Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e203230343733.roa
File: 39352e3136392e3137352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: N2ZEutS6cc2+Ptr25ClS8a5ExKF1jenZ+zdfa+PgVEQ=
Subject key identifier: 9B:60:BE:E9:E3:E3:92:B2:C6:1A:0E:BF:32:F5:99:3A:CA:0D:0A:33
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 591DFA44552CCE2904FF35CE1AA60488A59AC88D
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e203230343733.roa
Signing time: Wed 27 Nov 2024 17:41:52 +0000
ROA not before: Wed 27 Nov 2024 17:36:52 +0000
ROA not after: Wed 26 Nov 2025 17:41:52 +0000
asID: 20473
IP address blocks: 95.169.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1d:fa:44:55:2c:ce:29:04:ff:35:ce:1a:a6:04:88:a5:9a:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Nov 27 17:36:52 2024 GMT
Not After : Nov 26 17:41:52 2025 GMT
Subject: CN=9B60BEE9E3E392B2C61A0EBF32F5993ACA0D0A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:2f:3f:71:d6:a1:17:db:8b:b1:0c:68:0b:
e7:8c:05:79:6e:30:3e:42:7d:01:2f:ad:85:ce:68:
89:0d:ab:b0:63:ae:00:73:19:76:6f:23:ba:b9:2f:
d4:e7:99:65:41:91:97:dc:8e:37:f2:e4:6c:e6:38:
28:d3:e4:b8:2f:42:d2:37:96:dd:0f:9e:f4:be:65:
eb:aa:fe:99:67:b6:43:6d:13:36:11:c7:46:c7:59:
f9:bc:b5:cc:8c:fb:f8:2a:28:92:6b:be:f5:8a:99:
76:45:51:fb:73:20:b3:74:60:b5:17:1b:fa:ed:82:
64:a3:e2:22:b2:41:38:c7:0a:56:7a:f3:03:a5:9e:
10:8e:a8:72:f3:a9:e9:27:dc:c3:5a:5c:1e:1d:a8:
e4:4c:cb:0e:1a:9d:f4:b6:0f:71:15:7a:49:2c:c3:
b5:e0:09:36:9e:a8:ad:72:3d:e5:7f:b5:0c:b4:e7:
c1:5e:dd:37:42:f4:05:1c:e6:56:cd:4f:02:1a:45:
b5:52:53:fe:46:c9:79:73:54:11:c5:90:27:b6:b2:
e6:fe:a4:dc:de:0e:a3:f2:1e:c4:2f:d4:e1:f3:60:
e9:bf:14:e9:8f:30:a3:8b:9b:49:ce:9d:1d:fa:53:
f6:a1:ca:ee:82:8e:e8:c8:67:f2:87:d1:98:9c:96:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:BE:E9:E3:E3:92:B2:C6:1A:0E:BF:32:F5:99:3A:CA:0D:0A:33
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2c:9a:f2:f1:32:d8:1c:02:b6:a7:7b:c1:69:7c:95:50:a7:
e2:8f:48:40:c6:21:10:38:4a:c6:df:04:5c:af:ea:35:af:f9:
d1:41:3c:73:47:d4:4c:dd:d9:50:d8:48:5c:c0:94:82:fd:34:
3c:70:06:44:cf:cd:2d:65:47:1b:94:74:30:d4:8c:d9:3a:76:
07:79:43:e9:10:45:ac:a0:ae:81:7c:b9:8c:66:60:43:27:95:
17:7c:61:78:8c:b1:80:3b:ea:3c:b9:56:93:dc:8b:ad:50:35:
48:4f:aa:4a:e5:9d:ff:a1:8f:90:28:20:b2:5d:ab:aa:6b:15:
64:a6:b9:02:33:e5:f1:bf:d8:b3:e7:d3:d9:2d:0f:4b:5f:a6:
c4:78:09:dd:8e:44:fc:8a:0c:50:dd:4b:ca:0d:c9:93:db:63:
c4:55:d8:6c:97:08:9e:48:4a:8d:12:e6:5d:89:7d:83:a9:7c:
49:c3:aa:44:72:e4:c7:76:47:46:61:28:6e:fb:b9:22:4c:52:
03:f6:1c:d9:83:e4:ee:9e:9f:ca:49:f2:3e:22:c6:6f:2b:97:
c9:78:bc:4c:7e:d7:d0:6c:8d:d9:c3:36:05:14:ba:fd:9f:18:
cc:be:9b:f3:9f:0d:11:44:02:6b:f1:0d:d9:8f:1e:d9:00:5d:
ec:9c:61:c0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWR36RFUszikE/zXOGqYEiKWayI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDExMjcxNzM2NTJaFw0yNTExMjYxNzQxNTJaMDMxMTAvBgNV
BAMTKDlCNjBCRUU5RTNFMzkyQjJDNjFBMEVCRjMyRjU5OTNBQ0EwRDBBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmS8/cdahF9uLsQxoC+eMBXlu
MD5CfQEvrYXOaIkNq7BjrgBzGXZvI7q5L9TnmWVBkZfcjjfy5GzmOCjT5LgvQtI3
lt0PnvS+Zeuq/plntkNtEzYRx0bHWfm8tcyM+/gqKJJrvvWKmXZFUftzILN0YLUX
G/rtgmSj4iKyQTjHClZ68wOlnhCOqHLzqekn3MNaXB4dqORMyw4anfS2D3EVekks
w7XgCTaeqK1yPeV/tQy058Fe3TdC9AUc5lbNTwIaRbVSU/5GyXlzVBHFkCe2sub+
pNzeDqPyHsQv1OHzYOm/FOmPMKOLm0nOnR36U/ahyu6CjujIZ/KH0ZiclnyDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUm2C+6ePjkrLGGg6/MvWZOsoNCjMwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X6mvMA0GCSqGSIb3DQEBCwUAA4IBAQBVLJry8TLYHAK2p3vBaXyVUKfij0hAxiEQ
OErG3wRcr+o1r/nRQTxzR9RM3dlQ2EhcwJSC/TQ8cAZEz80tZUcblHQw1IzZOnYH
eUPpEEWsoK6BfLmMZmBDJ5UXfGF4jLGAO+o8uVaT3IutUDVIT6pK5Z3/oY+QKCCy
XauqaxVkprkCM+Xxv9iz59PZLQ9LX6bEeAndjkT8igxQ3UvKDcmT22PEVdhslwie
SEqNEuZdiX2DqXxJw6pEcuTHdkdGYShu+7kiTFID9hzZg+Tunp/KSfI+IsZvK5fJ
eLxMftfQbI3ZwzYFFLr9nxjMvpvznw0RRAJr8Q3Zjx7ZAF3snGHA
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:37 2025 by rpki-client