Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
File: 39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 8cwpE02diz6fsgZeqYXBcHt+L1Xz4y/2MRkGpd6L98M=
Subject key identifier: 27:F1:A7:57:90:6E:AE:C9:98:2B:6A:19:9E:A3:5A:DA:8F:DB:76:CE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6E879C675B915842E2A7CD40105944656EE717A8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 204170
IP address blocks: 95.214.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:87:9c:67:5b:91:58:42:e2:a7:cd:40:10:59:44:65:6e:e7:17:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=27F1A757906EAEC9982B6A199EA35ADA8FDB76CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:ee:44:de:6d:08:c8:4c:4b:a6:af:2f:27:
05:a4:56:a6:a4:01:d9:7e:27:ab:a2:dd:fc:2b:69:
ab:1d:6e:b9:84:2e:41:00:95:f5:6a:a6:cf:a8:b1:
bf:a3:7f:d1:92:0c:84:f7:85:14:89:0a:1c:4d:1a:
e4:63:fd:9b:42:a3:02:5f:40:5c:2d:0c:af:ee:f2:
a6:80:c6:ac:09:03:23:ce:51:8b:3d:a0:57:e4:14:
05:80:25:28:bd:ef:b0:42:c0:7d:1c:d4:1b:13:d8:
7b:9d:46:14:cd:18:03:ae:de:f7:b7:26:eb:f5:cb:
ef:81:6f:b4:2d:78:7b:ac:45:05:52:b5:7d:1b:c7:
78:6b:15:2b:a6:c7:0a:c2:45:eb:7b:f3:c4:05:0d:
a0:06:87:40:ee:09:61:7c:22:37:66:50:91:23:ec:
d4:19:0e:8f:ae:8d:28:b8:e4:2e:33:a5:80:92:17:
41:72:20:66:0a:42:b9:cb:24:27:9f:3e:ad:7a:76:
77:65:ec:83:83:cf:2e:a4:5b:d6:b7:9a:88:db:2d:
91:56:0a:ff:5a:79:bd:68:54:2f:27:ab:2e:05:50:
2f:ae:d3:3d:f1:f3:40:99:51:ba:4c:b3:cb:bb:cd:
97:bc:bd:ae:51:2d:d5:d5:42:7d:0f:82:59:8c:8f:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:A7:57:90:6E:AE:C9:98:2B:6A:19:9E:A3:5A:DA:8F:DB:76:CE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ca:9f:9e:11:a1:43:2b:6f:78:46:21:a3:b6:cc:7b:f8:94:
2e:fe:1f:cb:fd:0a:24:7f:4f:13:23:20:d0:b7:c7:40:74:9f:
79:92:fa:fc:17:6f:45:66:05:a6:f3:d2:88:70:17:1a:04:99:
cd:01:4a:d5:a5:7b:d9:01:c5:2c:d5:a1:0d:a4:fe:7d:25:9e:
77:0d:d1:97:6d:b6:35:37:6a:d5:b0:06:80:c4:f3:b5:34:3c:
57:7e:13:64:06:4a:d5:e2:9a:ef:cb:f6:31:44:00:4e:31:55:
05:66:c4:39:45:fa:5e:e4:d2:4c:90:0a:a5:b3:f8:98:39:e9:
b9:36:08:dd:5c:0c:57:5f:b8:9e:24:19:46:d5:67:a2:ae:4d:
c1:5b:a9:8a:f6:4e:c1:b1:0e:5b:cd:65:0b:3f:0b:b4:46:33:
1e:7f:22:0d:dc:35:91:f6:4c:21:cf:f7:66:62:88:8c:a6:95:
49:a7:f7:fc:c7:f6:61:13:f7:df:e9:25:03:dc:2e:c9:b4:aa:
68:35:e5:bd:f9:de:35:05:77:36:12:bd:91:ee:9a:95:c4:b0:
7f:af:4e:3a:09:47:89:e5:3d:94:00:2d:50:d5:be:03:00:8f:
ad:49:26:69:2b:1b:90:66:d4:1a:38:05:19:94:df:81:c3:dc:
6c:86:cf:9c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUboecZ1uRWELip81AEFlEZW7nF6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MjdaFw0yNTEyMTkxNTIzMjdaMDMxMTAvBgNV
BAMTKDI3RjFBNzU3OTA2RUFFQzk5ODJCNkExOTlFQTM1QURBOEZEQjc2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3u5E3m0IyExLpq8vJwWkVqak
Adl+J6ui3fwraasdbrmELkEAlfVqps+osb+jf9GSDIT3hRSJChxNGuRj/ZtCowJf
QFwtDK/u8qaAxqwJAyPOUYs9oFfkFAWAJSi977BCwH0c1BsT2HudRhTNGAOu3ve3
Juv1y++Bb7QteHusRQVStX0bx3hrFSumxwrCRet788QFDaAGh0DuCWF8IjdmUJEj
7NQZDo+ujSi45C4zpYCSF0FyIGYKQrnLJCefPq16dndl7IODzy6kW9a3mojbLZFW
Cv9aeb1oVC8nqy4FUC+u0z3x80CZUbpMs8u7zZe8va5RLdXVQn0PglmMj9YLAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUJ/GnV5BursmYK2oZnqNa2o/bds4wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM1MmUzMjMxMzQy
ZTMyMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAF/W2zANBgkqhkiG9w0BAQsFAAOCAQEAW8qfnhGhQytveEYho7bMe/iU
Lv4fy/0KJH9PEyMg0LfHQHSfeZL6/BdvRWYFpvPSiHAXGgSZzQFK1aV72QHFLNWh
DaT+fSWedw3Rl222NTdq1bAGgMTztTQ8V34TZAZK1eKa78v2MUQATjFVBWbEOUX6
XuTSTJAKpbP4mDnpuTYI3VwMV1+4niQZRtVnoq5NwVupivZOwbEOW81lCz8LtEYz
Hn8iDdw1kfZMIc/3ZmKIjKaVSaf3/Mf2YRP33+klA9wuybSqaDXlvfneNQV3NhK9
ke6alcSwf69OOglHieU9lAAtUNW+AwCPrUkmaSsbkGbUGjgFGZTfgcPcbIbPnA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:04:19 2025 by rpki-client