Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232362e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3232362e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: RifFlRHUeo/vPdSsiYEBbAfc9eRR9HwnEljCQBcLwFA=
Subject key identifier: 2E:79:63:9B:B4:CE:32:26:BE:3A:F5:46:C5:8F:FA:73:E9:46:BA:CC
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 723B9BC82A3CF448F84755EC4F8F5B14A146EBF8
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232362e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:09:58 +0000
ROA not before: Tue 06 Jun 2023 09:04:58 +0000
ROA not after: Tue 04 Jun 2024 09:09:58 +0000
asID: 9125
IP address blocks: 109.111.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3b:9b:c8:2a:3c:f4:48:f8:47:55:ec:4f:8f:5b:14:a1:46:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:04:58 2023 GMT
Not After : Jun 4 09:09:58 2024 GMT
Subject: CN=2E79639BB4CE3226BE3AF546C58FFA73E946BACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7a:0b:b6:82:26:86:a8:51:dc:6b:10:6f:30:
a8:bf:c6:43:13:a3:41:d2:4f:4d:db:34:f1:ea:e4:
2c:a5:7b:c5:f9:51:94:72:7d:ed:05:06:a8:56:82:
b2:9d:08:ab:8c:1d:c0:31:80:f7:dd:f5:fd:3c:a1:
7a:6a:4d:3a:ca:13:91:07:08:46:3c:4d:a0:f5:22:
6c:62:77:57:fb:94:78:85:e8:96:f5:b6:85:93:ea:
0d:ca:80:08:5d:94:38:b1:5d:2d:36:c3:89:b7:76:
65:30:29:cc:f5:f3:78:34:19:c7:45:54:41:23:37:
08:34:6f:91:ef:00:13:63:86:4a:48:a5:30:1b:d0:
c1:ed:24:26:da:5c:cd:5e:8f:17:16:32:d3:43:de:
ab:0f:68:f2:2f:67:7c:33:89:d4:fb:62:c9:91:4c:
38:f8:9c:ef:39:b7:d0:ab:38:fc:d8:fe:e8:da:2d:
d5:7b:0a:c7:71:70:93:2b:ea:43:4a:8f:7e:b8:73:
18:20:bb:3a:03:35:3c:fe:3f:b8:af:ea:61:f4:c7:
b5:14:06:53:77:0b:7e:a4:c8:53:d5:21:c7:86:eb:
ae:30:d0:60:60:3d:d6:d6:0e:6d:6e:fb:59:5b:9e:
82:e6:c9:64:de:09:d9:f6:61:39:d4:58:95:fa:0d:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:63:9B:B4:CE:32:26:BE:3A:F5:46:C5:8F:FA:73:E9:46:BA:CC
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232362e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8e:e7:ec:45:b5:bd:42:65:ec:30:71:48:9d:c9:28:26:4d:
85:ea:f8:eb:35:ef:de:b1:50:61:bd:95:9d:63:32:18:6e:ed:
3d:8d:7b:09:61:04:d9:ca:d6:20:55:dd:17:49:4a:c1:92:a3:
ad:15:ef:50:40:d3:75:7f:c1:19:8d:f6:61:2a:be:70:3c:29:
c5:e4:78:80:a1:90:0b:6b:a6:77:f4:64:00:d0:8d:6e:db:04:
2f:fc:b0:a3:92:0c:70:42:de:fc:01:51:c5:e2:21:6d:f0:93:
53:bc:11:ef:6d:bd:e0:be:0d:17:46:5d:fa:a1:20:b3:56:46:
d0:fe:f7:97:9a:20:ef:e5:35:cf:78:b5:56:35:a5:a7:4e:c7:
ae:c3:4f:54:ef:bf:9c:e9:65:43:da:c0:be:7a:eb:1f:ad:25:
05:93:4d:e6:79:8f:d0:fa:69:e5:13:c6:50:be:7b:37:68:5f:
70:d3:71:88:2a:43:c6:8c:79:9a:2e:26:25:86:c2:66:53:a3:
0c:7f:88:93:68:96:bf:b1:e3:dd:52:bb:c7:41:e1:db:95:92:
f4:ee:fd:63:af:13:82:f2:ce:df:d6:ff:af:f6:90:4f:f4:b3:
14:37:64:3d:0d:93:e9:e9:20:fd:6b:bd:b3:85:6a:17:7e:67:
dd:0e:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:23:56 2025 by rpki-client