Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e203239303134.roa
File: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (raw, json)
Hash identifier: fu5YPIcFLuW37Io8xo7nb5mt6DlCGs1UK7Hlj43JIf4=
Subject key identifier: 30:E4:2E:1B:16:95:E8:5F:7A:E7:BE:77:80:EE:F8:07:C8:10:94:41
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 5D535FB19B9E11DE03444A3118B05C4D0B8A6D72
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e203239303134.roa
Signing time: Tue 25 Feb 2025 05:16:22 +0000
ROA not before: Tue 25 Feb 2025 05:11:22 +0000
ROA not after: Tue 24 Feb 2026 05:16:22 +0000
asID: 29014
IP address blocks: 95.169.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:53:5f:b1:9b:9e:11:de:03:44:4a:31:18:b0:5c:4d:0b:8a:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Feb 25 05:11:22 2025 GMT
Not After : Feb 24 05:16:22 2026 GMT
Subject: CN=30E42E1B1695E85F7AE7BE7780EEF807C8109441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:d6:11:83:f6:c8:e5:60:99:be:4c:b0:59:
a3:9b:69:a1:ec:04:fd:2b:95:62:a6:05:e1:f4:9f:
f6:04:01:05:ff:6d:92:54:3c:96:77:a9:6d:a7:88:
1d:7f:16:50:d9:07:2c:81:97:cb:c4:45:79:7d:63:
34:2e:26:9c:08:1e:3c:86:df:44:b4:ec:50:9d:7a:
5b:60:ba:2d:a6:77:99:b3:a5:34:41:e3:ec:9a:6e:
f2:68:82:05:1a:de:ba:ac:6f:8d:0e:4d:e9:60:40:
ea:d6:8f:9d:ae:3a:ee:6a:c3:55:5f:17:1e:54:cd:
68:99:b5:d2:6b:89:b4:00:2d:cd:54:c2:70:d5:9e:
13:3b:26:04:2e:22:9d:b0:a8:60:d9:66:0e:91:b1:
64:5d:c1:33:95:6c:00:51:5f:44:57:df:4e:6e:eb:
b1:1c:2a:bd:e1:62:5f:da:7f:5e:04:e9:f0:d0:52:
7d:2e:ad:b1:a1:54:23:55:ff:d3:05:d0:12:8a:e3:
d0:74:de:cc:3f:04:fa:92:ae:58:cb:4b:39:dd:bf:
95:75:d8:a1:57:c2:a3:b6:76:d3:3b:f4:a4:3c:f8:
f1:02:a6:97:c7:3a:8d:88:08:d3:c1:c1:0c:bc:72:
e3:10:84:0e:3a:9b:a0:1f:37:44:95:03:04:e7:d3:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:2E:1B:16:95:E8:5F:7A:E7:BE:77:80:EE:F8:07:C8:10:94:41
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e203239303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ae:0c:e0:3e:02:3d:8e:36:c4:84:68:c4:74:a1:6c:9f:0c:
6c:e3:5f:b3:83:c9:04:f3:01:02:6f:12:e4:17:3f:7e:98:bc:
cf:b5:2b:a7:44:c1:fa:bd:ca:91:ed:95:47:62:fb:d0:03:76:
5b:14:75:29:7f:4e:bf:66:bd:6c:84:df:18:c1:eb:02:61:65:
de:61:75:32:2d:00:0d:b0:98:d8:51:20:0a:71:80:c1:4d:c1:
04:80:12:eb:49:62:f9:07:a9:f7:ac:57:11:52:06:9a:cc:71:
7e:a9:39:08:1f:79:5d:17:75:22:99:77:87:47:92:17:01:7e:
b7:8f:d5:56:8b:32:20:25:83:1b:64:cd:c9:16:41:80:cd:eb:
c1:cd:a1:9b:90:20:a1:67:62:20:87:99:92:1e:dc:48:83:f5:
d5:94:5d:cc:23:22:85:67:23:42:1b:51:51:24:46:26:de:22:
fc:03:ce:10:d2:24:f1:a4:a8:4e:a2:c8:cc:d5:d0:5c:23:c7:
db:98:ad:c9:b3:13:3a:4d:20:24:b6:07:4f:2f:fa:3e:e3:af:
6f:4f:d6:0a:24:63:9f:a7:dc:7c:06:d4:fc:08:dd:c9:dc:c3:
cf:00:d4:38:b2:3f:6f:69:b2:c8:ec:64:1d:1a:6e:59:8f:78:
a2:72:37:86
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXVNfsZueEd4DREoxGLBcTQuKbXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNTAyMjUwNTExMjJaFw0yNjAyMjQwNTE2MjJaMDMxMTAvBgNV
BAMTKDMwRTQyRTFCMTY5NUU4NUY3QUU3QkU3NzgwRUVGODA3QzgxMDk0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vdYRg/bI5WCZvkywWaObaaHs
BP0rlWKmBeH0n/YEAQX/bZJUPJZ3qW2niB1/FlDZByyBl8vERXl9YzQuJpwIHjyG
30S07FCdeltgui2md5mzpTRB4+yabvJoggUa3rqsb40OTelgQOrWj52uOu5qw1Vf
Fx5UzWiZtdJribQALc1UwnDVnhM7JgQuIp2wqGDZZg6RsWRdwTOVbABRX0RX305u
67EcKr3hYl/af14E6fDQUn0urbGhVCNV/9MF0BKK49B03sw/BPqSrljLSzndv5V1
2KFXwqO2dtM79KQ8+PECppfHOo2ICNPBwQy8cuMQhA46m6AfN0SVAwTn08ZbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMOQuGxaV6F965753gO74B8gQlEEwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzAzMTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X6msMA0GCSqGSIb3DQEBCwUAA4IBAQBwrgzgPgI9jjbEhGjEdKFsnwxs41+zg8kE
8wECbxLkFz9+mLzPtSunRMH6vcqR7ZVHYvvQA3ZbFHUpf06/Zr1shN8YwesCYWXe
YXUyLQANsJjYUSAKcYDBTcEEgBLrSWL5B6n3rFcRUgaazHF+qTkIH3ldF3UimXeH
R5IXAX63j9VWizIgJYMbZM3JFkGAzevBzaGbkCChZ2Igh5mSHtxIg/XVlF3MIyKF
ZyNCG1FRJEYm3iL8A84Q0iTxpKhOosjM1dBcI8fbmK3JsxM6TSAktgdPL/o+469v
T9YKJGOfp9x8BtT8CN3J3MPPANQ4sj9vabLI7GQdGm5Zj3iicjeG
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:54:50 2025 by rpki-client