Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2PSABAwNK97+nZnOc5DA+lAN/fGKA8t8aawVQOHJ9aw=
Subject key identifier: B2:C2:FE:46:85:F0:61:4A:50:18:87:F9:D9:86:A1:C0:5A:A5:EF:2D
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 37178469FBDBB2D1E957C32671490177D056875D
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jan 2025 07:35:17 +0000
ROA not before: Fri 17 Jan 2025 07:30:17 +0000
ROA not after: Fri 16 Jan 2026 07:35:17 +0000
asID: 834
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:17:84:69:fb:db:b2:d1:e9:57:c3:26:71:49:01:77:d0:56:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 17 07:30:17 2025 GMT
Not After : Jan 16 07:35:17 2026 GMT
Subject: CN=B2C2FE4685F0614A501887F9D986A1C05AA5EF2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:fa:fb:d6:dc:c3:44:34:11:c7:53:f5:27:
98:29:26:e5:3b:4f:94:7f:e5:eb:27:ed:61:8a:d4:
80:31:7c:68:fb:d4:ef:6c:b5:22:2f:fa:ca:5f:f9:
72:a3:cc:4f:3c:6c:08:04:e3:19:78:13:52:ab:8c:
5b:39:24:8e:f5:5a:09:d6:f6:5f:96:00:1e:b0:be:
bd:dd:e5:16:71:67:f6:3d:2f:8f:58:4c:fd:82:16:
cf:06:92:64:81:25:04:07:3f:d2:da:9d:5e:7c:66:
65:fd:d5:89:e0:48:3d:28:81:11:7c:3b:2e:bc:d1:
f3:4a:02:16:de:6e:83:98:19:94:9d:9e:e1:72:e0:
99:32:61:e6:4d:93:af:59:74:7b:df:4b:26:fa:ce:
61:ba:04:37:ac:c5:a7:23:9d:14:12:8a:7b:0d:66:
4b:85:37:26:a6:ff:ac:d8:f8:97:3d:69:88:95:31:
eb:d0:0d:97:1f:fa:dc:33:99:d0:a8:a0:c9:e8:33:
9a:49:28:b0:6e:bc:9c:4d:84:c8:64:7a:00:5c:af:
8c:8d:5a:6b:93:44:c0:2b:7e:ed:da:04:f8:30:b7:
c8:83:94:40:7e:8b:f0:af:5c:b0:68:d2:68:9f:c2:
6e:2d:9f:37:3e:54:91:b5:30:68:ff:e9:49:05:f7:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:FE:46:85:F0:61:4A:50:18:87:F9:D9:86:A1:C0:5A:A5:EF:2D
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e5:c2:9d:92:d5:46:49:f4:1b:6b:4f:92:5c:ea:bd:1b:58:
80:18:ad:93:67:2b:62:9f:e2:86:93:7c:7b:13:9f:85:b9:a2:
cc:45:c9:e9:ea:e3:df:b3:ba:66:7e:a6:ac:37:5a:29:2d:06:
64:f4:75:ad:a6:9b:6b:b3:aa:70:e0:d5:32:cb:20:79:cd:48:
ac:50:4e:13:88:24:72:8d:c1:3c:d8:a2:e5:62:6d:72:01:98:
c7:b5:96:cc:5c:07:bc:9c:ec:f9:f7:8d:fb:12:ed:b0:b5:34:
e4:91:90:d3:db:77:a5:04:dd:63:46:dc:12:9d:5b:04:a4:6b:
df:4f:a6:82:8a:26:ce:2b:70:5c:da:5f:22:a8:b8:94:3f:ee:
de:97:51:ab:71:15:4f:5c:b2:47:ed:68:4b:6e:49:53:ab:ed:
f2:29:d5:00:4c:b9:ed:a8:36:20:4b:40:6a:5d:25:7c:75:8b:
8f:6d:a3:8c:5d:ed:55:c7:e0:78:23:42:86:16:11:6f:cb:e8:
9e:fa:33:41:72:9c:d0:90:f0:81:ed:0a:79:47:23:a3:77:f3:
82:2c:a5:4e:0f:c8:6a:c9:16:05:85:75:b7:95:9b:94:10:b7:
7b:ca:ea:3d:ae:02:28:7d:3d:57:99:0a:2c:fe:8a:11:c9:ae:
7d:18:40:87
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNxeEafvbstHpV8MmcUkBd9BWh10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNTAxMTcwNzMwMTdaFw0yNjAxMTYwNzM1MTdaMDMxMTAvBgNV
BAMTKEIyQzJGRTQ2ODVGMDYxNEE1MDE4ODdGOUQ5ODZBMUMwNUFBNUVGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGv/r71tzDRDQRx1P1J5gpJuU7
T5R/5esn7WGK1IAxfGj71O9stSIv+spf+XKjzE88bAgE4xl4E1KrjFs5JI71WgnW
9l+WAB6wvr3d5RZxZ/Y9L49YTP2CFs8GkmSBJQQHP9LanV58ZmX91YngSD0ogRF8
Oy680fNKAhbeboOYGZSdnuFy4JkyYeZNk69ZdHvfSyb6zmG6BDesxacjnRQSinsN
ZkuFNyam/6zY+Jc9aYiVMevQDZcf+twzmdCooMnoM5pJKLBuvJxNhMhkegBcr4yN
WmuTRMArfu3aBPgwt8iDlEB+i/CvXLBo0mifwm4tnzc+VJG1MGj/6UkF93iXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUssL+RoXwYUpQGIf52YahwFql7y0wHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlk
1jANBgkqhkiG9w0BAQsFAAOCAQEAXuXCnZLVRkn0G2tPklzqvRtYgBitk2crYp/i
hpN8exOfhbmizEXJ6erj37O6Zn6mrDdaKS0GZPR1raaba7OqcODVMssgec1IrFBO
E4gkco3BPNii5WJtcgGYx7WWzFwHvJzs+feN+xLtsLU05JGQ09t3pQTdY0bcEp1b
BKRr30+mgoomzitwXNpfIqi4lD/u3pdRq3EVT1yyR+1oS25JU6vt8inVAEy57ag2
IEtAal0lfHWLj22jjF3tVcfgeCNChhYRb8vonvozQXKc0JDwge0KeUcjo3fzgiyl
Tg/IaskWBYV1t5WblBC3e8rqPa4CKH09V5kKLP6KEcmufRhAhw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:42 2025 by rpki-client