Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/39312e3232392e3138302e302f32342d3234203d3e2036303739.roa
File: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=
Subject key identifier: 84:F2:26:FA:0C:52:F7:5E:08:84:F5:89:F1:98:26:09:1C:61:3F:55
Certificate issuer: /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial: 18008DD0CE64E44D5D70E2B1EE18FBDF81DFB98D
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/39312e3232392e3138302e302f32342d3234203d3e2036303739.roa
Signing time: Sun 06 Apr 2025 14:54:00 +0000
ROA not before: Sun 06 Apr 2025 14:49:00 +0000
ROA not after: Sun 05 Apr 2026 14:54:00 +0000
asID: 6079
IP address blocks: 91.229.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:00:8d:d0:ce:64:e4:4d:5d:70:e2:b1:ee:18:fb:df:81:df:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Validity
Not Before: Apr 6 14:49:00 2025 GMT
Not After : Apr 5 14:54:00 2026 GMT
Subject: CN=84F226FA0C52F75E0884F589F19826091C613F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:c9:96:ee:a3:ae:78:75:8d:14:e4:95:d8:
62:fb:b1:e7:d6:26:c3:e8:ca:be:dd:c2:3d:34:71:
b8:61:64:53:19:fd:cc:20:64:8a:b6:61:f0:5a:0c:
1d:eb:45:bd:8d:4e:e3:15:03:0d:a9:9d:ed:c8:a8:
e9:2e:e2:93:26:90:6e:cc:b7:b6:ef:ed:a8:78:77:
f1:a4:e1:cc:ff:59:af:f2:e3:cf:3d:4e:04:9b:06:
43:12:db:97:91:2a:90:84:8d:9a:ff:ec:d5:0d:84:
08:6e:18:c3:4d:d0:67:71:d7:1b:0e:11:8a:6c:df:
f6:c7:2b:2f:96:c2:ed:90:c4:3d:69:17:48:7a:85:
17:58:c1:97:dc:37:cb:54:a0:37:97:c9:51:36:b8:
51:ee:c0:58:4e:31:78:a2:13:56:0d:65:e6:db:f6:
c2:36:53:11:a0:be:ab:f5:d1:70:e3:e9:98:e7:eb:
be:6e:62:c1:f0:39:64:de:e7:c8:cb:2d:71:c0:19:
f1:23:94:47:e8:b7:05:0d:36:62:65:10:4e:ff:22:
0f:6b:c7:22:93:91:1c:ea:e6:c8:fd:50:29:bc:50:
0e:15:d8:64:77:03:2a:dc:90:cc:3b:75:e3:42:cc:
c8:86:ac:e5:12:70:2c:8b:67:d9:73:7a:46:3d:6b:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:26:FA:0C:52:F7:5E:08:84:F5:89:F1:98:26:09:1C:61:3F:55
X509v3 Authority Key Identifier:
keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/39312e3232392e3138302e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.180.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d7:23:6a:39:d9:a4:59:87:e0:5c:22:44:1a:08:ee:5e:d3:
8c:4d:ee:2e:87:ac:87:49:fd:e4:de:9f:b8:74:c0:8f:8d:02:
c2:c8:7a:91:3d:ed:35:8e:1e:0f:3a:5c:82:fe:24:9a:e0:22:
d7:b2:7d:a5:9a:3b:76:3f:0e:4d:76:fc:96:bd:73:5c:06:b6:
4f:b0:cb:92:1d:b7:9f:65:73:cc:23:7c:d1:27:56:a4:f7:d0:
c8:27:0c:b1:bb:b5:20:be:dc:88:7f:51:86:c8:e1:2e:bc:b9:
a0:07:69:50:ec:c1:a3:fc:89:22:6c:6c:4a:2d:c8:14:0d:99:
8c:8d:65:d9:23:2b:6f:dc:be:76:1c:9e:38:84:69:16:4b:0f:
f8:0b:34:df:87:ec:08:3e:2a:7c:7a:89:17:c6:18:ba:52:fe:
86:4b:14:12:2e:32:75:db:e8:aa:32:0f:d5:db:ac:8d:b0:9b:
a5:0d:1a:c3:3d:f7:ba:00:50:31:4e:d1:c1:7e:6e:ca:5f:53:
44:26:c2:27:59:e6:6c:11:a2:80:c1:2d:c0:cd:b7:f8:41:3c:
80:a9:4d:dc:e6:d5:54:fd:c4:af:a6:da:0f:2b:77:78:56:eb:
14:fc:7c:4e:f0:5b:e6:f2:6a:d1:13:97:f4:59:ff:10:bb:63:
31:8a:12:1f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGACN0M5k5E1dcOKx7hj734HfuY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFmZjEzZDVhNzFjZmIwZGEzOGQ4ZDNkODFlMTNlYWY0
MDQxNmE3NDAeFw0yNTA0MDYxNDQ5MDBaFw0yNjA0MDUxNDU0MDBaMDMxMTAvBgNV
BAMTKDg0RjIyNkZBMEM1MkY3NUUwODg0RjU4OUYxOTgyNjA5MUM2MTNGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDriMmW7qOueHWNFOSV2GL7sefW
JsPoyr7dwj00cbhhZFMZ/cwgZIq2YfBaDB3rRb2NTuMVAw2pne3IqOku4pMmkG7M
t7bv7ah4d/Gk4cz/Wa/y4889TgSbBkMS25eRKpCEjZr/7NUNhAhuGMNN0Gdx1xsO
EYps3/bHKy+Wwu2QxD1pF0h6hRdYwZfcN8tUoDeXyVE2uFHuwFhOMXiiE1YNZebb
9sI2UxGgvqv10XDj6Zjn675uYsHwOWTe58jLLXHAGfEjlEfotwUNNmJlEE7/Ig9r
xyKTkRzq5sj9UCm8UA4V2GR3AyrckMw7deNCzMiGrOUScCyLZ9lzekY9a2jBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhPIm+gxS914IhPWJ8ZgmCRxhP1UwHwYDVR0j
BBgwFoAUWv8T1acc+w2jjY09geE+r0BBanQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA3M2M5NWEtYWFjNy00M2VjLTgxOGItMWY0MmY2MjI3
NWY1LzAvNUFGRjEzRDVBNzFDRkIwREEzOEQ4RDNEODFFMTNFQUY0MDQxNkE3NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d2OFQxYWNjLXcyampZMDlnZUUtcjBC
QmFuUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA3M2M5NWEt
YWFjNy00M2VjLTgxOGItMWY0MmY2MjI3NWY1LzAvMzkzMTJlMzIzMjM5MmUzMTM4
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvl
tDANBgkqhkiG9w0BAQsFAAOCAQEAZdcjajnZpFmH4FwiRBoI7l7TjE3uLoesh0n9
5N6fuHTAj40Cwsh6kT3tNY4eDzpcgv4kmuAi17J9pZo7dj8OTXb8lr1zXAa2T7DL
kh23n2VzzCN80SdWpPfQyCcMsbu1IL7ciH9RhsjhLry5oAdpUOzBo/yJImxsSi3I
FA2ZjI1l2SMrb9y+dhyeOIRpFksP+As034fsCD4qfHqJF8YYulL+hksUEi4yddvo
qjIP1dusjbCbpQ0awz33ugBQMU7RwX5uyl9TRCbCJ1nmbBGigMEtwM23+EE8gKlN
3ObVVP3Er6baDyt3eFbrFPx8TvBb5vJq0ROX9Fn/ELtjMYoSHw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net