Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135312e302f32342d3234203d3e203531313637.roa
File: 3134372e39332e3135312e302f32342d3234203d3e203531313637.roa (raw, json)
Hash identifier: Um6XX8HZZnaP/+Lszlume2fFxjD5tBAtoxXajSUyRwM=
Subject key identifier: 5A:5D:98:63:EE:88:14:A3:92:9C:C5:55:EB:AA:31:83:09:4D:F6:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0392B3C8139308125FE6D5257D21DDD3A631493E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135312e302f32342d3234203d3e203531313637.roa
Signing time: Mon 24 Feb 2025 10:53:50 +0000
ROA not before: Mon 24 Feb 2025 10:48:50 +0000
ROA not after: Mon 23 Feb 2026 10:53:50 +0000
asID: 51167
IP address blocks: 147.93.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:92:b3:c8:13:93:08:12:5f:e6:d5:25:7d:21:dd:d3:a6:31:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 24 10:48:50 2025 GMT
Not After : Feb 23 10:53:50 2026 GMT
Subject: CN=5A5D9863EE8814A3929CC555EBAA3183094DF669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:c3:b7:0b:a2:86:46:9d:e1:38:87:28:f5:
4d:be:bc:ff:42:c7:c4:d9:af:69:53:b3:a3:75:34:
ec:1d:aa:4d:ca:70:6f:63:2b:67:69:76:2f:9f:0f:
74:75:d9:c6:d9:a3:83:4a:5c:50:9a:0b:89:c7:6c:
7c:c7:84:e5:b9:9c:7a:44:fe:1f:a8:c1:14:9f:9b:
54:63:a0:73:77:a0:b1:6f:f9:fe:c3:3b:a3:cd:72:
e5:15:66:91:79:79:f0:66:57:5d:e5:a4:e0:e8:0e:
3e:27:dc:39:6e:bb:b2:a4:65:2f:62:fe:d1:ab:5f:
01:18:10:58:e6:ce:6c:39:4e:0f:a8:fe:a4:05:2a:
8d:40:5c:0b:c1:58:2b:22:07:b6:7f:77:57:09:11:
a4:dd:a7:f4:3d:b2:f5:e8:bd:b3:59:08:1c:8a:7f:
79:26:5a:22:ee:e2:40:5a:9e:e8:c2:2b:e1:e8:e8:
50:84:c6:40:9e:f8:02:c6:41:50:21:0e:9c:75:fa:
8c:d6:97:97:4a:38:fc:34:c9:86:f9:54:f1:ab:da:
53:a9:0a:4e:ca:b3:56:f5:f9:a6:b6:82:9d:c3:66:
df:c7:70:76:50:52:1a:30:10:45:9d:07:cf:cb:59:
a4:ff:64:6a:d0:a1:17:6c:0a:c0:cf:4a:0b:43:19:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:98:63:EE:88:14:A3:92:9C:C5:55:EB:AA:31:83:09:4D:F6:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135312e302f32342d3234203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.151.0/24
Signature Algorithm: sha256WithRSAEncryption
59:be:b3:12:c2:83:e5:fc:0c:f0:13:21:eb:5b:29:4e:28:af:
9b:07:02:1e:f7:27:41:ef:76:09:39:18:11:e7:36:89:39:5e:
1a:7f:af:df:69:61:70:e8:87:e2:3d:55:48:29:8a:44:f4:64:
6f:5d:e4:01:d7:0f:b2:58:ce:c6:a0:2f:2c:4d:69:2b:e1:7f:
e8:aa:2a:bf:4d:eb:fa:02:5f:e8:4a:77:f6:44:3e:af:da:a8:
7f:04:71:39:6b:8f:2d:c4:3a:72:ec:24:15:71:fc:d4:b1:de:
9e:52:4a:a4:4d:e5:7a:24:6a:34:02:89:07:ec:50:09:4e:53:
7e:c7:53:e0:a5:8a:96:1b:1e:9d:02:c1:49:c4:09:b2:ce:d6:
b6:53:d4:b6:8b:28:fb:56:0c:8f:7d:c6:2e:22:7a:cb:7a:76:
a9:93:71:f9:ab:3c:7a:40:5e:2c:f8:72:c0:57:03:55:67:29:
f2:b1:5f:d5:1f:ec:0d:0b:d8:eb:86:de:ed:8c:9b:5b:c9:60:
07:0b:ba:45:f1:a6:5d:d4:3a:d9:c9:02:5f:80:2c:8d:df:39:
13:c4:84:92:6d:76:05:b8:a5:dc:20:d5:07:fa:9b:0e:73:24:
83:21:c5:42:f8:a6:73:fc:e4:e8:3b:c8:44:84:87:e3:fb:43:
3e:21:3b:49
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUA5KzyBOTCBJf5tUlfSHd06YxST4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAyMjQxMDQ4NTBaFw0yNjAyMjMxMDUzNTBaMDMxMTAvBgNV
BAMTKDVBNUQ5ODYzRUU4ODE0QTM5MjlDQzU1NUVCQUEzMTgzMDk0REY2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCusO3C6KGRp3hOIco9U2+vP9C
x8TZr2lTs6N1NOwdqk3KcG9jK2dpdi+fD3R12cbZo4NKXFCaC4nHbHzHhOW5nHpE
/h+owRSfm1RjoHN3oLFv+f7DO6PNcuUVZpF5efBmV13lpODoDj4n3Dluu7KkZS9i
/tGrXwEYEFjmzmw5Tg+o/qQFKo1AXAvBWCsiB7Z/d1cJEaTdp/Q9svXovbNZCByK
f3kmWiLu4kBanujCK+Ho6FCExkCe+ALGQVAhDpx1+ozWl5dKOPw0yYb5VPGr2lOp
Ck7Ks1b1+aa2gp3DZt/HcHZQUhowEEWdB8/LWaT/ZGrQoRdsCsDPSgtDGc6ZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUWl2YY+6IFKOSnMVV66oxgwlN9mkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMTM1
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
k12XMA0GCSqGSIb3DQEBCwUAA4IBAQBZvrMSwoPl/AzwEyHrWylOKK+bBwIe9ydB
73YJORgR5zaJOV4af6/faWFw6IfiPVVIKYpE9GRvXeQB1w+yWM7GoC8sTWkr4X/o
qiq/Tev6Al/oSnf2RD6v2qh/BHE5a48txDpy7CQVcfzUsd6eUkqkTeV6JGo0AokH
7FAJTlN+x1PgpYqWGx6dAsFJxAmyzta2U9S2iyj7VgyPfcYuInrLenapk3H5qzx6
QF4s+HLAVwNVZynysV/VH+wNC9jrht7tjJtbyWAHC7pF8aZd1DrZyQJfgCyN3zkT
xISSbXYFuKXcINUH+psOcySDIcVC+KZz/OToO8hEhIfj+0M+ITtJ
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:12 2025 by rpki-client