Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232372e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3232372e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: Dch2YVj4STZ1R2JSaZdQDIuzzuCOcze/AbabsmW2OjU=
Subject key identifier: 5D:1C:6D:C4:6B:5A:D8:9F:B6:48:D7:49:1F:36:32:12:E2:9A:83:A6
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 152D03A4035421882EB7D7343013FE53DB1F6D0C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232372e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:10:08 +0000
ROA not before: Tue 06 Jun 2023 09:05:08 +0000
ROA not after: Tue 04 Jun 2024 09:10:08 +0000
asID: 9125
IP address blocks: 109.111.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2d:03:a4:03:54:21:88:2e:b7:d7:34:30:13:fe:53:db:1f:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:05:08 2023 GMT
Not After : Jun 4 09:10:08 2024 GMT
Subject: CN=5D1C6DC46B5AD89FB648D7491F363212E29A83A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:2b:39:95:85:69:1e:28:60:95:fb:43:3c:
90:4b:dd:84:4e:27:d1:79:22:af:f1:68:57:3f:7e:
05:3d:1e:79:85:5d:40:e1:72:e0:dd:70:e2:07:95:
f7:67:15:81:e9:17:4f:2b:64:a6:af:5a:91:92:95:
58:32:26:f8:85:90:cc:38:6c:ff:07:73:25:e9:7e:
8b:9a:d5:f6:95:a5:00:40:22:14:f6:0a:aa:f5:03:
95:f3:7a:b8:6e:be:2e:1d:2b:c2:a2:d5:e3:61:fe:
29:b6:b2:03:b3:6e:c3:02:ef:4f:9b:49:f8:05:bc:
43:69:a1:0c:9d:5c:8c:cb:55:83:d0:26:1f:7b:8a:
d5:f8:83:6d:d5:df:5d:88:ba:1c:b3:09:1d:18:88:
42:74:d2:e1:bf:47:6c:41:3c:43:19:44:31:e9:34:
59:7b:95:29:47:e8:2a:27:72:cf:24:b1:14:0d:83:
09:34:4e:e2:92:16:56:91:df:09:76:4e:fa:86:94:
19:6c:8b:16:84:8b:69:cf:28:58:b9:f7:c8:a0:52:
f9:39:03:5b:5c:6f:c8:fd:a2:15:1e:f5:fc:fe:62:
83:ad:91:d9:46:66:e4:20:76:7c:91:65:ae:00:f6:
f7:84:83:66:8d:ac:db:df:6a:c2:e4:71:a2:61:b0:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:6D:C4:6B:5A:D8:9F:B6:48:D7:49:1F:36:32:12:E2:9A:83:A6
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232372e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:51:29:97:cd:3e:58:18:d1:7e:ed:e6:ee:25:57:92:05:b5:
97:54:29:ca:77:72:e2:7c:4a:7d:cb:94:e1:83:33:c6:b6:b2:
df:3a:e4:30:fd:ed:1a:fe:9d:69:51:e5:b3:fb:f0:85:e8:4d:
f6:ad:2f:69:45:6d:71:b3:0a:e9:51:8d:59:50:7b:59:52:b8:
b4:ca:3b:78:a0:fd:a0:b8:a7:c6:d4:1d:5c:56:0c:b2:b4:4f:
d2:d2:af:85:70:f4:5d:81:9c:ff:5d:bb:dd:39:0f:9d:e9:34:
f8:9b:4d:9d:f2:50:40:49:92:15:40:00:b5:bd:9b:d7:f3:ba:
1c:86:29:b1:00:f2:34:33:27:48:fc:12:59:bd:55:b0:73:21:
0f:be:05:79:16:e5:3b:17:ce:3b:71:d2:94:dd:35:2c:f8:a4:
77:4b:9f:89:53:f3:ba:b1:81:af:3d:ea:6b:11:10:a4:78:60:
dd:eb:29:00:28:62:c1:04:43:6e:5c:43:c5:f2:19:35:b7:51:
c5:6b:9d:ee:b7:b6:89:a4:77:9b:af:a1:a1:b0:37:1f:0b:07:
5e:8b:a0:51:aa:83:e7:9c:11:6b:bf:e4:5b:a0:a9:49:d6:26:
3e:91:83:59:ab:56:52:81:72:d8:9c:61:b5:2e:11:ee:34:21:
e0:2d:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:31 2025 by rpki-client