Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e20323730373634.roa
File: 3137382e3133322e3139322e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier: QOGXCRHbxUTw/GxXhtRYIDR+rwhlJs3TaIbk3/rTu0M=
Subject key identifier: 81:67:D8:9B:7B:C2:26:D6:19:16:AD:A0:C1:9D:F4:2C:25:A7:D3:F0
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 43C6435B7FC088149AC3090F3E22CBEC10F0B788
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e20323730373634.roa
Signing time: Tue 11 Feb 2025 11:30:28 +0000
ROA not before: Tue 11 Feb 2025 11:25:28 +0000
ROA not after: Tue 10 Feb 2026 11:30:28 +0000
asID: 270764
IP address blocks: 178.132.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:43:5b:7f:c0:88:14:9a:c3:09:0f:3e:22:cb:ec:10:f0:b7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 11 11:25:28 2025 GMT
Not After : Feb 10 11:30:28 2026 GMT
Subject: CN=8167D89B7BC226D61916ADA0C19DF42C25A7D3F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:cb:e2:2b:bf:44:ea:41:03:5b:69:20:d4:
b9:47:d5:22:43:be:51:1d:2b:b2:0b:53:92:f3:bb:
11:4d:cd:1b:85:74:15:e9:8d:26:f0:08:14:88:9e:
c8:e9:4e:84:83:48:44:09:c2:c6:90:78:d3:e9:2f:
d6:8a:6d:76:16:67:99:ce:30:13:47:47:70:c3:aa:
38:f0:3f:4b:96:0c:c5:17:cb:b4:fc:db:30:93:40:
67:4b:1c:e3:da:9f:bc:87:3d:10:4e:3f:c5:a5:2d:
b7:57:57:b4:35:9e:ba:39:5c:85:02:cc:1c:cd:3b:
fb:4f:8f:b9:33:76:4e:2d:11:69:02:2a:50:c8:c1:
3f:c3:53:54:09:db:23:41:fa:c7:df:6d:55:69:ab:
ea:f1:c6:fd:d2:f8:c5:4b:3b:98:df:b4:71:6e:21:
60:bb:c4:2a:bc:ec:e2:95:f6:7b:bc:35:f6:67:07:
d3:53:0f:b0:c1:16:33:08:b4:2e:53:cf:e5:2a:78:
9d:69:e1:62:aa:d0:bb:78:89:e0:41:82:10:40:58:
f3:bf:6d:30:44:60:1a:51:bc:d8:b4:04:ac:2c:e0:
52:3c:9c:f0:f6:46:f7:fd:7b:3e:d0:ed:dd:86:77:
49:4a:65:20:f8:08:4a:84:ef:d2:12:3f:e3:e2:d0:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:D8:9B:7B:C2:26:D6:19:16:AD:A0:C1:9D:F4:2C:25:A7:D3:F0
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139322e302f32342d3234203d3e20323730373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:78:de:16:c8:d3:44:f4:f8:72:6c:75:37:20:2f:11:d7:6a:
4c:0f:81:67:fa:fa:67:f1:e7:5b:86:68:ef:22:9f:5f:aa:2c:
4c:f6:52:40:1c:fd:6b:a7:06:ec:5d:c8:c6:c1:c6:06:32:be:
ee:77:ac:48:99:3a:69:f0:2a:35:6b:f2:46:94:91:d5:24:d8:
de:33:8e:09:6d:7b:09:27:35:17:b8:a1:6d:e4:9e:8b:71:f0:
7f:b2:bd:10:ed:87:09:c5:1c:63:8c:0a:51:ae:73:80:6f:3a:
46:29:b5:00:a8:02:87:36:56:5f:4e:f7:7c:ee:b6:85:00:ea:
4e:66:6e:cc:e1:36:51:76:d5:fa:13:40:b3:1e:8c:f2:bd:33:
72:5e:fa:81:06:17:c1:72:a2:39:6d:08:05:19:df:64:74:1a:
e6:dd:8b:71:c4:20:db:fd:63:f7:02:cc:b8:b5:9a:4e:09:fa:
f4:86:ac:de:d0:5a:f2:9b:b1:fd:94:46:e9:39:2c:a0:e2:94:
65:97:0c:2a:5d:db:3a:75:b8:6b:77:3f:9b:31:77:18:b8:d5:
56:e6:d4:64:37:96:21:fa:d9:b5:41:79:2e:af:18:b3:79:9e:
dd:88:64:db:34:30:6e:35:e9:1b:6c:c0:73:1a:8a:a2:c3:d1:
0e:74:74:b8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUQ8ZDW3/AiBSawwkPPiLL7BDwt4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAyMTExMTI1MjhaFw0yNjAyMTAxMTMwMjhaMDMxMTAvBgNV
BAMTKDgxNjdEODlCN0JDMjI2RDYxOTE2QURBMEMxOURGNDJDMjVBN0QzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh8viK79E6kEDW2kg1LlH1SJD
vlEdK7ILU5LzuxFNzRuFdBXpjSbwCBSInsjpToSDSEQJwsaQeNPpL9aKbXYWZ5nO
MBNHR3DDqjjwP0uWDMUXy7T82zCTQGdLHOPan7yHPRBOP8WlLbdXV7Q1nro5XIUC
zBzNO/tPj7kzdk4tEWkCKlDIwT/DU1QJ2yNB+sffbVVpq+rxxv3S+MVLO5jftHFu
IWC7xCq87OKV9nu8NfZnB9NTD7DBFjMItC5Tz+UqeJ1p4WKq0Lt4ieBBghBAWPO/
bTBEYBpRvNi0BKws4FI8nPD2Rvf9ez7Q7d2Gd0lKZSD4CEqE79ISP+Pi0LuJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUgWfYm3vCJtYZFq2gwZ30LCWn0/AwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDM3MzYzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEwDANBgkqhkiG9w0BAQsFAAOCAQEALnjeFsjTRPT4cmx1NyAvEddqTA+B
Z/r6Z/HnW4Zo7yKfX6osTPZSQBz9a6cG7F3IxsHGBjK+7nesSJk6afAqNWvyRpSR
1STY3jOOCW17CSc1F7ihbeSei3Hwf7K9EO2HCcUcY4wKUa5zgG86Rim1AKgChzZW
X073fO62hQDqTmZuzOE2UXbV+hNAsx6M8r0zcl76gQYXwXKiOW0IBRnfZHQa5t2L
ccQg2/1j9wLMuLWaTgn69Ias3tBa8pux/ZRG6TksoOKUZZcMKl3bOnW4a3c/mzF3
GLjVVubUZDeWIfrZtUF5Lq8Ys3me3Yhk2zQwbjXpG2zAcxqKosPRDnR0uA==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:39 2025 by rpki-client on console.sobornost.net