Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jXCXcOR7J3pbE3hH/qUvljh1J7Jrr34XFi8v4hdHN/g=
Subject key identifier: C8:D0:8F:A2:5E:12:DB:A5:93:19:AF:B5:BC:57:0D:1C:3E:C5:14:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58F3CF92CA9FA70C7284F27979E05CA98AFA3167
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:28 +0000
ROA not before: Mon 27 Jan 2025 09:40:28 +0000
ROA not after: Mon 26 Jan 2026 09:45:28 +0000
asID: 136787
IP address blocks: 156.67.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f3:cf:92:ca:9f:a7:0c:72:84:f2:79:79:e0:5c:a9:8a:fa:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:28 2025 GMT
Not After : Jan 26 09:45:28 2026 GMT
Subject: CN=C8D08FA25E12DBA59319AFB5BC570D1C3EC514BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:ca:46:bb:17:84:9f:36:15:b0:83:e8:59:
c4:81:7d:c8:4c:8d:7e:2e:b9:10:22:03:51:8f:03:
9f:09:58:00:3c:af:ef:ca:94:b1:43:9e:32:62:08:
10:2d:bb:dd:50:36:bc:82:59:95:4c:49:1e:ea:91:
00:18:55:0d:10:ed:b1:46:0c:02:b4:b8:1d:e6:3b:
dd:52:5f:85:29:51:47:14:19:5c:ac:53:4c:e4:5f:
ac:af:d8:78:0a:d0:25:b8:9a:bd:8f:31:bf:9f:6a:
29:55:74:60:fa:55:ce:d4:9d:88:17:2d:97:1c:ff:
70:7a:79:e3:52:10:0a:9f:ba:a5:1b:f9:98:eb:e4:
1a:79:ea:36:3e:7d:e7:d2:1f:de:10:2e:63:57:ae:
36:66:c2:ae:df:88:ea:79:7f:5c:bb:ef:1c:6c:f8:
41:4f:b3:c5:f1:4f:67:73:2b:e4:fa:27:62:08:8b:
7c:37:84:64:c9:f7:6a:84:64:36:03:1e:41:ca:08:
d3:10:48:eb:76:73:cb:ba:d7:c6:38:8a:0e:d3:af:
bc:e1:03:cc:8b:39:4a:cc:bc:02:b6:73:6d:1d:7c:
6c:7b:1b:24:75:6b:9e:f9:3c:bb:f6:0c:d5:46:d2:
11:2f:7e:96:0f:35:04:69:d3:00:06:67:24:61:24:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D0:8F:A2:5E:12:DB:A5:93:19:AF:B5:BC:57:0D:1C:3E:C5:14:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0a:27:e3:ae:bd:6b:93:53:5d:df:aa:b4:9f:0a:b9:b5:8e:
6a:bc:0d:22:2d:6d:c2:58:95:59:13:58:e7:67:35:02:e7:64:
f2:83:6a:58:8c:0d:94:ae:a8:66:71:bb:9b:19:64:a9:23:46:
ba:f9:99:b6:ae:66:09:de:bc:5e:ff:2e:54:64:07:99:75:10:
01:8c:14:bf:27:99:fd:30:a3:61:88:95:51:a5:c9:28:7b:ea:
ff:16:4d:32:84:c8:c1:58:08:be:9d:e2:ce:fe:a7:2a:40:02:
d4:53:ce:5a:54:9e:9f:d2:5a:48:3b:e3:3d:f0:14:2f:f0:8d:
05:a6:15:e7:a4:9d:51:75:66:0c:a3:ed:b3:5f:eb:40:e9:ac:
b5:41:e5:b0:c0:53:f0:d5:84:27:3a:ad:7e:07:57:c3:22:f9:
e0:db:05:0f:43:25:8a:ad:c6:79:2d:f0:5b:5a:7d:8e:d3:5f:
16:86:9c:ad:c0:eb:54:41:20:5e:ab:c9:6c:b5:62:dc:74:e8:
a8:60:e3:03:18:aa:1b:36:52:f8:d9:37:76:23:c7:48:6d:4b:
f0:7d:98:2d:9b:6d:d8:91:fa:2e:f9:a7:4a:46:f1:c0:12:74:
68:ed:4a:16:34:b5:95:a9:1d:ea:4e:a1:89:a3:e8:41:15:08:
70:1b:85:5b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWPPPksqfpwxyhPJ5eeBcqYr6MWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMjhaFw0yNjAxMjYwOTQ1MjhaMDMxMTAvBgNV
BAMTKEM4RDA4RkEyNUUxMkRCQTU5MzE5QUZCNUJDNTcwRDFDM0VDNTE0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aspGuxeEnzYVsIPoWcSBfchM
jX4uuRAiA1GPA58JWAA8r+/KlLFDnjJiCBAtu91QNryCWZVMSR7qkQAYVQ0Q7bFG
DAK0uB3mO91SX4UpUUcUGVysU0zkX6yv2HgK0CW4mr2PMb+failVdGD6Vc7UnYgX
LZcc/3B6eeNSEAqfuqUb+Zjr5Bp56jY+fefSH94QLmNXrjZmwq7fiOp5f1y77xxs
+EFPs8XxT2dzK+T6J2IIi3w3hGTJ92qEZDYDHkHKCNMQSOt2c8u618Y4ig7Tr7zh
A8yLOUrMvAK2c20dfGx7GyR1a575PLv2DNVG0hEvfpYPNQRp0wAGZyRhJDanAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUyNCPol4S26WTGa+1vFcNHD7FFLwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
nENUMA0GCSqGSIb3DQEBCwUAA4IBAQAvCifjrr1rk1Nd36q0nwq5tY5qvA0iLW3C
WJVZE1jnZzUC52Tyg2pYjA2UrqhmcbubGWSpI0a6+Zm2rmYJ3rxe/y5UZAeZdRAB
jBS/J5n9MKNhiJVRpckoe+r/Fk0yhMjBWAi+neLO/qcqQALUU85aVJ6f0lpIO+M9
8BQv8I0FphXnpJ1RdWYMo+2zX+tA6ay1QeWwwFPw1YQnOq1+B1fDIvng2wUPQyWK
rcZ5LfBbWn2O018WhpytwOtUQSBeq8lstWLcdOioYOMDGKobNlL42Td2I8dIbUvw
fZgtm23Ykfou+adKRvHAEnRo7UoWNLWVqR3qTqGJo+hBFQhwG4Vb
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:41 2025 by rpki-client