Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa
File: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (raw, json)
Hash identifier: 0RBZ/mU01xCDKSKWtmVbzc8O8NAjvYbVNwan87PBgvk=
Subject key identifier: B2:BB:B8:95:6E:3A:54:AF:20:AA:66:64:4D:43:DE:64:89:EC:81:B9
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 1B81755A4B0F61AE7327DB6105A0483272B27205
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa
Signing time: Tue 01 Apr 2025 14:40:23 +0000
ROA not before: Tue 01 Apr 2025 14:35:23 +0000
ROA not after: Tue 31 Mar 2026 14:40:23 +0000
asID: 213319
IP address blocks: 95.169.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:81:75:5a:4b:0f:61:ae:73:27:db:61:05:a0:48:32:72:b2:72:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 1 14:35:23 2025 GMT
Not After : Mar 31 14:40:23 2026 GMT
Subject: CN=B2BBB8956E3A54AF20AA66644D43DE6489EC81B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:2a:1a:f4:15:5a:04:67:2d:ad:9c:0c:74:
be:9c:42:74:56:e1:d2:6a:8c:8d:3c:68:a5:15:0f:
54:3a:e0:d3:c9:b4:2a:33:88:e2:07:b2:1e:91:c3:
17:0d:4e:ce:4c:20:d1:c6:56:ed:24:78:db:40:8c:
e2:73:fd:9e:95:e8:ce:cc:fe:35:92:02:75:96:d3:
7e:86:03:23:1d:25:e1:5a:84:90:d6:8a:06:85:fa:
6a:62:47:ff:ca:dd:d4:dc:ba:15:ba:d7:ba:48:23:
34:15:9e:5d:ee:a5:c7:53:09:9a:b8:8f:07:4e:61:
b2:de:0c:7b:3b:2a:7d:f8:1d:89:61:7b:97:5e:d8:
a9:c7:36:5b:db:10:99:38:9c:12:31:ea:d5:33:23:
97:27:d3:40:72:c6:d2:42:31:77:ac:f0:e8:bb:59:
ae:b1:e6:33:3a:3b:7d:a4:02:b3:ef:1e:c5:ba:5f:
de:35:3d:b5:80:2d:43:c4:65:d5:07:46:15:9f:29:
cc:c5:43:d2:81:46:52:45:20:f3:92:73:1c:70:0a:
1f:ff:9c:81:85:fe:6b:5d:7c:6c:71:37:5a:8a:7c:
7b:d7:e9:2c:12:c8:18:9b:bb:32:b9:d0:b6:72:ec:
1d:81:b1:93:a7:ec:64:2f:12:bf:a5:5d:f3:17:2f:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:B8:95:6E:3A:54:AF:20:AA:66:64:4D:43:DE:64:89:EC:81:B9
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6a:f6:68:86:74:6c:e3:14:c4:1e:31:eb:40:1f:07:59:83:
f5:9e:aa:a3:78:93:86:df:3a:45:83:75:71:6a:3e:35:01:27:
3c:ff:02:54:69:b9:c8:50:3a:ed:ae:d8:94:03:d0:0b:e5:63:
08:0e:28:41:8b:02:d5:df:17:2f:5f:ca:e4:83:68:aa:ef:8f:
1a:e8:e7:66:29:25:de:c1:08:71:84:0c:14:7e:b9:b0:96:fd:
6c:d7:f2:0b:84:f4:91:f0:1d:3e:d5:13:fc:64:d1:10:74:42:
03:e1:16:00:87:2d:3e:56:a1:19:c3:7d:39:a5:b9:4e:d8:1b:
03:55:77:54:ca:eb:bf:42:2b:2e:04:1a:2e:5d:c4:c8:6e:b6:
e5:80:83:27:c0:ff:1e:46:44:de:72:61:1f:b2:23:bc:e6:4d:
82:47:65:d3:41:69:4b:d0:06:0e:e4:c0:e3:3c:c8:94:c4:89:
18:2f:f8:0b:cb:4a:5e:bb:cf:74:99:c7:8e:f1:6a:36:24:8b:
03:b3:1b:4e:2a:65:5b:97:ca:08:69:e6:fd:d3:94:82:76:05:
60:fd:83:78:64:91:6a:cd:a8:c2:b8:cd:cb:ba:c8:ab:66:53:
d0:71:6e:d9:82:fc:ac:8f:74:ba:a3:f6:3f:69:27:41:fd:f7:
f2:f2:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net