Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
File: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=
Subject key identifier: 6F:16:C9:19:69:8C:1D:8D:64:43:8F:4D:C2:52:B3:9D:62:DE:73:2E
Certificate issuer: /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial: 6F796D01B189F9CC106DBB79681F9722B7630D54
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
Signing time: Tue 18 Mar 2025 16:44:01 +0000
ROA not before: Tue 18 Mar 2025 16:39:01 +0000
ROA not after: Tue 17 Mar 2026 16:44:01 +0000
asID: 47272
IP address blocks: 192.67.35.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:79:6d:01:b1:89:f9:cc:10:6d:bb:79:68:1f:97:22:b7:63:0d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Validity
Not Before: Mar 18 16:39:01 2025 GMT
Not After : Mar 17 16:44:01 2026 GMT
Subject: CN=6F16C919698C1D8D64438F4DC252B39D62DE732E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:9a:91:e9:8b:56:fb:b2:5e:1a:e5:0c:3c:
6d:98:a2:4e:c4:5e:d0:c1:16:3e:bb:98:00:57:b8:
1f:83:99:dc:e3:9c:c5:6b:4f:db:46:8c:85:04:b0:
00:19:1d:d2:c1:99:ad:53:d7:06:6f:00:f7:d6:88:
f6:73:ed:8e:64:e0:74:1f:89:16:72:ac:d9:1c:f3:
c8:0d:e5:9c:e2:77:7e:5e:d7:5e:18:0e:1a:00:f0:
f7:6d:8b:63:ca:b8:43:f0:99:7d:9b:cc:9e:a3:32:
8a:b0:45:23:14:e6:e6:72:45:41:a8:80:4b:76:4e:
1a:79:35:d1:80:a0:64:d3:85:e9:0f:94:95:4c:ea:
4d:de:82:b1:50:d5:1c:6a:13:9b:2e:2a:46:bf:7a:
fe:e2:2f:47:32:06:de:eb:1d:f4:35:9b:26:dc:4c:
c3:d7:69:0b:ea:bc:30:3a:13:0d:96:7b:a4:9c:9f:
16:22:95:bc:46:22:55:f8:07:f4:22:24:c2:8e:b6:
ac:2a:59:8a:39:0d:e8:2f:5a:77:45:e0:05:77:38:
44:6f:a7:e5:66:16:7a:a7:db:c0:ce:a8:23:7c:2d:
01:72:6a:90:a2:ab:70:1e:9d:34:ad:06:ad:d2:ab:
4e:e9:5f:14:79:62:2b:ee:8e:9c:5d:5f:3b:b8:9c:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:C9:19:69:8C:1D:8D:64:43:8F:4D:C2:52:B3:9D:62:DE:73:2E
X509v3 Authority Key Identifier:
keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.35.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5f:e3:42:04:df:38:30:b8:e3:ef:54:01:15:c9:59:da:ef:
32:fa:e1:10:a7:87:2c:c8:2d:a0:e7:69:9b:95:dc:28:aa:8f:
20:d4:c3:3c:f7:79:6b:62:61:10:45:e8:72:3b:77:bb:b4:43:
79:5d:a4:aa:2d:48:ca:90:d9:13:4c:ba:ae:30:e1:36:19:29:
3c:90:5f:f2:d1:a1:95:60:3f:ee:c3:85:0a:ff:72:8a:87:ef:
55:d0:b4:cc:96:90:73:c8:cd:4a:13:de:bd:6f:45:78:36:f6:
ef:37:08:e5:66:f1:f8:5a:88:b0:ea:92:7b:95:40:22:e1:09:
4f:9a:80:50:b2:31:94:be:14:9f:f5:65:9c:98:c5:5d:6c:26:
9e:e7:66:cc:73:ba:c9:ca:21:44:a0:06:57:aa:77:9d:89:51:
ae:16:e6:84:d4:13:4d:e1:5c:35:ad:3c:67:c1:0c:04:20:2c:
de:3f:26:0d:44:00:b8:8b:6c:10:76:38:78:9b:ae:05:f5:df:
fe:48:9a:cb:b2:d9:99:3e:d5:24:67:53:b7:62:40:a2:39:59:
8b:79:c3:cc:a1:59:22:7d:41:d4:19:f5:8c:c9:64:82:a4:44:
33:9b:31:53:2a:24:c1:75:d8:f7:ce:24:eb:b5:3f:a8:b6:0c:
f9:2b:7e:29
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIUb3ltAbGJ+cwQbbt5aB+XIrdjDVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4
QjJFNDM4ODAeFw0yNTAzMTgxNjM5MDFaFw0yNjAzMTcxNjQ0MDFaMDMxMTAvBgNV
BAMTKDZGMTZDOTE5Njk4QzFEOEQ2NDQzOEY0REMyNTJCMzlENjJERTczMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh5qR6YtW+7JeGuUMPG2Yok7E
XtDBFj67mABXuB+DmdzjnMVrT9tGjIUEsAAZHdLBma1T1wZvAPfWiPZz7Y5k4HQf
iRZyrNkc88gN5Zzid35e114YDhoA8Pdti2PKuEPwmX2bzJ6jMoqwRSMU5uZyRUGo
gEt2Thp5NdGAoGTThekPlJVM6k3egrFQ1RxqE5suKka/ev7iL0cyBt7rHfQ1mybc
TMPXaQvqvDA6Ew2We6ScnxYilbxGIlX4B/QiJMKOtqwqWYo5DegvWndF4AV3OERv
p+VmFnqn28DOqCN8LQFyapCiq3AenTStBq3Sq07pXxR5YivujpxdXzu4nA6jAgMB
AAGjggJhMIICXTAdBgNVHQ4EFgQUbxbJGWmMHY1kQ49NwlKznWLecy4wHwYDVR0j
BBgwFoAUAc/350GJVjsOxF0Om7fFYosuQ4gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzQvMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4QjJFNDM4OC5j
cmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEFBQcwAoZtcnN5bmM6Ly9rcmlsbC5h
Y2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMv
MC8wMUNGRjdFNzQxODk1NjNCMEVDNDVEMEU5QkI3QzU2MjhCMkU0Mzg4LmNlcjCB
qwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5Zjkt
OWI2Yy05YzlmMzg5ODk5NWQvNC8zMTM5MzIyZTM2MzcyZTMzMzUyZTMwMmYzMjM0
MmQzMzMyMjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMjMA0GCSqGSIb3
DQEBCwUAA4IBAQARX+NCBN84MLjj71QBFclZ2u8y+uEQp4csyC2g52mbldwoqo8g
1MM893lrYmEQRehyO3e7tEN5XaSqLUjKkNkTTLquMOE2GSk8kF/y0aGVYD/uw4UK
/3KKh+9V0LTMlpBzyM1KE969b0V4NvbvNwjlZvH4Woiw6pJ7lUAi4QlPmoBQsjGU
vhSf9WWcmMVdbCae52bMc7rJyiFEoAZXqnediVGuFuaE1BNN4Vw1rTxnwQwEICze
PyYNRAC4i2wQdjh4m64F9d/+SJrLstmZPtUkZ1O3YkCiOVmLecPMoVkifUHUGfWM
yWSCpEQzmzFTKiTBddj3ziTrtT+otgz5K34p
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:26 2025 by rpki-client