Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20323039383534.roa
File: 3135352e3133332e31342e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: kHj4v1wz+BNLlhnIlIvkjCLsdge/i/TtC/0eXz3Bf9U=
Subject key identifier: FE:DB:32:71:18:AA:09:A2:EC:CF:86:91:6A:69:D3:F6:4A:69:70:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35A82E2EFFAE66637BD423F5230A3271D57D88E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 03 Feb 2025 12:45:39 +0000
ROA not before: Mon 03 Feb 2025 12:40:39 +0000
ROA not after: Mon 02 Feb 2026 12:45:39 +0000
asID: 209854
IP address blocks: 155.133.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a8:2e:2e:ff:ae:66:63:7b:d4:23:f5:23:0a:32:71:d5:7d:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 12:40:39 2025 GMT
Not After : Feb 2 12:45:39 2026 GMT
Subject: CN=FEDB327118AA09A2ECCF86916A69D3F64A697010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:4d:af:c2:e5:e1:22:f9:6c:77:77:a8:68:
5e:37:28:62:5c:41:84:07:06:04:db:02:94:cb:13:
d3:f7:04:9d:e6:da:6a:21:3b:06:10:24:84:b1:02:
36:29:c4:98:5e:23:20:5b:8f:d2:94:ab:7e:47:83:
01:d0:4b:9e:95:5b:55:c5:2d:f6:9c:cf:f2:c6:72:
f9:bc:61:15:dc:e5:23:20:28:7e:c3:bc:ee:a7:4b:
6b:7d:f1:34:72:3e:2e:f4:32:91:29:b0:f2:dd:75:
0c:aa:d3:a0:11:af:f1:5d:36:4e:49:8c:15:59:e4:
5d:7c:36:fe:da:82:33:0c:67:82:12:6f:27:b0:b6:
92:ce:fb:f4:47:bb:b6:92:ac:0d:e6:f4:14:ed:f2:
03:f3:67:01:fb:27:10:a0:db:26:04:f3:89:20:1e:
2b:80:5e:02:7d:28:f1:6c:d7:0f:bb:2a:0b:fe:fb:
60:4a:b7:90:eb:6f:97:2b:05:28:ff:b7:13:ac:b7:
27:88:9d:a2:b5:39:44:e7:ba:7b:d8:c5:02:e0:45:
bf:a4:9b:10:58:c6:8b:61:fc:3d:b7:59:ee:81:c8:
25:1e:bc:db:39:88:62:30:f2:af:13:36:45:12:27:
c8:fc:af:d6:65:f7:05:da:7f:f1:81:ae:f4:c2:01:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:32:71:18:AA:09:A2:EC:CF:86:91:6A:69:D3:F6:4A:69:70:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31342e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.14.0/24
Signature Algorithm: sha256WithRSAEncryption
17:43:ce:1c:ea:1d:06:6d:b2:0f:03:d8:78:42:91:e8:5e:1c:
99:45:d7:9f:45:a0:46:83:34:c3:42:5b:a9:07:ea:52:77:39:
ac:36:35:ca:7a:90:98:09:0a:86:96:70:0e:a2:c8:1d:2a:58:
3e:36:c2:58:04:20:26:7d:40:37:75:de:41:5b:7b:eb:31:93:
52:39:8a:cd:cf:18:b8:53:e1:64:7c:06:fb:77:6b:a9:9c:37:
d7:8e:32:ab:9f:9d:f8:4d:78:81:4f:2d:f8:1a:cf:a9:3d:a9:
d0:66:01:4f:30:a4:75:46:9e:f2:95:e7:86:39:fe:1c:fd:21:
a2:c7:d4:49:ef:bb:4c:f5:3d:1f:bd:c7:7d:9b:5b:b5:35:a2:
7f:12:44:41:12:50:d5:d3:c1:ff:fc:54:6c:f4:38:74:1f:3f:
51:cd:11:31:67:f9:ab:c4:2c:89:56:56:6c:0c:18:f7:6f:62:
8e:e2:c0:fa:ce:49:19:bd:24:28:07:bc:b1:32:99:4c:d0:3d:
27:61:1c:3d:11:37:3e:6d:90:1e:37:77:72:ca:cc:7c:59:d4:
b6:b9:70:ab:ea:4f:1b:b1:b2:1b:ac:d3:64:7a:44:0b:56:59:
bc:74:98:99:43:36:d0:24:ea:d2:fd:91:c7:81:ed:14:3b:f4:
6a:09:63:69
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNaguLv+uZmN71CP1IwoycdV9iOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAyMDMxMjQwMzlaFw0yNjAyMDIxMjQ1MzlaMDMxMTAvBgNV
BAMTKEZFREIzMjcxMThBQTA5QTJFQ0NGODY5MTZBNjlEM0Y2NEE2OTcwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2302vwuXhIvlsd3eoaF43KGJc
QYQHBgTbApTLE9P3BJ3m2mohOwYQJISxAjYpxJheIyBbj9KUq35HgwHQS56VW1XF
Lfacz/LGcvm8YRXc5SMgKH7DvO6nS2t98TRyPi70MpEpsPLddQyq06ARr/FdNk5J
jBVZ5F18Nv7agjMMZ4ISbyewtpLO+/RHu7aSrA3m9BTt8gPzZwH7JxCg2yYE84kg
HiuAXgJ9KPFs1w+7Kgv++2BKt5Drb5crBSj/txOstyeInaK1OUTnunvYxQLgRb+k
mxBYxoth/D23We6ByCUevNs5iGIw8q8TNkUSJ8j8r9Zl9wXaf/GBrvTCAYw5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/tsycRiqCaLsz4aRamnT9kppcBAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMx
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACbhQ4wDQYJKoZIhvcNAQELBQADggEBABdDzhzqHQZtsg8D2HhCkeheHJlF159F
oEaDNMNCW6kH6lJ3Oaw2Ncp6kJgJCoaWcA6iyB0qWD42wlgEICZ9QDd13kFbe+sx
k1I5is3PGLhT4WR8Bvt3a6mcN9eOMqufnfhNeIFPLfgaz6k9qdBmAU8wpHVGnvKV
54Y5/hz9IaLH1Envu0z1PR+9x32bW7U1on8SREESUNXTwf/8VGz0OHQfP1HNETFn
+avELIlWVmwMGPdvYo7iwPrOSRm9JCgHvLEymUzQPSdhHD0RNz5tkB43d3LKzHxZ
1La5cKvqTxuxshus02R6RAtWWbx0mJlDNtAk6tL9kceB7RQ79GoJY2k=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:57 2025 by rpki-client