Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
File: 3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 3yOW3KXvd8nv4PxVC0gqBFcUSY3Sf5lH77zfadwLkzI=
Subject key identifier: C1:54:3D:53:58:0A:25:6D:A3:99:EB:1E:56:B9:E1:F0:15:99:4E:F4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18C055CDD22017A3CCE598F1DB4BB0BBDA8FBFA6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:03 +0000
ROA not before: Mon 27 Jan 2025 09:40:03 +0000
ROA not after: Mon 26 Jan 2026 09:45:03 +0000
asID: 51167
IP address blocks: 185.197.250.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c0:55:cd:d2:20:17:a3:cc:e5:98:f1:db:4b:b0:bb:da:8f:bf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:03 2025 GMT
Not After : Jan 26 09:45:03 2026 GMT
Subject: CN=C1543D53580A256DA399EB1E56B9E1F015994EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:13:06:ad:fc:c4:aa:07:c1:c1:f1:24:f7:
ee:01:28:55:20:74:93:4d:0f:d8:21:1f:98:a9:9d:
7e:d4:a9:9b:c9:a2:ea:4e:fe:10:68:2e:21:1d:66:
17:fb:97:08:4e:77:48:24:78:b8:ec:65:7a:0f:33:
72:73:4d:a7:ae:29:f9:cd:2b:53:33:94:b7:b6:d8:
24:36:90:43:85:0e:cd:b5:1a:7d:d1:21:8e:bf:5f:
f7:e9:ab:c1:dc:67:ec:52:b2:99:e4:31:84:79:e9:
b5:e5:f2:90:e2:55:25:48:32:30:58:b0:84:f5:aa:
67:0e:55:be:9e:e8:6e:4a:6d:dc:6d:92:be:6f:b7:
f1:52:49:9f:35:f5:8c:27:92:e7:2c:60:cf:54:c2:
e8:89:c6:73:c3:41:1f:43:33:c8:c3:d0:c7:ba:e9:
d4:14:c5:df:41:6d:44:21:e0:68:1b:31:55:8d:a5:
fe:fa:d6:b3:58:b5:3b:50:77:64:05:12:b4:7c:8c:
85:91:7e:21:ab:81:c6:9b:7a:a1:6b:1a:07:41:6f:
b7:b7:6c:3a:a2:ce:f1:df:e3:64:63:93:26:19:cf:
1c:fb:73:d5:7e:23:c4:d5:45:d7:7a:e6:84:91:ed:
05:3d:55:4d:42:c2:d5:6b:82:1c:9a:a1:19:8a:6f:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:3D:53:58:0A:25:6D:A3:99:EB:1E:56:B9:E1:F0:15:99:4E:F4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.250.0/23
Signature Algorithm: sha256WithRSAEncryption
34:a3:ce:ff:4d:d7:d8:9b:d6:34:5b:6d:a6:c0:2f:b0:eb:41:
ac:b4:c1:1c:b5:e9:28:0c:f0:b3:8d:d1:01:65:d7:48:6a:c4:
bb:18:ae:61:b9:93:59:49:d9:74:c4:cb:61:3b:18:6d:52:fe:
b8:79:75:34:1f:dc:bc:5d:bf:7f:f7:81:02:f0:bb:e6:9a:6d:
11:23:9c:74:eb:5f:d1:1a:a8:ab:b6:fe:ec:c9:dd:6c:1e:29:
01:17:9d:32:9d:05:f7:10:49:db:89:16:be:d3:46:ca:30:bb:
47:fc:01:36:15:df:6a:21:46:8e:84:f8:50:91:5d:27:72:0d:
80:82:15:0e:6c:50:15:b0:9c:22:f8:b9:33:6c:e2:8f:5d:a1:
6d:ea:38:e1:e6:4a:66:d5:5e:bf:08:d9:41:e6:35:e1:85:c0:
fd:7e:16:28:8d:cf:dc:bb:e0:20:af:25:be:e8:cd:73:43:f7:
7e:15:12:57:31:73:77:b6:98:a2:60:3d:62:e3:2c:f6:22:37:
15:1f:9a:64:27:c4:c6:ca:39:38:7b:e5:92:21:c3:eb:85:00:
31:8f:0e:66:c9:33:88:11:b4:af:40:02:44:ca:88:9d:0f:bb:
41:3e:ce:b1:fa:d2:f5:ff:37:d9:ff:02:65:87:7a:41:99:4e:
f0:b3:9a:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGMBVzdIgF6PM5Zjx20uwu9qPv6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDNaFw0yNjAxMjYwOTQ1MDNaMDMxMTAvBgNV
BAMTKEMxNTQzRDUzNTgwQTI1NkRBMzk5RUIxRTU2QjlFMUYwMTU5OTRFRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqxMGrfzEqgfBwfEk9+4BKFUg
dJNND9ghH5ipnX7UqZvJoupO/hBoLiEdZhf7lwhOd0gkeLjsZXoPM3JzTaeuKfnN
K1MzlLe22CQ2kEOFDs21Gn3RIY6/X/fpq8HcZ+xSspnkMYR56bXl8pDiVSVIMjBY
sIT1qmcOVb6e6G5Kbdxtkr5vt/FSSZ819YwnkucsYM9UwuiJxnPDQR9DM8jD0Me6
6dQUxd9BbUQh4GgbMVWNpf761rNYtTtQd2QFErR8jIWRfiGrgcabeqFrGgdBb7e3
bDqizvHf42RjkyYZzxz7c9V+I8TVRdd65oSR7QU9VU1CwtVrghyaoRmKb2HtAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwVQ9U1gKJW2jmeseVrnh8BWZTvQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM5MzcyZTMy
MzUzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5xfowDQYJKoZIhvcNAQELBQADggEBADSjzv9N19ib1jRbbabAL7DrQay0wRy1
6SgM8LON0QFl10hqxLsYrmG5k1lJ2XTEy2E7GG1S/rh5dTQf3Lxdv3/3gQLwu+aa
bREjnHTrX9EaqKu2/uzJ3WweKQEXnTKdBfcQSduJFr7TRsowu0f8ATYV32ohRo6E
+FCRXSdyDYCCFQ5sUBWwnCL4uTNs4o9doW3qOOHmSmbVXr8I2UHmNeGFwP1+FiiN
z9y74CCvJb7ozXND934VElcxc3e2mKJgPWLjLPYiNxUfmmQnxMbKOTh75ZIhw+uF
ADGPDmbJM4gRtK9AAkTKiJ0Pu0E+zrH60vX/N9n/AmWHekGZTvCzmgg=
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:23:45 2025 by rpki-client