Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
File: 3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier: J2BvDo2mkHhUVDt8B+2SA1U8yBGni9qZ0fu8KgBNInk=
Subject key identifier: 78:9C:85:1B:56:E0:EB:38:9D:20:43:D5:E4:E3:50:84:3B:00:AB:63
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 22B7134B2346C410AA89B603999F9F52A4CDA620
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
Signing time: Mon 27 Jan 2025 09:44:51 +0000
ROA not before: Mon 27 Jan 2025 09:39:51 +0000
ROA not after: Mon 26 Jan 2026 09:44:51 +0000
asID: 396319
IP address blocks: 194.55.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b7:13:4b:23:46:c4:10:aa:89:b6:03:99:9f:9f:52:a4:cd:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:51 2025 GMT
Not After : Jan 26 09:44:51 2026 GMT
Subject: CN=789C851B56E0EB389D2043D5E4E350843B00AB63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:0a:bc:a6:96:d5:f5:e4:60:a6:05:07:6e:
73:32:0e:3a:37:b3:45:0f:33:51:4e:ca:14:57:b1:
d0:7f:ec:bc:6f:7e:b6:82:73:47:4e:cd:64:41:b8:
c1:cd:2e:8c:78:0d:7a:1e:1f:c2:3c:be:c8:40:01:
45:76:ab:22:27:c9:6c:a9:7b:5b:85:1d:e3:3a:3f:
54:8d:3f:82:a5:22:3e:1d:8f:bc:34:d3:d5:65:f7:
f3:4a:99:1b:3b:d5:3f:6c:1b:fb:fd:a9:7d:f0:4b:
bc:af:f8:03:5d:b2:a5:ba:e2:e2:bb:10:b6:e6:5c:
dd:b9:84:38:bd:3d:4d:22:fa:e5:91:72:ec:c2:fa:
38:f0:36:61:0c:89:73:9d:1d:8d:58:3c:a9:94:5a:
1d:ae:52:65:fe:cf:cb:b9:2d:d4:a4:8b:5f:4d:bd:
f6:71:99:0d:a8:de:14:03:5f:a4:3d:99:f6:19:58:
36:f6:cd:be:8b:e5:a8:a3:e3:eb:c2:b6:d7:7f:a6:
bb:d4:f5:ad:bf:96:3f:7b:2f:ab:dd:b2:c5:0a:d3:
ca:22:47:3d:10:e0:2a:d1:52:2b:62:dc:05:99:94:
4a:22:51:1e:4e:ab:9d:1d:e5:0a:2b:58:0c:40:a4:
e9:6c:b3:6a:ec:3c:2d:f2:79:be:37:4e:28:93:16:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:85:1B:56:E0:EB:38:9D:20:43:D5:E4:E3:50:84:3B:00:AB:63
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.228.0/22
Signature Algorithm: sha256WithRSAEncryption
11:8d:eb:74:20:ae:75:c0:19:c2:21:c9:ea:42:5f:e8:f4:82:
06:bc:f5:6e:1f:7d:77:25:d9:6a:0a:9a:5f:0c:57:b6:a5:ee:
51:fa:28:f7:82:ce:ca:3d:68:ca:ac:e1:17:69:07:ac:07:98:
1c:90:95:e9:44:20:ae:6d:4f:34:52:92:ed:74:b7:f0:ad:e3:
dd:69:e8:5b:84:20:b1:c4:76:09:96:b8:6a:01:36:dc:a8:bc:
ca:de:2e:c5:52:86:68:d3:fd:25:bb:b0:ef:c1:a6:78:02:16:
87:81:6e:1c:4f:f4:73:f6:0b:8d:de:90:42:ab:ac:ed:97:56:
95:9d:a1:a9:c7:05:92:71:5d:c2:dc:27:e3:c3:e9:ea:9e:07:
d7:d9:3e:fc:4c:f6:12:96:eb:52:63:8e:e2:97:3b:fa:20:11:
fd:31:ce:3d:4d:28:3d:66:11:12:a7:49:5e:42:ea:30:40:94:
3c:f6:51:bf:a1:ae:9e:21:05:15:5a:86:28:a7:7e:3a:7e:5e:
a7:73:05:e8:df:c8:e7:44:c3:fc:b3:a2:68:04:d6:f3:64:ae:
1a:42:07:2d:56:af:c9:4b:f9:43:a2:60:8a:f7:b7:47:42:18:
e2:fe:37:1c:2d:91:b6:96:1a:47:d3:95:b1:e2:29:cd:b5:6e:
77:e8:a4:97
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIrcTSyNGxBCqibYDmZ+fUqTNpiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTAxMjcwOTM5NTFaFw0yNjAxMjYwOTQ0NTFaMDMxMTAvBgNV
BAMTKDc4OUM4NTFCNTZFMEVCMzg5RDIwNDNENUU0RTM1MDg0M0IwMEFCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6wq8ppbV9eRgpgUHbnMyDjo3
s0UPM1FOyhRXsdB/7LxvfraCc0dOzWRBuMHNLox4DXoeH8I8vshAAUV2qyInyWyp
e1uFHeM6P1SNP4KlIj4dj7w009Vl9/NKmRs71T9sG/v9qX3wS7yv+ANdsqW64uK7
ELbmXN25hDi9PU0i+uWRcuzC+jjwNmEMiXOdHY1YPKmUWh2uUmX+z8u5LdSki19N
vfZxmQ2o3hQDX6Q9mfYZWDb2zb6L5aij4+vCttd/prvU9a2/lj97L6vdssUK08oi
Rz0Q4CrRUiti3AWZlEoiUR5Oq50d5QorWAxApOlss2rsPC3yeb43TiiTFgkzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUeJyFG1bg6zidIEPV5ONQhDsAq2MwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzNTM1MmUzMjMy
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5MzYzMzMxMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALCN+QwDQYJKoZIhvcNAQELBQADggEBABGN63QgrnXAGcIhyepCX+j0gga89W4f
fXcl2WoKml8MV7al7lH6KPeCzso9aMqs4RdpB6wHmByQlelEIK5tTzRSku10t/Ct
491p6FuEILHEdgmWuGoBNtyovMreLsVShmjT/SW7sO/BpngCFoeBbhxP9HP2C43e
kEKrrO2XVpWdoanHBZJxXcLcJ+PD6eqeB9fZPvxM9hKW61JjjuKXO/ogEf0xzj1N
KD1mERKnSV5C6jBAlDz2Ub+hrp4hBRVahiinfjp+XqdzBejfyOdEw/yzomgE1vNk
rhpCBy1Wr8lL+UOiYIr3t0dCGOL+NxwtkbaWGkfTlbHiKc21bnfopJc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:21 2025 by rpki-client