Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e32312e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: N9elggCmAW0UMs2XAt1S9NcKIWfOBXWwfGbUQedXGWE=
Subject key identifier: D1:D0:81:AE:42:7A:4E:64:57:03:22:37:AB:1D:1A:B0:D5:03:27:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0CA54BF01155755AF979BAA75E891B4A069C46DF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 04 Mar 2025 09:45:48 +0000
ROA not before: Tue 04 Mar 2025 09:40:48 +0000
ROA not after: Tue 03 Mar 2026 09:45:48 +0000
asID: 206283
IP address blocks: 80.75.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a5:4b:f0:11:55:75:5a:f9:79:ba:a7:5e:89:1b:4a:06:9c:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:40:48 2025 GMT
Not After : Mar 3 09:45:48 2026 GMT
Subject: CN=D1D081AE427A4E6457032237AB1D1AB0D503275F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:08:3b:a2:b2:9c:75:4c:5f:25:bd:b4:09:
86:1f:37:23:63:99:60:82:4b:d6:a7:45:d7:ee:c8:
5e:f9:95:b9:24:68:60:64:d0:72:9c:5f:35:7b:a5:
78:d9:48:b8:9c:8e:e6:bf:16:77:45:bf:8f:b1:15:
51:c4:5a:96:5e:cb:c5:9d:b0:55:b5:ce:75:58:ef:
78:9a:bd:a2:1e:d7:40:8b:4f:a0:74:61:6c:61:e2:
68:81:20:d4:d9:fe:3d:6c:3b:f5:1c:28:f8:81:d1:
f6:85:69:b7:de:ff:e2:74:b9:c7:db:a1:18:4d:47:
53:3a:c1:4c:3d:78:aa:c0:b3:83:0a:33:48:24:d2:
26:fb:52:5d:54:05:f7:8b:94:fb:6d:ab:79:22:c2:
05:75:01:76:5b:c7:36:04:d1:62:20:a8:90:e2:50:
23:73:59:36:e7:54:64:18:8a:66:4b:94:5e:cc:b3:
8a:89:ff:61:1d:22:47:9c:12:23:75:a5:70:cc:37:
cf:4c:99:73:f7:b2:f3:6a:1d:1a:30:cf:af:8a:76:
19:13:30:3a:c8:cb:71:ed:2c:2b:cb:ed:dd:d3:8d:
bc:8d:07:e6:66:bf:c5:75:a1:d5:d8:91:bf:15:df:
e1:b3:c3:eb:a3:89:60:e7:25:d7:5a:73:3c:b1:ac:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D0:81:AE:42:7A:4E:64:57:03:22:37:AB:1D:1A:B0:D5:03:27:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c2:a0:60:1c:33:db:4b:03:3e:b3:b8:ad:fa:d9:b4:3a:a9:
de:19:d4:9c:49:4a:1f:59:00:e5:7d:a1:69:80:68:6b:67:95:
c0:d5:5e:9a:a7:ee:99:5f:db:9c:84:93:0d:f0:c0:11:bf:1a:
ff:bd:b4:2c:90:e0:76:21:ca:e8:7a:91:c0:a4:db:76:db:ad:
67:3e:b8:2b:e8:ef:0b:82:e7:e4:a4:8c:d0:b5:a3:e4:8d:84:
10:aa:5a:76:7d:13:a2:1f:fb:78:05:4b:13:0f:09:24:ce:b8:
b0:42:4e:87:72:e2:b1:1e:2f:7d:21:6e:95:d5:fc:93:b0:40:
d3:b1:c9:60:74:e4:23:d6:47:b5:e2:d0:c0:aa:d4:e9:dc:f2:
53:9b:59:d3:cf:e4:d1:8a:01:f2:34:b9:21:8c:dc:9a:b5:db:
89:b9:a8:d0:e1:e6:c8:02:de:b6:8e:62:9c:aa:7d:a6:01:9d:
61:c5:93:b7:05:62:56:91:07:d9:14:64:3a:3b:cd:9c:94:b2:
c8:9a:28:d9:c0:2d:54:60:9a:b7:c8:d5:bf:4c:e3:33:dd:82:
a7:91:c9:df:a5:60:b3:99:78:91:31:27:34:a6:dd:b3:af:37:
69:5f:c9:19:87:55:9c:17:a9:d3:ad:e5:1f:f3:e0:c3:d2:b9:
76:b7:45:44
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDKVL8BFVdVr5ebqnXokbSgacRt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAzMDQwOTQwNDhaFw0yNjAzMDMwOTQ1NDhaMDMxMTAvBgNV
BAMTKEQxRDA4MUFFNDI3QTRFNjQ1NzAzMjIzN0FCMUQxQUIwRDUwMzI3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnAg7orKcdUxfJb20CYYfNyNj
mWCCS9anRdfuyF75lbkkaGBk0HKcXzV7pXjZSLicjua/FndFv4+xFVHEWpZey8Wd
sFW1znVY73iavaIe10CLT6B0YWxh4miBINTZ/j1sO/UcKPiB0faFabfe/+J0ucfb
oRhNR1M6wUw9eKrAs4MKM0gk0ib7Ul1UBfeLlPttq3kiwgV1AXZbxzYE0WIgqJDi
UCNzWTbnVGQYimZLlF7Ms4qJ/2EdIkecEiN1pXDMN89MmXP3svNqHRowz6+KdhkT
MDrIy3HtLCvL7d3TjbyNB+Zmv8V1odXYkb8V3+Gzw+ujiWDnJddaczyxrEHDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0dCBrkJ6TmRXAyI3qx0asNUDJ18wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMDJlMzczNTJlMzIzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMyMzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBL
FTANBgkqhkiG9w0BAQsFAAOCAQEAIcKgYBwz20sDPrO4rfrZtDqp3hnUnElKH1kA
5X2haYBoa2eVwNVemqfumV/bnISTDfDAEb8a/720LJDgdiHK6HqRwKTbdtutZz64
K+jvC4Ln5KSM0LWj5I2EEKpadn0Toh/7eAVLEw8JJM64sEJOh3LisR4vfSFuldX8
k7BA07HJYHTkI9ZHteLQwKrU6dzyU5tZ08/k0YoB8jS5IYzcmrXbibmo0OHmyALe
to5inKp9pgGdYcWTtwViVpEH2RRkOjvNnJSyyJoo2cAtVGCat8jVv0zjM92Cp5HJ
36Vgs5l4kTEnNKbds683aV/JGYdVnBep063lH/Pgw9K5drdFRA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:22 2025 by rpki-client