Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233302e302f32332d3233203d3e2039313235.roa
File: 3130392e3131312e3233302e302f32332d3233203d3e2039313235.roa (raw, json)
Hash identifier: thQy55uD5vdgSLqiQC+Pv4A84UtHO/3mQFb/m16xYk4=
Subject key identifier: 58:2E:6D:26:8A:04:12:F2:A7:3E:55:0C:0A:48:75:AF:FE:18:85:06
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 5180B4BBB54987F41D9D577FE6DD172F97F1119E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233302e302f32332d3233203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:10:34 +0000
ROA not before: Tue 06 Jun 2023 09:05:34 +0000
ROA not after: Tue 04 Jun 2024 09:10:34 +0000
asID: 9125
IP address blocks: 109.111.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:80:b4:bb:b5:49:87:f4:1d:9d:57:7f:e6:dd:17:2f:97:f1:11:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:05:34 2023 GMT
Not After : Jun 4 09:10:34 2024 GMT
Subject: CN=582E6D268A0412F2A73E550C0A4875AFFE188506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:15:8c:9b:03:e3:02:9a:fa:80:ed:6f:ec:
98:bb:8f:91:4c:aa:9f:28:e9:b2:61:64:64:06:59:
e1:24:70:a7:73:d2:15:d9:40:37:37:ce:ad:02:5d:
a2:87:db:bb:76:17:bb:48:86:39:ac:59:17:15:02:
a0:6c:7f:30:40:30:bb:8d:39:6d:14:1b:c3:94:a3:
7d:a5:01:45:8a:48:38:01:7d:31:03:70:30:23:26:
de:aa:87:17:e8:b6:53:1f:0d:56:b1:4d:ac:b9:a2:
4a:32:11:9c:3a:f3:57:52:ec:63:8f:67:85:62:06:
79:5e:31:ab:c2:02:48:92:e5:cd:34:7c:c3:2b:08:
3b:37:e2:ed:29:61:c8:10:a0:7f:71:49:81:c4:3f:
20:0f:53:29:b2:13:9c:ca:4f:c3:3c:9b:df:eb:63:
33:df:7a:ae:ca:8d:f1:0f:ef:76:6e:7e:45:c7:af:
33:17:ba:8b:24:6e:be:72:33:13:d1:a8:d1:3c:93:
b6:c5:8d:7d:5a:79:ac:6d:54:8f:0c:96:fe:b9:65:
c8:e6:7a:8b:52:43:8e:f0:2b:60:38:b9:ab:4f:5c:
d4:46:52:73:5a:17:3e:d3:33:68:a8:ee:6c:9e:bd:
bb:7a:32:e3:49:d1:63:03:99:5b:f8:d6:e8:a3:8d:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:6D:26:8A:04:12:F2:A7:3E:55:0C:0A:48:75:AF:FE:18:85:06
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233302e302f32332d3233203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
63:dc:53:8a:ec:a3:77:50:ab:db:5c:5c:f9:fe:41:2c:b7:cb:
71:97:37:9a:ea:33:8e:f6:c7:e0:68:f5:f7:de:1c:77:be:1b:
1b:99:a7:f7:09:f6:4b:4d:aa:68:4a:81:68:ff:d1:78:1e:c1:
e5:af:17:26:9f:72:89:01:0e:1c:40:8e:d9:11:8c:c4:84:2e:
6b:20:13:40:e9:36:f7:a6:89:92:85:fb:bb:71:16:1c:95:2b:
35:59:21:26:65:bc:d9:d8:95:fa:63:5a:fe:42:e6:d2:ea:91:
f8:f8:a7:5d:3b:81:6a:6a:90:81:b6:73:82:0e:d3:49:1d:2a:
c6:4a:ad:59:9b:0b:05:75:d6:f1:0f:7b:92:c6:c8:ea:47:03:
45:8a:0d:0c:7c:3e:bc:20:1c:4e:b2:4c:a9:98:72:ce:58:4e:
32:94:77:30:90:86:2f:6b:96:6c:8a:25:94:56:37:37:1d:b5:
16:52:5f:70:7e:b4:e1:5d:57:63:dd:17:c2:50:82:26:7a:20:
ce:44:e4:3b:90:54:f1:74:88:57:51:e9:74:29:2c:be:1f:91:
28:8a:c7:36:0e:f8:c7:03:b2:da:7e:db:3a:93:7a:13:4d:52:
17:4e:a2:a0:d8:64:bc:2b:e3:42:31:9a:4c:a2:d2:7a:11:05:
27:44:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:47 2025 by rpki-client