Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232352e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3232352e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: hpsTF5ra8uUtxfAQlMg78M+iIdoqFFFusSPR+27U7X4=
Subject key identifier: 01:36:63:CE:CB:53:C3:07:97:F9:28:99:E9:F5:5A:7B:7E:0D:CD:41
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 44A9E0FB5DA981D9665E82147E232C3A7AFE8FDA
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232352e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:09:50 +0000
ROA not before: Tue 06 Jun 2023 09:04:50 +0000
ROA not after: Tue 04 Jun 2024 09:09:50 +0000
asID: 9125
IP address blocks: 109.111.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a9:e0:fb:5d:a9:81:d9:66:5e:82:14:7e:23:2c:3a:7a:fe:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:04:50 2023 GMT
Not After : Jun 4 09:09:50 2024 GMT
Subject: CN=013663CECB53C30797F92899E9F55A7B7E0DCD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:48:45:83:3e:8f:2f:9e:b5:8e:d5:b7:c6:
14:6c:ee:71:82:fe:0b:f5:7c:0b:1a:c2:77:b3:ac:
b5:c2:f3:d8:4c:58:ef:37:6f:12:90:16:d8:83:ef:
33:23:2c:91:e4:50:20:23:46:2d:e9:27:d9:0d:77:
f1:8a:1b:b0:83:56:04:11:1f:b0:83:6e:a8:14:19:
6e:3d:76:ba:70:87:45:be:dd:41:0e:4d:c3:52:2b:
bc:9f:24:8f:2c:45:c0:29:01:e6:e1:93:19:de:05:
9f:1d:de:df:66:f9:69:82:9e:78:97:ec:c2:cc:f3:
cb:7e:9e:80:71:f6:c4:5e:3f:b3:a6:c8:18:f4:b5:
5c:3f:16:47:11:0b:47:b5:7a:17:53:63:fd:30:7b:
26:f4:45:a8:78:4d:64:c7:d7:14:2b:df:44:c9:88:
fe:f5:c3:e0:4d:a7:e1:33:73:83:97:cd:aa:02:12:
74:1d:98:5a:12:08:89:bd:22:e8:5d:af:52:d7:44:
a5:2d:75:0d:e7:0c:20:76:73:46:af:19:0f:81:16:
ab:57:88:57:8a:97:91:60:23:fb:f8:ef:d7:fd:a1:
2a:3b:16:6a:73:7c:f5:f4:ae:a4:72:95:37:e0:e7:
4f:3c:17:e9:9a:08:56:c5:03:f0:5b:e7:1b:65:20:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:63:CE:CB:53:C3:07:97:F9:28:99:E9:F5:5A:7B:7E:0D:CD:41
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232352e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.225.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5a:58:3c:5d:fc:fe:88:44:5d:6c:35:69:cd:b9:d7:2a:bf:
0c:d7:03:1d:90:4d:65:b3:0b:c8:7d:d2:a6:e0:e6:56:58:17:
2c:22:7b:13:a8:df:87:4d:ac:c4:ca:a9:20:8f:31:8c:70:ad:
82:17:21:82:62:8b:b1:81:2e:d8:e5:76:fb:e6:ae:84:48:a2:
0a:23:8f:a7:ad:f1:8a:35:c4:f5:46:e6:45:77:9d:da:8b:dd:
10:24:28:1c:31:31:5e:c5:41:a4:e1:aa:fe:dc:05:91:f5:e9:
a6:03:4a:c4:d7:14:77:e1:10:73:78:a0:e0:a5:85:bd:c9:ce:
78:d5:92:37:aa:6e:e9:db:58:9a:5b:17:c3:b8:46:c9:3c:ec:
4a:b7:89:ae:26:9d:1c:37:1c:60:4e:77:d4:82:53:6f:51:a5:
12:a3:59:6e:37:81:00:8d:a8:73:c5:d3:f9:8f:08:c1:89:72:
cc:b8:88:7d:07:31:c3:30:9b:eb:af:06:2c:56:8e:e0:bb:6d:
ae:c0:70:41:54:cc:59:d6:a1:ff:81:5f:21:e9:be:8d:5b:4f:
08:43:5a:55:7e:ae:34:50:af:27:73:c3:16:30:be:e5:a2:fd:
1c:68:42:30:05:f9:36:9a:53:0b:51:c5:56:be:23:cd:2d:69:
db:ef:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:13:03 2025 by rpki-client