Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32342e302f32322d3234203d3e203437353833.roa
File: 3231322e38352e32342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5bl58YMoLD/XuV9O2XvpczifrVRWzBeYL5z2hAvmyJw=
Subject key identifier: 69:FF:6B:B8:E6:75:2B:B4:9F:8B:13:E7:8D:F6:72:55:AB:1F:09:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B72B845A1EC6D2FEC7B0CBF425AF8D47CD2BA14
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 28 Feb 2025 12:00:53 +0000
ROA not before: Fri 28 Feb 2025 11:55:53 +0000
ROA not after: Fri 27 Feb 2026 12:00:53 +0000
asID: 47583
IP address blocks: 212.85.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:72:b8:45:a1:ec:6d:2f:ec:7b:0c:bf:42:5a:f8:d4:7c:d2:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 28 11:55:53 2025 GMT
Not After : Feb 27 12:00:53 2026 GMT
Subject: CN=69FF6BB8E6752BB49F8B13E78DF67255AB1F0984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:40:f5:e5:68:c6:ee:fa:30:1d:f9:9b:98:
f6:b7:c2:4e:9b:73:63:8b:ee:67:ad:a3:86:54:65:
20:33:d5:95:16:56:7d:98:4d:2d:36:bf:a0:af:58:
2b:dd:74:e8:ac:ed:d8:d4:c7:03:f9:5f:7d:41:8e:
12:f3:af:ca:1e:38:2b:d0:59:83:b2:bc:00:53:0a:
7f:a9:82:aa:4c:8b:bf:d2:f8:d3:34:62:d3:0a:b1:
f5:1e:c3:b7:71:da:90:b4:5d:61:07:c5:49:b7:bc:
67:bc:61:28:59:48:91:ae:f5:1b:16:43:3f:ed:94:
e4:82:25:31:e9:d8:60:2a:1c:35:ac:2e:a9:b6:91:
3e:6e:af:ac:2a:8e:e9:40:2d:ca:e9:52:4a:f6:2f:
88:09:1f:ad:77:c8:46:e5:79:76:de:68:20:52:2e:
77:e3:f5:98:ab:1c:4a:f6:d6:06:7a:83:12:d1:4d:
b9:aa:81:b1:7d:c6:2f:f6:e9:c0:aa:42:50:e6:b3:
6c:10:36:cc:eb:04:cb:cd:39:2e:bc:a8:4c:f2:83:
c6:23:89:e9:93:a4:0f:fb:84:95:5c:da:ec:05:11:
f8:45:b0:4c:c9:6c:a5:c0:c2:5a:a7:17:8e:9c:13:
c3:ba:20:a4:6a:49:4b:b1:de:3a:d7:f1:b7:7a:6f:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:6B:B8:E6:75:2B:B4:9F:8B:13:E7:8D:F6:72:55:AB:1F:09:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.24.0/22
Signature Algorithm: sha256WithRSAEncryption
59:af:49:3e:5b:f5:2f:a3:0c:81:2b:d6:1c:4d:31:ac:98:61:
cd:a2:5d:0c:12:2a:89:e0:88:9c:d2:83:2c:e3:53:22:13:a4:
87:a4:f7:d1:c2:66:2a:f9:5e:0c:b0:24:ed:a2:46:e0:11:a4:
57:c5:b8:fa:a5:d4:88:f8:7a:93:28:d8:4f:df:e3:f6:9e:7d:
2f:bf:88:3b:cb:14:ab:0a:c1:d3:ae:95:f7:d5:23:a9:97:21:
09:92:e8:be:f1:60:94:92:1c:03:e1:01:84:bd:08:08:98:67:
bc:a1:73:fc:b4:48:60:94:08:3b:93:25:00:78:30:5a:4e:0a:
b5:bf:cc:e0:e5:3d:b3:62:05:dd:04:34:98:ef:41:a0:35:d2:
09:3b:74:74:70:75:d8:dd:51:a9:7f:8c:12:9f:0d:a1:2d:e6:
a8:31:ee:4e:ba:a6:1c:4f:78:3f:3c:bb:7e:8c:33:3c:f3:b2:
f7:ef:55:eb:16:95:7e:3b:74:2c:e7:47:d8:0a:3d:5a:b8:78:
ce:1b:e9:e3:2c:de:49:86:ee:35:17:e0:d1:bb:8d:da:b6:81:
70:04:41:d2:a4:76:e5:0e:28:6f:13:27:09:c2:9d:8a:59:2b:
7c:98:42:e9:4f:ba:9e:a1:73:89:b7:6c:cd:aa:1a:a1:5b:1e:
cf:7f:dd:6f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUa3K4RaHsbS/sewy/Qlr41HzSuhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAyMjgxMTU1NTNaFw0yNjAyMjcxMjAwNTNaMDMxMTAvBgNV
BAMTKDY5RkY2QkI4RTY3NTJCQjQ5RjhCMTNFNzhERjY3MjU1QUIxRjA5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibUD15WjG7vowHfmbmPa3wk6b
c2OL7meto4ZUZSAz1ZUWVn2YTS02v6CvWCvddOis7djUxwP5X31BjhLzr8oeOCvQ
WYOyvABTCn+pgqpMi7/S+NM0YtMKsfUew7dx2pC0XWEHxUm3vGe8YShZSJGu9RsW
Qz/tlOSCJTHp2GAqHDWsLqm2kT5ur6wqjulALcrpUkr2L4gJH613yEbleXbeaCBS
Lnfj9ZirHEr21gZ6gxLRTbmqgbF9xi/26cCqQlDms2wQNszrBMvNOS68qEzyg8Yj
iemTpA/7hJVc2uwFEfhFsEzJbKXAwlqnF46cE8O6IKRqSUux3jrX8bd6b0AZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUaf9ruOZ1K7SfixPnjfZyVasfCYQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzODM1MmUzMjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtRV
GDANBgkqhkiG9w0BAQsFAAOCAQEAWa9JPlv1L6MMgSvWHE0xrJhhzaJdDBIqieCI
nNKDLONTIhOkh6T30cJmKvleDLAk7aJG4BGkV8W4+qXUiPh6kyjYT9/j9p59L7+I
O8sUqwrB066V99UjqZchCZLovvFglJIcA+EBhL0ICJhnvKFz/LRIYJQIO5MlAHgw
Wk4Ktb/M4OU9s2IF3QQ0mO9BoDXSCTt0dHB12N1RqX+MEp8NoS3mqDHuTrqmHE94
Pzy7fowzPPOy9+9V6xaVfjt0LOdH2Ao9Wrh4zhvp4yzeSYbuNRfg0buN2raBcARB
0qR25Q4obxMnCcKdilkrfJhC6U+6nqFzibdszaoaoVsez3/dbw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:45 2025 by rpki-client