Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa
File: 3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: s88lNccXO3jQvsCjSHCZph+Z6NYwoO3W7NKAm5V7lAU=
Subject key identifier: 80:95:D3:A0:5B:35:73:5B:9A:24:70:E1:DC:5D:70:58:AA:D3:D7:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 780679A80C1E95C510B30693B53579D6BBDA9238
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa
Signing time: Thu 30 Jan 2025 18:57:02 +0000
ROA not before: Thu 30 Jan 2025 18:52:02 +0000
ROA not after: Thu 29 Jan 2026 18:57:02 +0000
asID: 137409
IP address blocks: 194.233.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:06:79:a8:0c:1e:95:c5:10:b3:06:93:b5:35:79:d6:bb:da:92:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 18:52:02 2025 GMT
Not After : Jan 29 18:57:02 2026 GMT
Subject: CN=8095D3A05B35735B9A2470E1DC5D7058AAD3D700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:a8:33:c8:92:cd:c2:07:c3:7a:1d:bc:3b:
21:04:9c:ef:8b:2a:a6:01:50:55:95:97:c3:59:e6:
c7:85:93:32:17:13:7f:30:7d:e1:3a:d9:fb:83:7c:
a6:28:d5:e9:1a:bd:60:19:33:37:f2:14:0d:43:c4:
aa:c3:b5:2e:a6:1a:39:94:d5:ac:a9:de:46:48:5f:
9a:ea:11:ad:d2:4e:5d:cf:32:04:84:1b:be:fc:2b:
b1:1a:3f:c2:e7:4d:5c:f5:7c:3e:41:be:19:5c:1c:
a4:1e:c3:ce:cb:73:61:f9:e7:24:41:b5:7b:0f:84:
8c:b3:55:72:b5:35:0a:39:dc:e0:a8:8c:3e:8b:1a:
b1:e9:1c:63:a1:18:84:4b:1f:a7:c5:3c:42:9e:be:
8d:79:b4:95:35:1e:4f:4f:96:07:6e:df:26:8b:22:
67:ae:38:6e:aa:df:0f:05:09:53:02:0c:21:2e:33:
a6:d1:b2:45:c5:33:98:f6:19:b4:8f:61:22:d1:2e:
74:db:bb:09:51:0d:dc:5a:81:23:e9:73:89:61:9f:
42:28:f9:da:2f:b3:c0:82:0e:6f:5c:91:f1:c5:a9:
bf:6d:46:9a:c9:22:51:17:38:5b:46:0f:42:c3:76:
d2:a5:32:2a:ab:11:e6:b5:8d:7a:27:3c:d4:db:04:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:D3:A0:5B:35:73:5B:9A:24:70:E1:DC:5D:70:58:AA:D3:D7:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a1:78:b5:49:ce:a0:f0:02:af:d0:60:95:b8:ec:32:1e:f4:
c1:8a:a8:4d:2d:7f:1f:e9:14:b4:c4:00:12:37:bd:f8:85:c0:
38:7d:3a:f6:63:2e:af:6c:00:2c:c8:a5:ce:28:d7:bc:54:e6:
ab:c7:92:a3:a1:e0:07:4f:52:32:d6:c0:10:b5:1f:f9:b1:f8:
48:68:9b:38:03:f7:3e:a9:cc:c4:37:d9:b7:4e:e0:21:6e:22:
c1:6f:1c:11:f9:e2:b3:f3:bb:e7:28:be:3f:c6:72:25:f2:35:
00:93:5d:3a:aa:80:b2:51:53:49:cd:e3:e7:33:ac:7a:5d:2e:
04:8a:0c:c8:5b:98:82:ee:23:05:01:aa:fc:1e:26:9d:72:82:
fc:d7:96:95:18:ea:01:ba:ef:3a:c6:4b:90:37:f2:75:51:ab:
21:99:fb:4e:47:df:f8:7f:ed:d3:64:8e:35:d2:65:a8:21:6a:
2c:36:d2:ea:9d:c4:77:b3:30:96:a4:3d:74:55:d6:6b:f0:a2:
3b:19:01:00:04:bb:10:8c:f0:c3:7b:e1:20:0a:68:44:bf:a9:
4a:de:10:7b:12:cb:c8:f4:b2:fa:6d:fc:66:4a:52:b3:85:c0:
1f:35:2e:73:9e:52:d1:f5:62:b3:82:cf:c5:de:a6:70:cf:c7:
d8:8b:21:02
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUeAZ5qAwelcUQswaTtTV51rvakjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMzAxODUyMDJaFw0yNjAxMjkxODU3MDJaMDMxMTAvBgNV
BAMTKDgwOTVEM0EwNUIzNTczNUI5QTI0NzBFMURDNUQ3MDU4QUFEM0Q3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTqgzyJLNwgfDeh28OyEEnO+L
KqYBUFWVl8NZ5seFkzIXE38wfeE62fuDfKYo1ekavWAZMzfyFA1DxKrDtS6mGjmU
1ayp3kZIX5rqEa3STl3PMgSEG778K7EaP8LnTVz1fD5BvhlcHKQew87Lc2H55yRB
tXsPhIyzVXK1NQo53OCojD6LGrHpHGOhGIRLH6fFPEKevo15tJU1Hk9Plgdu3yaL
ImeuOG6q3w8FCVMCDCEuM6bRskXFM5j2GbSPYSLRLnTbuwlRDdxagSPpc4lhn0Io
+dovs8CCDm9ckfHFqb9tRprJIlEXOFtGD0LDdtKlMiqrEea1jXonPNTbBNu1AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUgJXToFs1c1uaJHDh3F1wWKrT1wAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzMyZTMx
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMLpZDANBgkqhkiG9w0BAQsFAAOCAQEAfqF4tUnOoPACr9BglbjsMh70wYqo
TS1/H+kUtMQAEje9+IXAOH069mMur2wALMilzijXvFTmq8eSo6HgB09SMtbAELUf
+bH4SGibOAP3PqnMxDfZt07gIW4iwW8cEfnis/O75yi+P8ZyJfI1AJNdOqqAslFT
Sc3j5zOsel0uBIoMyFuYgu4jBQGq/B4mnXKC/NeWlRjqAbrvOsZLkDfydVGrIZn7
Tkff+H/t02SONdJlqCFqLDbS6p3Ed7MwlqQ9dFXWa/CiOxkBAAS7EIzww3vhIApo
RL+pSt4QexLLyPSy+m38ZkpSs4XAHzUuc55S0fVis4LPxd6mcM/H2IshAg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:02 2025 by rpki-client