Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323037353934.roa
File: 3139352e3137392e3233322e302f32322d3234203d3e20323037353934.roa (raw, json)
Hash identifier: RHWMFpvkGEjoxQyomD8+uwb+sM6iltCY55ffmaSROfw=
Subject key identifier: 30:5D:8F:2B:B6:7B:19:A3:4E:C6:06:CC:60:90:80:B5:F0:D1:B7:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EFE5CC3730677ED1D77311F0A5C49AA5ACECD6B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323037353934.roa
Signing time: Wed 02 Apr 2025 09:45:56 +0000
ROA not before: Wed 02 Apr 2025 09:40:56 +0000
ROA not after: Wed 01 Apr 2026 09:45:56 +0000
asID: 207594
IP address blocks: 195.179.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fe:5c:c3:73:06:77:ed:1d:77:31:1f:0a:5c:49:aa:5a:ce:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 09:40:56 2025 GMT
Not After : Apr 1 09:45:56 2026 GMT
Subject: CN=305D8F2BB67B19A34EC606CC609080B5F0D1B760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:ed:46:9a:aa:73:01:88:02:9f:19:12:02:
76:b6:58:42:e7:f4:8c:0c:71:88:ce:1d:1b:02:42:
3d:15:32:34:eb:01:6c:3d:59:c8:6b:25:37:77:8f:
60:a3:2a:12:c8:58:09:a0:ca:b1:e3:0c:f8:ca:4f:
8e:01:f7:5d:c1:a4:d9:8c:4c:16:8f:89:50:db:90:
ba:b4:c2:5a:14:ff:81:57:23:d3:c2:00:62:77:08:
79:82:af:2b:e8:98:f5:1f:a4:7d:ec:f6:69:1f:2b:
a8:a4:19:a9:bd:a0:05:21:fd:3a:00:c7:fa:74:46:
ac:e6:34:29:2f:20:3e:57:36:f7:ae:20:87:55:ad:
75:f5:7a:62:ba:7f:f0:85:95:77:40:c5:74:62:38:
5f:f0:89:02:89:63:11:a9:13:83:f7:c0:3b:a0:ef:
e0:ca:18:51:18:a5:ff:b2:f3:28:19:9a:5b:d0:fe:
50:1d:16:71:5b:8d:14:bc:52:aa:cc:b7:e7:7b:b6:
80:7b:c3:35:d2:81:71:86:58:7e:1c:78:7f:6b:00:
dd:36:77:cc:b1:94:4e:4b:bb:06:ac:a7:88:cd:10:
11:fa:c2:cf:c2:3f:12:a5:3e:c1:e7:05:e0:87:00:
a4:1b:52:13:0c:e2:bf:ae:0e:37:23:b8:45:7c:46:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:8F:2B:B6:7B:19:A3:4E:C6:06:CC:60:90:80:B5:F0:D1:B7:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233322e302f32322d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.232.0/22
Signature Algorithm: sha256WithRSAEncryption
59:4f:61:77:00:eb:4e:ae:35:7f:88:8b:bc:43:b2:89:c5:9d:
14:18:4d:62:d7:d1:81:bb:c2:d7:07:52:7c:59:a2:3c:e9:08:
56:4f:36:56:95:c4:d5:53:8d:e7:99:18:f4:dd:70:69:60:69:
0c:bd:cb:c7:70:91:16:ee:17:05:77:6e:76:91:cf:f1:3c:cf:
05:62:71:68:db:5d:39:05:7c:a4:42:3d:93:f0:f4:d5:aa:52:
dd:fd:ef:16:3c:b6:c2:a8:f7:b8:40:52:13:2d:1b:ff:40:c2:
3e:57:6b:b5:27:fb:41:05:08:98:46:99:9e:d9:a9:93:a9:1f:
a2:01:93:ae:46:6f:55:4f:b4:bf:aa:b6:32:70:9c:0f:b3:95:
76:06:ca:8b:43:ff:50:e8:bf:ba:3c:70:43:6e:87:77:c6:c6:
85:b5:e0:74:f4:95:a6:68:77:16:b1:2e:75:6f:7a:45:52:6c:
5e:8f:a2:3f:ae:1b:df:54:58:7e:e2:85:47:7b:86:cc:bd:b7:
5f:45:21:99:89:e2:91:1b:d5:33:4b:14:41:1c:c2:1f:c6:5d:
ce:a8:8c:55:4d:62:b5:ab:cf:ae:e1:ce:1f:f5:94:56:56:b3:
ef:cc:83:0e:3b:92:23:41:a7:90:37:2a:ed:80:7d:7c:4e:86:
be:d4:9d:2a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUPv5cw3MGd+0ddzEfClxJqlrOzWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MDIwOTQwNTZaFw0yNjA0MDEwOTQ1NTZaMDMxMTAvBgNV
BAMTKDMwNUQ4RjJCQjY3QjE5QTM0RUM2MDZDQzYwOTA4MEI1RjBEMUI3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOu1GmqpzAYgCnxkSAna2WELn
9IwMcYjOHRsCQj0VMjTrAWw9WchrJTd3j2CjKhLIWAmgyrHjDPjKT44B913BpNmM
TBaPiVDbkLq0wloU/4FXI9PCAGJ3CHmCryvomPUfpH3s9mkfK6ikGam9oAUh/ToA
x/p0RqzmNCkvID5XNveuIIdVrXX1emK6f/CFlXdAxXRiOF/wiQKJYxGpE4P3wDug
7+DKGFEYpf+y8ygZmlvQ/lAdFnFbjRS8UqrMt+d7toB7wzXSgXGGWH4ceH9rAN02
d8yxlE5Luwasp4jNEBH6ws/CPxKlPsHnBeCHAKQbUhMM4r+uDjcjuEV8Ru1lAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUMF2PK7Z7GaNOxgbMYJCAtfDRt2AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy
MzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzkzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsOz6DANBgkqhkiG9w0BAQsFAAOCAQEAWU9hdwDrTq41f4iLvEOyicWdFBhN
YtfRgbvC1wdSfFmiPOkIVk82VpXE1VON55kY9N1waWBpDL3Lx3CRFu4XBXdudpHP
8TzPBWJxaNtdOQV8pEI9k/D01apS3f3vFjy2wqj3uEBSEy0b/0DCPldrtSf7QQUI
mEaZntmpk6kfogGTrkZvVU+0v6q2MnCcD7OVdgbKi0P/UOi/ujxwQ26Hd8bGhbXg
dPSVpmh3FrEudW96RVJsXo+iP64b31RYfuKFR3uGzL23X0UhmYnikRvVM0sUQRzC
H8ZdzqiMVU1itavPruHOH/WUVlaz78yDDjuSI0GnkDcq7YB9fE6GvtSdKg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:33 2025 by rpki-client on console.sobornost.net