Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa
File: 38312e3136312e38302e302f32302d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 8LAKSxpNrgJ3DaFQqIGfbRqKzq2m5EJ31V6w8gVXoM4=
Subject key identifier: EC:51:62:AF:3E:E3:20:25:A5:24:8F:AB:21:0D:CF:58:5F:ED:48:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B62015F47FF1E4D194F8E01213B816141ABD290
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa
Signing time: Mon 27 Jan 2025 09:45:00 +0000
ROA not before: Mon 27 Jan 2025 09:40:00 +0000
ROA not after: Mon 26 Jan 2026 09:45:00 +0000
asID: 204170
IP address blocks: 81.161.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:01:5f:47:ff:1e:4d:19:4f:8e:01:21:3b:81:61:41:ab:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:00 2025 GMT
Not After : Jan 26 09:45:00 2026 GMT
Subject: CN=EC5162AF3EE32025A5248FAB210DCF585FED4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:c3:b3:8e:91:83:02:d7:1e:a5:c4:50:db:
f1:68:c0:7d:ee:b0:94:46:49:44:8b:a2:40:99:27:
fc:c5:c1:d5:7d:ca:e4:16:f2:8c:6f:a2:36:3d:61:
0d:68:bf:76:de:d6:73:5f:2a:3d:7f:f4:13:22:ae:
05:ce:7c:f2:9e:f4:0a:e8:06:5c:a2:6a:36:26:c0:
bc:e3:c7:38:75:f3:69:3f:21:c7:b0:01:c0:a2:e9:
a3:c9:fb:de:7e:6e:a7:17:40:91:bf:43:90:e2:ec:
6c:57:23:92:01:45:aa:55:ab:f4:a0:96:70:2e:7f:
d0:79:bf:da:cc:08:1e:83:7e:b0:f8:32:2d:45:99:
88:54:03:82:2a:b9:f5:35:71:58:46:fa:b6:2d:3b:
3d:af:f0:3b:13:2d:03:7f:f1:e1:89:be:90:e2:ed:
18:4a:a9:2d:92:2c:ac:6f:61:d0:80:60:a7:4e:17:
92:f8:45:08:23:15:8a:1f:92:b8:94:66:d7:10:17:
45:4f:65:47:93:2d:27:d6:7f:a5:02:b3:56:55:3f:
53:9f:1e:17:7a:c9:87:15:70:9c:74:9b:b7:0d:6c:
c8:78:0e:f1:11:6b:64:54:56:e3:b6:3a:27:e6:a0:
e7:d3:66:33:0d:ed:39:5f:88:09:fc:30:a3:61:53:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:62:AF:3E:E3:20:25:A5:24:8F:AB:21:0D:CF:58:5F:ED:48:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.80.0/20
Signature Algorithm: sha256WithRSAEncryption
06:8c:1f:d2:81:78:60:0d:1a:34:55:1f:f2:9f:3b:91:20:39:
bd:95:be:01:8a:fb:b0:27:19:f5:d9:0d:bb:b3:0a:e7:4c:03:
6b:15:68:a6:8b:3a:fa:1e:a1:7d:64:58:27:27:8e:e4:7e:8b:
ac:09:84:3c:78:29:ea:0d:2f:7a:fc:ae:11:d4:ba:d5:20:0a:
77:07:61:30:a1:82:3d:1f:a6:45:ea:1e:b3:4b:b5:a4:1e:cc:
c3:4b:cd:87:cf:c5:28:9d:62:51:d5:77:9b:a9:76:54:52:d2:
c5:ad:19:22:8e:c4:fa:7e:76:21:07:a3:83:24:ca:c8:a8:f8:
4f:31:4a:05:94:9b:5b:03:cd:22:a1:e8:83:0b:c3:72:05:7b:
2d:b8:83:4e:19:42:35:49:9d:42:2f:86:11:fb:87:98:ae:9a:
b9:15:c8:14:62:a9:8a:a8:ea:8a:a2:5b:2b:20:55:98:74:14:
83:85:20:e9:1d:72:16:6b:d2:45:88:47:5f:ff:50:17:ef:91:
29:88:99:17:09:c8:91:90:0a:64:31:c6:1f:f9:dc:96:3c:0f:
97:10:85:aa:7d:26:6f:e6:99:17:17:b2:04:72:61:ee:84:2c:
77:42:17:14:d2:d4:25:ca:20:4a:5b:71:02:db:29:58:e3:5f:
d5:fc:79:bd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUa2IBX0f/Hk0ZT44BITuBYUGr0pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDBaFw0yNjAxMjYwOTQ1MDBaMDMxMTAvBgNV
BAMTKEVDNTE2MkFGM0VFMzIwMjVBNTI0OEZBQjIxMERDRjU4NUZFRDQ4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdcOzjpGDAtcepcRQ2/FowH3u
sJRGSUSLokCZJ/zFwdV9yuQW8oxvojY9YQ1ov3be1nNfKj1/9BMirgXOfPKe9Aro
BlyiajYmwLzjxzh182k/IcewAcCi6aPJ+95+bqcXQJG/Q5Di7GxXI5IBRapVq/Sg
lnAuf9B5v9rMCB6DfrD4Mi1FmYhUA4IqufU1cVhG+rYtOz2v8DsTLQN/8eGJvpDi
7RhKqS2SLKxvYdCAYKdOF5L4RQgjFYofkriUZtcQF0VPZUeTLSfWf6UCs1ZVP1Of
Hhd6yYcVcJx0m7cNbMh4DvERa2RUVuO2OifmoOfTZjMN7TlfiAn8MKNhU1LdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU7FFirz7jICWlJI+rIQ3PWF/tSHIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMTJlMzEzNjMxMmUzODMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
UaFQMA0GCSqGSIb3DQEBCwUAA4IBAQAGjB/SgXhgDRo0VR/ynzuRIDm9lb4Bivuw
Jxn12Q27swrnTANrFWimizr6HqF9ZFgnJ47kfousCYQ8eCnqDS96/K4R1LrVIAp3
B2EwoYI9H6ZF6h6zS7WkHszDS82Hz8UonWJR1XebqXZUUtLFrRkijsT6fnYhB6OD
JMrIqPhPMUoFlJtbA80ioeiDC8NyBXstuINOGUI1SZ1CL4YR+4eYrpq5FcgUYqmK
qOqKolsrIFWYdBSDhSDpHXIWa9JFiEdf/1AX75EpiJkXCciRkApkMcYf+dyWPA+X
EIWqfSZv5pkXF7IEcmHuhCx3QhcU0tQlyiBKW3EC2ylY41/V/Hm9
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:13 2025 by rpki-client