Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
File: 3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: SSEP0BvoXYDH5KSNhj0OF3SmVpVp1LEimlxA4rq93ww=
Subject key identifier: 83:1F:1E:C1:13:05:F1:5F:C9:77:4E:18:BA:15:B7:67:AA:18:C3:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62B2B5886CF97D13D920619BF392392CCC9D987D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
Signing time: Thu 13 Mar 2025 10:03:48 +0000
ROA not before: Thu 13 Mar 2025 09:58:48 +0000
ROA not after: Thu 12 Mar 2026 10:03:48 +0000
asID: 141039
IP address blocks: 195.179.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b2:b5:88:6c:f9:7d:13:d9:20:61:9b:f3:92:39:2c:cc:9d:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 13 09:58:48 2025 GMT
Not After : Mar 12 10:03:48 2026 GMT
Subject: CN=831F1EC11305F15FC9774E18BA15B767AA18C3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:3b:80:c2:c0:c7:e5:34:b7:32:1d:4a:a5:
df:56:d6:a9:f1:0c:92:d6:90:4b:76:55:6f:12:96:
21:96:9f:5a:3f:bc:28:cf:5a:26:c2:06:af:bc:2b:
7f:48:1e:e4:47:89:ae:b0:17:2f:52:27:a7:49:c3:
65:40:33:9a:45:2a:ca:86:5e:b3:50:20:1e:a9:cf:
9d:6f:0f:44:af:0c:9b:12:a2:3b:76:99:54:1b:db:
13:27:2b:d1:5c:d5:ed:92:52:a8:92:f1:a1:7e:27:
de:d4:65:de:3b:83:bd:84:42:38:43:09:2a:1d:64:
b5:44:02:b3:7a:02:eb:22:c8:ae:49:83:f4:22:c9:
e4:37:f1:37:98:09:47:32:a8:bd:0f:f0:df:d4:7b:
32:af:35:1b:06:e7:94:a3:e2:49:f5:9d:53:7e:9f:
e2:2f:61:d5:16:e2:48:20:cb:55:8c:0b:2d:87:c4:
89:7e:78:7e:76:f0:05:c1:8e:2f:d3:dd:f8:74:09:
b1:4c:d2:96:ce:0a:63:21:04:26:a5:b1:19:ed:5c:
b2:1a:97:10:f7:ca:72:f8:1d:22:de:8b:ff:89:88:
5e:eb:c5:06:68:1c:91:81:42:8a:77:9a:16:11:e4:
5b:d5:43:b6:7e:4a:d5:fe:bc:a5:72:23:5c:e5:3e:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:1E:C1:13:05:F1:5F:C9:77:4E:18:BA:15:B7:67:AA:18:C3:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.200.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:56:7f:08:2e:9f:9c:f4:ad:20:5b:a2:b6:bd:f4:ca:c6:
f4:e9:41:2a:b5:79:5c:90:69:35:58:f5:45:7f:b2:ae:28:a8:
04:42:08:0b:86:fd:c6:d3:ab:08:f3:6c:8f:31:2e:00:0e:5b:
38:14:11:9e:ad:07:8f:36:ad:94:bb:f8:02:28:55:77:03:97:
fd:20:84:10:ad:e5:35:eb:52:f7:cd:94:72:32:c9:2d:47:e8:
02:54:e4:96:ee:99:88:98:28:6a:d0:2f:ed:e6:95:00:b7:fd:
bc:6f:04:52:d6:cf:96:68:08:94:85:3d:82:0b:ca:56:06:59:
ec:aa:92:b9:bc:d0:a9:07:e3:ea:54:7f:1e:b0:ba:77:d0:39:
80:78:15:e1:93:02:f2:49:1c:0f:4c:d5:f0:3d:f4:2b:a6:be:
6d:8e:1e:cd:00:b0:87:eb:42:d3:36:ed:b4:b7:48:e1:43:46:
11:6d:4e:88:c6:b9:d3:06:b8:08:f2:de:00:1a:39:79:cb:f8:
e2:24:ba:28:6a:7a:d2:54:90:a3:0e:6a:26:77:41:b9:64:06:
70:26:ce:cf:6d:10:05:5d:52:82:7e:12:e5:3a:bc:53:6b:72:
31:c7:6c:d3:04:6d:ed:7d:69:ed:ed:40:f0:af:c5:3f:48:f8:
a7:66:a2:76
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYrK1iGz5fRPZIGGb85I5LMydmH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAzMTMwOTU4NDhaFw0yNjAzMTIxMDAzNDhaMDMxMTAvBgNV
BAMTKDgzMUYxRUMxMTMwNUYxNUZDOTc3NEUxOEJBMTVCNzY3QUExOEMzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXzuAwsDH5TS3Mh1Kpd9W1qnx
DJLWkEt2VW8SliGWn1o/vCjPWibCBq+8K39IHuRHia6wFy9SJ6dJw2VAM5pFKsqG
XrNQIB6pz51vD0SvDJsSojt2mVQb2xMnK9Fc1e2SUqiS8aF+J97UZd47g72EQjhD
CSodZLVEArN6AusiyK5Jg/QiyeQ38TeYCUcyqL0P8N/UezKvNRsG55Sj4kn1nVN+
n+IvYdUW4kggy1WMCy2HxIl+eH528AXBji/T3fh0CbFM0pbOCmMhBCalsRntXLIa
lxD3ynL4HSLei/+JiF7rxQZoHJGBQop3mhYR5FvVQ7Z+StX+vKVyI1zlPhwFAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUgx8ewRMF8V/Jd04YuhW3Z6oYw+swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMOzyDANBgkqhkiG9w0BAQsFAAOCAQEAdmJWfwgun5z0rSBbora99MrG9OlB
KrV5XJBpNVj1RX+yriioBEIIC4b9xtOrCPNsjzEuAA5bOBQRnq0HjzatlLv4AihV
dwOX/SCEEK3lNetS982UcjLJLUfoAlTklu6ZiJgoatAv7eaVALf9vG8EUtbPlmgI
lIU9ggvKVgZZ7KqSubzQqQfj6lR/HrC6d9A5gHgV4ZMC8kkcD0zV8D30K6a+bY4e
zQCwh+tC0zbttLdI4UNGEW1OiMa50wa4CPLeABo5ecv44iS6KGp60lSQow5qJndB
uWQGcCbOz20QBV1Sgn4S5Tq8U2tyMcds0wRt7X1p7e1A8K/FP0j4p2aidg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:42 2025 by rpki-client