Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20313336373837.roa
File: 3231322e31352e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ojOFI2nmud1/OC0Rr54otDD+rFrNmQBVIAcrL+aW1l4=
Subject key identifier: E8:1D:26:44:89:EC:35:25:EE:65:0C:FB:25:9B:2F:E1:FD:25:D1:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 788BCADE613DB96E229C92618738F7DA28DDC904
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jan 2025 10:02:13 +0000
ROA not before: Thu 16 Jan 2025 09:57:13 +0000
ROA not after: Thu 15 Jan 2026 10:02:13 +0000
asID: 136787
IP address blocks: 212.15.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8b:ca:de:61:3d:b9:6e:22:9c:92:61:87:38:f7:da:28:dd:c9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:57:13 2025 GMT
Not After : Jan 15 10:02:13 2026 GMT
Subject: CN=E81D264489EC3525EE650CFB259B2FE1FD25D173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:41:b6:ef:bc:c9:14:5b:07:b6:48:fd:10:
a6:79:33:2e:25:71:86:96:98:1f:36:f9:cc:20:f1:
cc:3a:38:16:d2:03:a5:3d:3b:2c:1a:c2:5e:b1:17:
c8:5c:c8:30:10:30:cb:4a:1b:ac:c6:8d:7a:f9:50:
7f:5b:88:5b:15:b6:d6:64:59:1d:e0:db:74:93:68:
92:a6:2e:06:42:1e:7e:52:92:6b:1e:35:a2:6f:b5:
1c:72:a2:93:74:02:1a:10:3a:10:3d:b5:60:4a:8a:
c7:b2:4b:b0:e4:40:10:25:c5:8b:25:97:68:86:54:
4a:62:95:03:b6:fb:d4:89:89:92:fd:60:7d:39:03:
ae:da:40:dd:c1:28:c9:b2:c6:78:1d:49:76:37:40:
bb:65:8f:6f:d0:44:a9:29:37:8c:31:eb:9a:21:92:
4d:4a:90:05:eb:46:2b:ac:bd:c2:26:95:05:88:4c:
91:08:b8:c1:73:66:d4:46:00:5b:61:d0:0f:df:ef:
ed:a4:c3:4e:61:21:4a:6e:ae:aa:5f:46:73:b8:6e:
e4:60:01:69:26:98:d5:0d:0a:a0:35:27:6f:35:fa:
5a:0a:c2:59:1c:95:04:97:35:53:36:ef:0a:89:98:
e4:b3:e0:f8:e1:cd:62:af:44:ea:16:63:a4:92:66:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:26:44:89:EC:35:25:EE:65:0C:FB:25:9B:2F:E1:FD:25:D1:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:13:16:3c:db:db:f6:0c:08:09:1f:dc:fb:d6:3d:f4:6f:1a:
6e:d2:58:c2:cb:9b:cb:88:c5:e2:ca:09:dc:1b:83:40:5b:b2:
3a:9a:f8:18:5e:a7:f2:c4:ca:77:38:d4:97:c9:36:f0:66:07:
7a:69:12:2f:e2:b8:b9:85:e3:2d:cf:af:28:a1:cb:8e:b3:2f:
3d:9d:8a:dd:aa:2b:28:74:b1:3d:54:37:8d:25:52:c2:b2:0f:
2c:7b:db:fc:de:ac:38:b8:7e:81:c4:75:8f:1c:0f:20:25:c1:
39:ea:b5:b4:dc:4c:ce:b2:e9:3f:38:5e:20:1a:16:e9:b9:6b:
90:8a:2b:53:23:9b:b1:0e:66:33:5a:4c:77:1a:75:78:e7:ca:
a0:61:f9:a1:96:75:ad:73:37:8f:85:19:36:48:03:be:25:a2:
53:55:bc:94:d0:f7:a2:64:57:6a:3c:35:54:ab:f1:4d:9e:8b:
b3:d0:92:09:ea:13:50:76:0c:c8:4d:40:30:c7:82:2a:32:b2:
21:12:34:7b:ce:c3:43:d8:1f:5c:82:92:89:a7:0b:34:86:b3:
ce:ff:3c:f8:6c:44:c4:cb:68:2e:cc:4b:d7:dd:6f:d7:37:b2:
06:15:7c:20:d7:db:93:a0:e1:f8:c3:3e:69:54:ce:03:67:f8:
f0:f9:b6:4b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeIvK3mE9uW4inJJhhzj32ijdyQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMTYwOTU3MTNaFw0yNjAxMTUxMDAyMTNaMDMxMTAvBgNV
BAMTKEU4MUQyNjQ0ODlFQzM1MjVFRTY1MENGQjI1OUIyRkUxRkQyNUQxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSEG277zJFFsHtkj9EKZ5My4l
cYaWmB82+cwg8cw6OBbSA6U9Oywawl6xF8hcyDAQMMtKG6zGjXr5UH9biFsVttZk
WR3g23STaJKmLgZCHn5SkmseNaJvtRxyopN0AhoQOhA9tWBKiseyS7DkQBAlxYsl
l2iGVEpilQO2+9SJiZL9YH05A67aQN3BKMmyxngdSXY3QLtlj2/QRKkpN4wx65oh
kk1KkAXrRiusvcImlQWITJEIuMFzZtRGAFth0A/f7+2kw05hIUpurqpfRnO4buRg
AWkmmNUNCqA1J281+loKwlkclQSXNVM27wqJmOSz4PjhzWKvROoWY6SSZpulAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU6B0mRInsNSXuZQz7JZsv4f0l0XMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1A9WMA0GCSqGSIb3DQEBCwUAA4IBAQALExY829v2DAgJH9z71j30bxpu0ljCy5vL
iMXiygncG4NAW7I6mvgYXqfyxMp3ONSXyTbwZgd6aRIv4ri5heMtz68oocuOsy89
nYrdqisodLE9VDeNJVLCsg8se9v83qw4uH6BxHWPHA8gJcE56rW03EzOsuk/OF4g
GhbpuWuQiitTI5uxDmYzWkx3GnV458qgYfmhlnWtczePhRk2SAO+JaJTVbyU0Pei
ZFdqPDVUq/FNnouz0JIJ6hNQdgzITUAwx4IqMrIhEjR7zsND2B9cgpKJpws0hrPO
/zz4bETEy2guzEvX3W/XN7IGFXwg19uToOH4wz5pVM4DZ/jw+bZL
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:46 2025 by rpki-client