Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232342e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3232342e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: P63Zqj6fbIjeTweYWQAojQf+PxBN/VAanVBrq0Wlvsw=
Subject key identifier: 2C:66:2B:80:05:F3:B5:06:FB:C1:5C:EC:09:C5:6F:26:A1:EC:15:B4
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 1F120CD84E64D8F05CF068E78766B7CD408CF055
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232342e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:09:35 +0000
ROA not before: Tue 06 Jun 2023 09:04:35 +0000
ROA not after: Tue 04 Jun 2024 09:09:35 +0000
asID: 9125
IP address blocks: 109.111.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:12:0c:d8:4e:64:d8:f0:5c:f0:68:e7:87:66:b7:cd:40:8c:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:04:35 2023 GMT
Not After : Jun 4 09:09:35 2024 GMT
Subject: CN=2C662B8005F3B506FBC15CEC09C56F26A1EC15B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:c3:ff:27:dc:78:5e:84:12:9c:fa:8b:1c:
4f:1f:e9:fe:61:51:6f:ec:97:68:38:55:0a:26:6f:
db:72:77:cb:81:6e:15:5b:20:e8:58:4a:92:d5:28:
13:18:2d:e3:4d:b9:62:ad:76:9e:b7:ab:53:9a:18:
a4:9f:cc:ae:8e:de:86:26:e6:00:c8:37:e3:1d:1d:
20:6a:09:c6:d9:c3:62:90:88:e0:9c:c4:31:99:7a:
dc:00:a1:94:e1:cc:c7:44:e3:90:75:98:cc:ae:33:
c6:45:fc:89:64:e1:94:41:03:8f:43:3b:78:8b:72:
11:7c:bb:d5:f2:55:60:46:42:54:87:6d:30:27:66:
41:f4:a7:a5:6d:a9:8b:27:06:eb:b5:7b:0d:aa:14:
d5:ea:f6:bb:fd:b4:35:bc:37:03:28:47:57:08:2f:
c4:a2:d9:db:6e:85:0d:0d:73:73:e7:8b:56:f6:88:
bb:6d:b2:88:cd:e9:d5:4a:0f:da:bd:90:99:a3:80:
2f:88:30:4c:41:9d:c3:a1:d6:0e:31:84:af:94:3b:
94:75:56:ad:81:f0:1d:58:d7:27:c6:a5:24:9f:48:
9a:a7:40:1b:c0:23:cb:d5:05:39:96:39:19:ea:fb:
b9:e8:0a:fc:24:45:19:03:8f:0c:86:a5:5f:e1:a6:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:2B:80:05:F3:B5:06:FB:C1:5C:EC:09:C5:6F:26:A1:EC:15:B4
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232342e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a4:b0:68:18:43:b0:d1:ea:35:b9:1c:46:9d:ea:b1:1b:95:
fa:da:0a:8d:b2:f0:7a:e1:13:5d:9c:2d:08:a7:1e:d9:65:d3:
fd:6b:4c:a1:df:69:d4:b7:9c:04:fa:0e:4d:64:40:f5:aa:b8:
64:86:cb:e3:83:26:82:c3:f3:f4:20:0e:06:a6:f1:2e:bc:c3:
07:da:d1:b5:0b:68:34:53:8e:80:0f:80:d8:bb:3c:a1:e9:be:
f1:6b:4d:b5:7d:fe:46:92:4c:0e:45:26:da:47:29:42:9f:74:
2c:16:38:e1:08:db:a2:8f:a4:56:b3:02:1e:1f:bf:77:ea:bc:
1f:69:c8:40:e6:10:8a:20:74:54:37:94:fc:bd:05:3b:4b:8b:
7a:67:47:a8:aa:b6:d8:3c:4f:7b:c3:cb:a0:47:b4:22:d6:0c:
7b:f4:cc:4a:89:72:7d:9e:8f:60:a7:a8:29:08:b0:d0:c9:52:
87:aa:e8:c4:7f:7a:41:64:06:96:e7:b3:3c:29:e8:78:2d:00:
d9:01:f9:3f:35:25:c0:77:07:44:3a:aa:d6:eb:bc:ba:a5:bc:
5f:5a:a2:88:19:43:13:e6:93:4d:a3:ed:4d:a0:cb:62:78:01:
be:db:da:f7:56:d1:b3:75:90:d8:1e:b7:e2:9a:49:b0:a0:db:
96:13:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:11:01 2025 by rpki-client