Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: TzDncZRFkPN5l98wpxUnWb994JhdL1npJCK5PiSa9bg=
Subject key identifier: 1D:2F:B6:1A:FF:21:CC:C3:24:34:9A:EF:EC:B9:99:87:78:8B:F8:CD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5CCAF77F5BD7BDBAC69FA080F44B1AD04F069D6C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:26 +0000
ROA not before: Fri 20 Dec 2024 15:18:26 +0000
ROA not after: Fri 19 Dec 2025 15:23:26 +0000
asID: 47583
IP address blocks: 213.190.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ca:f7:7f:5b:d7:bd:ba:c6:9f:a0:80:f4:4b:1a:d0:4f:06:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:26 2024 GMT
Not After : Dec 19 15:23:26 2025 GMT
Subject: CN=1D2FB61AFF21CCC324349AEFECB99987788BF8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:67:03:ff:d4:68:48:b4:e8:db:36:4b:c1:
02:70:48:15:9d:cc:33:bd:50:1f:17:33:52:97:99:
40:64:eb:9d:9a:45:65:7b:de:70:83:8b:74:93:fd:
6e:ef:ac:b4:ef:d3:8e:09:aa:ec:dd:f1:bd:eb:26:
4f:c5:81:60:1d:16:d9:43:1a:b7:1e:e0:88:4d:16:
1a:2b:4d:ea:de:ed:ed:82:4f:d9:39:17:6c:e7:1a:
ca:e0:14:2f:08:3b:e2:f5:ec:87:bf:36:83:ae:6f:
d3:45:4d:4c:1a:bc:5a:27:ce:1b:6a:c8:78:65:ca:
ce:e0:72:04:46:a8:71:56:57:d0:d2:6e:b5:9c:c5:
71:bb:80:db:93:fb:31:4d:07:05:4a:aa:3c:b1:6a:
ab:f4:f6:9b:1f:3c:49:e4:5f:6a:1b:03:b1:aa:bd:
4c:c3:1a:50:f0:d7:64:22:d6:13:c8:d8:5a:23:47:
bb:87:99:e2:24:25:5a:e9:93:38:0d:9d:55:2c:fa:
40:0b:99:04:83:a0:b5:94:c0:af:6f:80:5d:01:c2:
e6:be:ee:c2:36:8a:d2:aa:93:43:d1:1f:b4:1a:9d:
72:48:bc:f3:c2:f0:fb:37:07:84:1f:09:fa:ba:08:
f9:bf:8b:7b:bd:ba:b0:3d:6b:b5:4e:6d:a0:99:f8:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:B6:1A:FF:21:CC:C3:24:34:9A:EF:EC:B9:99:87:78:8B:F8:CD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a7:bf:b6:9a:46:57:56:02:11:54:89:ac:30:7a:7b:aa:b0:
a1:3b:fb:6f:70:51:72:5d:05:d8:30:57:ec:6f:d4:77:1c:b2:
ff:a9:b8:b9:e5:eb:ff:96:fb:72:d1:a6:f8:82:04:41:ce:20:
e1:03:07:8b:be:ea:1b:ac:ee:8a:64:1f:11:81:e3:da:9d:70:
90:4b:e4:8d:81:83:4e:57:a9:24:45:55:5b:01:9f:54:65:72:
76:93:d2:b3:c5:d7:50:97:ae:1a:01:9e:ce:15:66:b8:75:f0:
84:27:f4:e9:0a:62:74:96:74:1b:6f:31:f9:f0:45:d6:38:4b:
15:95:84:8d:1f:d5:42:87:07:2e:d6:ca:f1:91:b7:73:65:71:
50:fc:c3:52:c2:3a:d1:4c:fc:e4:51:00:ac:1f:c4:b4:30:29:
32:9a:a1:73:cc:93:bd:c4:1e:24:af:3d:ba:65:fd:83:5a:39:
4a:d5:6f:d1:1d:aa:83:ca:a1:41:53:cc:3e:bd:6b:23:d1:24:
d3:ff:69:87:96:eb:4b:7e:f6:7a:a6:9d:ee:e4:60:7b:79:e4:
46:d1:13:1a:71:97:c0:9a:b5:05:be:b1:84:38:47:78:e4:f6:
28:e1:e3:ee:3c:1e:e4:f2:72:58:c7:49:d9:63:9b:6c:56:e0:
7e:d1:dc:60
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUXMr3f1vXvbrGn6CA9Esa0E8GnWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MjZaFw0yNTEyMTkxNTIzMjZaMDMxMTAvBgNV
BAMTKDFEMkZCNjFBRkYyMUNDQzMyNDM0OUFFRkVDQjk5OTg3Nzg4QkY4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeGcD/9RoSLTo2zZLwQJwSBWd
zDO9UB8XM1KXmUBk652aRWV73nCDi3ST/W7vrLTv044Jquzd8b3rJk/FgWAdFtlD
Grce4IhNFhorTere7e2CT9k5F2znGsrgFC8IO+L17Ie/NoOub9NFTUwavFonzhtq
yHhlys7gcgRGqHFWV9DSbrWcxXG7gNuT+zFNBwVKqjyxaqv09psfPEnkX2obA7Gq
vUzDGlDw12Qi1hPI2FojR7uHmeIkJVrpkzgNnVUs+kALmQSDoLWUwK9vgF0Bwua+
7sI2itKqk0PRH7QanXJIvPPC8Ps3B4QfCfq6CPm/i3u9urA9a7VObaCZ+K6TAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUHS+2Gv8hzMMkNJrv7LmZh3iL+M0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzkz
MDJlMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQA1b4FMA0GCSqGSIb3DQEBCwUAA4IBAQAvp7+2mkZXVgIRVImsMHp7qrChO/tv
cFFyXQXYMFfsb9R3HLL/qbi55ev/lvty0ab4ggRBziDhAweLvuobrO6KZB8RgePa
nXCQS+SNgYNOV6kkRVVbAZ9UZXJ2k9KzxddQl64aAZ7OFWa4dfCEJ/TpCmJ0lnQb
bzH58EXWOEsVlYSNH9VChwcu1srxkbdzZXFQ/MNSwjrRTPzkUQCsH8S0MCkymqFz
zJO9xB4krz26Zf2DWjlK1W/RHaqDyqFBU8w+vWsj0STT/2mHlutLfvZ6pp3u5GB7
eeRG0RMacZfAmrUFvrGEOEd45PYo4ePuPB7k8nJYx0nZY5tsVuB+0dxg
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:44 2025 by rpki-client