Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
File: 3139342e3233332e39372e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: BTlzbyUoAJymP17gHmA330tsxH7FotMLRavqLAQVGR4=
Subject key identifier: 64:89:E6:1E:1A:C7:1F:68:B5:3B:72:93:5D:16:65:AE:F2:7A:99:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3375C9BFE1D4094A3A7D4A53028247FF5097FB6A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
Signing time: Mon 27 Jan 2025 09:44:58 +0000
ROA not before: Mon 27 Jan 2025 09:39:58 +0000
ROA not after: Mon 26 Jan 2026 09:44:58 +0000
asID: 49453
IP address blocks: 194.233.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:75:c9:bf:e1:d4:09:4a:3a:7d:4a:53:02:82:47:ff:50:97:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:58 2025 GMT
Not After : Jan 26 09:44:58 2026 GMT
Subject: CN=6489E61E1AC71F68B53B72935D1665AEF27A999E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:73:2a:d9:6d:56:7f:cd:6d:4f:a8:c3:d1:
44:62:5e:bf:cc:29:22:e0:81:c3:28:65:d1:fd:ce:
9c:5c:29:fd:b3:1c:eb:69:2f:b5:e2:ab:4c:a9:ea:
90:6d:04:5a:90:33:7d:67:5c:8e:97:3c:45:fb:dc:
6e:ac:93:db:9f:9c:b1:8f:d0:f2:86:96:5e:19:0d:
c3:7f:9f:3a:3f:0c:6e:2b:ba:8d:c1:15:06:86:3b:
cb:b8:a3:02:e3:50:4e:c8:f3:c1:72:67:d3:5e:05:
11:de:e0:04:fc:ec:2e:9f:8c:1d:f1:85:74:2c:31:
cf:8f:c4:7d:e3:ca:35:df:b9:27:1e:c4:7f:6d:ff:
10:9e:53:db:8d:b8:1d:b6:36:f7:a1:53:d3:18:e6:
b7:74:e1:0c:8d:51:f0:bb:24:76:41:9d:33:62:b7:
aa:56:22:e3:e6:09:fc:98:e6:1e:be:d3:15:b6:04:
fb:47:3a:c8:c2:67:90:21:61:59:19:74:d3:ba:6e:
dc:b2:9a:fb:15:9a:2f:39:c4:9b:c0:02:62:bd:3a:
f5:31:8d:cf:54:3e:85:94:0a:3b:50:bf:74:a7:73:
43:f7:c7:d9:7f:76:00:13:95:e5:d7:d3:52:ae:33:
52:63:59:dd:8e:c9:27:f8:71:d0:db:b5:06:94:75:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:E6:1E:1A:C7:1F:68:B5:3B:72:93:5D:16:65:AE:F2:7A:99:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:da:e8:0b:c9:2c:55:b7:49:45:11:e0:f1:52:8f:99:62:b2:
0d:8c:aa:b2:a3:17:c2:3e:ee:9b:a7:12:59:cc:51:9d:28:59:
59:38:33:72:dd:0c:08:df:a4:4b:04:0b:bf:83:c5:0b:0e:2c:
ac:6d:d1:bc:9d:de:59:e9:77:98:fa:7d:8b:48:0c:9b:77:9b:
f2:5e:ec:59:f3:7d:48:59:02:e0:46:36:b5:cc:ee:2d:6d:c3:
40:ba:13:4e:62:fe:b4:8b:c8:c1:0f:92:f2:b4:71:93:db:37:
ed:c9:03:ca:90:a1:e8:c3:f4:8c:cd:f3:b5:20:a7:c2:04:eb:
e4:a0:81:81:f9:fa:d0:c8:99:f0:dd:85:f8:62:a9:6f:be:69:
18:4e:86:ee:39:aa:a1:ac:21:9d:66:01:b3:94:c8:46:45:06:
d3:21:31:3c:6c:96:40:40:54:5c:6a:6a:04:81:52:0b:b7:45:
eb:38:a7:9f:c4:96:57:02:6a:85:a6:37:30:3f:f2:24:a2:b3:
83:22:fa:88:76:d7:fb:c8:48:bb:25:5e:0b:06:08:c9:e1:c8:
e5:42:f5:b8:9b:7d:37:70:f5:93:15:82:47:9a:10:4b:40:14:
27:d0:47:8e:1d:4a:13:1a:47:b1:b3:69:90:eb:fd:58:5d:fa:
05:e3:5e:7b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUM3XJv+HUCUo6fUpTAoJH/1CX+2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTM5NThaFw0yNjAxMjYwOTQ0NThaMDMxMTAvBgNV
BAMTKDY0ODlFNjFFMUFDNzFGNjhCNTNCNzI5MzVEMTY2NUFFRjI3QTk5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXnMq2W1Wf81tT6jD0URiXr/M
KSLggcMoZdH9zpxcKf2zHOtpL7Xiq0yp6pBtBFqQM31nXI6XPEX73G6sk9ufnLGP
0PKGll4ZDcN/nzo/DG4ruo3BFQaGO8u4owLjUE7I88FyZ9NeBRHe4AT87C6fjB3x
hXQsMc+PxH3jyjXfuScexH9t/xCeU9uNuB22NvehU9MY5rd04QyNUfC7JHZBnTNi
t6pWIuPmCfyY5h6+0xW2BPtHOsjCZ5AhYVkZdNO6btyymvsVmi85xJvAAmK9OvUx
jc9UPoWUCjtQv3Snc0P3x9l/dgATleXX01KuM1JjWd2OySf4cdDbtQaUdXLJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZInmHhrHH2i1O3KTXRZlrvJ6mZ4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzMyZTM5
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzQzNTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wulhMA0GCSqGSIb3DQEBCwUAA4IBAQBI2ugLySxVt0lFEeDxUo+ZYrINjKqyoxfC
Pu6bpxJZzFGdKFlZODNy3QwI36RLBAu/g8ULDiysbdG8nd5Z6XeY+n2LSAybd5vy
XuxZ831IWQLgRja1zO4tbcNAuhNOYv60i8jBD5LytHGT2zftyQPKkKHow/SMzfO1
IKfCBOvkoIGB+frQyJnw3YX4YqlvvmkYTobuOaqhrCGdZgGzlMhGRQbTITE8bJZA
QFRcamoEgVILt0XrOKefxJZXAmqFpjcwP/IkorODIvqIdtf7yEi7JV4LBgjJ4cjl
QvW4m303cPWTFYJHmhBLQBQn0EeOHUoTGkexs2mQ6/1YXfoF4157
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:18 2025 by rpki-client