Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232382e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3232382e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: SNc7A5RedPsFtt72hqeZ5sGaOczdjGMxhGBu9fO/4+o=
Subject key identifier: 49:C2:F2:72:33:76:32:C5:D5:2F:63:87:93:74:C2:C7:EB:73:6D:EB
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 01D5C1FCAC4AA3811148D18FE006F308AA6BEC4E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232382e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:10:15 +0000
ROA not before: Tue 06 Jun 2023 09:05:15 +0000
ROA not after: Tue 04 Jun 2024 09:10:15 +0000
asID: 9125
IP address blocks: 109.111.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d5:c1:fc:ac:4a:a3:81:11:48:d1:8f:e0:06:f3:08:aa:6b:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:05:15 2023 GMT
Not After : Jun 4 09:10:15 2024 GMT
Subject: CN=49C2F272337632C5D52F63879374C2C7EB736DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:d2:09:4e:74:1b:79:97:15:73:0a:ae:b8:
0e:a7:3d:76:86:36:be:66:48:76:76:d4:06:79:28:
8a:3c:e5:8d:dd:f5:e6:66:fc:b9:6a:5c:98:ec:4f:
04:5b:eb:90:58:d9:d5:1d:cb:b5:a9:7c:5d:0f:81:
b0:fc:2f:75:13:32:78:d5:ab:4f:bc:2f:67:e9:30:
02:7b:db:d7:ed:cb:7e:53:63:f9:5d:5e:61:31:5f:
ad:45:f3:3e:09:86:53:4e:47:20:51:c4:06:5a:6b:
df:44:3e:ba:a1:1d:fc:e1:20:1f:a8:21:ea:07:cd:
ba:1f:59:b2:18:0f:8a:ff:5e:07:f8:6f:3c:3d:59:
61:eb:97:18:18:fb:e9:b2:88:c6:16:57:7c:79:4d:
35:89:5c:16:89:5f:eb:f7:80:0a:95:69:66:84:07:
e6:8b:91:6a:9f:c7:88:bd:3a:13:45:46:81:4d:28:
e1:50:67:6b:c1:71:de:ab:16:67:50:b3:10:dc:54:
12:a7:64:c0:51:99:7f:57:44:e6:03:13:d5:e3:4c:
95:8b:28:46:b6:f6:d0:eb:ae:6c:ea:34:83:50:1c:
6a:64:d9:03:82:18:b8:2f:72:cf:df:56:45:27:ae:
94:de:99:e8:43:9b:8a:7d:dc:68:96:58:56:54:f1:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:F2:72:33:76:32:C5:D5:2F:63:87:93:74:C2:C7:EB:73:6D:EB
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3232382e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.228.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cd:7e:09:7d:b1:d3:07:cf:53:9f:9b:89:00:ee:9c:3d:9e:
fe:30:78:89:f2:76:27:0d:61:7e:1f:d2:ac:f3:13:fb:be:af:
87:6d:8b:68:1e:d2:da:33:19:7f:6e:12:4a:ad:a9:a0:7b:9d:
a7:3b:a8:ea:1d:7c:c9:b4:9b:17:4f:00:74:ef:a2:e4:2b:85:
62:fc:cf:1e:49:0a:77:e2:c1:c8:cb:80:e8:3c:0e:c5:1d:db:
79:98:d4:33:9d:e9:f8:48:c7:97:6a:e6:bc:cb:20:91:33:66:
f1:f5:8d:de:14:ea:f9:28:83:a7:90:27:86:56:49:53:b7:4c:
fa:cc:fc:e1:fd:bf:48:05:bf:f9:72:94:0d:0a:32:01:cf:72:
86:e1:64:7a:21:d6:1e:dc:b5:5b:13:23:3f:b1:10:94:67:9b:
1e:ca:70:70:f4:8c:35:5c:33:15:25:da:88:17:6c:9e:d6:79:
e8:bd:d0:da:b8:96:c3:34:ad:43:09:e9:22:b8:06:be:10:86:
35:ab:90:dc:27:15:89:74:3e:02:e2:8a:77:68:b0:06:96:20:
65:4a:4b:8f:5a:8d:9c:ff:5b:cd:34:8d:f0:40:74:4c:ff:9a:
2a:2d:09:2a:83:cc:ed:5b:f5:5d:7b:ca:ed:cc:bb:2c:b1:72:
60:a5:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:29:18 2025 by rpki-client