6c:27:41:ef:4a:9c:5f:f2:02:b1:
87:41:4e:5b:58:89:22:79:7e:72:4c:39:83:fc:8f:ec:e3:24:
4e:de:6c:73:7b:ff:87:39:f4:e9:e1:11:a3:fc:e3:0a:e2:d0:
73:10:52:78:6e:da:5e:ab:0e:ec:64:52:ae:91:b8:4f:26:2e:
92:b5:13:97:5e:03:0c:91:6a:13:07:76:2f:18:55:cf:e4:a8:
1a:d4:9e:3d:81:13:af:69:1b:d6:24:86:7d:da:0f:48:6f:02:
4b:4d:f1:72
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZpNDmRmkFO6o/6TGY3iOZwaTvDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNTAzMDQxNDQ2MDFaFw0yNjAzMDMxNDUxMDFaMDMxMTAvBgNV
BAMTKDA1MkI4ODYzRENDRkI5NkU4OEYzREQwRUY4REI5NTMyOEQ2MDI2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2W3S9inuAr9a3PwbagjPfaX5
xoLOxFUctS+jSYaokRIFXQILGGm8lVkchwPivJ/akDUZx5qBW7eXHhUm2qxdYFXK
v0m1avycqrhTijJXkTIgE397zUKgATaNvDoRaTL9LoIJljmjnIrBh9U/0FofJxTp
BIbqK47fkHKem8nLC95A07ByxA2vZV/bPYeLSS3pvHYRrDafThZ86i6ApoL8aemh
hkeWUH+rBjxLAKZZVzpNZxTsDaU0uuEIVx5kEWcaT2BVU7+UPHVniJ9Usi1336Xr
9b6+OXL9SASCj4Q3vDSq/CiBm6SZawA2WA9i/TZZqjIH673Vd+FKlMO+9l3pAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUBSuIY9zPuW6I890O+NuVMo1gJoswHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM2
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF+p
ozANBgkqhkiG9w0BAQsFAAOCAQEARYV0R/pIX2/rBVAmFN3WWwasFKXg1Y/we3ZI
jP5sBLjF3uSE+KWk0VTVNUmbE8t+rOwEHGSxI2I8+h9rHAF2b8xAQbYfPSGG7sh5
6TFuFddSlChIIjW9gq+gw7lS0Etv8fc69d+25hP+vlEacihhHFEaL7w6fBfsDIBS
VxOzsIgz+zKEb6MGUu4o1iA3ytLGQDHV3fBaKJhsJ0HvSpxf8gKxh0FOW1iJInl+
ckw5g/yP7OMkTt5sc3v/hzn06eERo/zjCuLQcxBSeG7aXqsO7GRSrpG4TyYukrUT
l14DDJFqEwd2LxhVz+SoGtSePYETr2kb1iSGfdoPSG8CS03xcg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:03 2025 by rpki-client