Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233322e302f32322d3232203d3e2039313235.roa
File: 3130392e3131312e3233322e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: BwA3YU0i/4mqvDrhhzR0ovzxBK1vIt43HEDZO1cekMg=
Subject key identifier: E2:BD:08:C1:E1:85:EF:0C:E3:32:3B:17:E9:5A:4A:23:10:98:C9:13
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 586B1A1DEA41521DF2B90243D4EC9186AA685A46
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233322e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:10:42 +0000
ROA not before: Tue 06 Jun 2023 09:05:42 +0000
ROA not after: Tue 04 Jun 2024 09:10:42 +0000
asID: 9125
IP address blocks: 109.111.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6b:1a:1d:ea:41:52:1d:f2:b9:02:43:d4:ec:91:86:aa:68:5a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:05:42 2023 GMT
Not After : Jun 4 09:10:42 2024 GMT
Subject: CN=E2BD08C1E185EF0CE3323B17E95A4A231098C913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:09:5b:52:48:7e:8e:6f:25:b7:3c:b3:2c:
d4:41:17:42:87:5b:3f:d0:07:4b:e1:13:22:20:ea:
94:5b:a7:b6:f7:d1:50:93:75:26:07:11:be:95:da:
8e:f9:1e:03:e8:d9:aa:6d:8a:a5:42:74:b7:b8:36:
8c:c2:28:9d:41:42:49:62:00:39:b0:2f:9f:97:38:
e0:ad:df:6c:ce:21:25:ab:77:a6:ba:8e:9b:ee:a5:
cd:8b:e3:7d:c2:2d:d4:35:31:4f:2f:d0:db:d8:83:
75:fa:0c:07:97:2e:aa:c2:6c:b2:de:4e:5a:53:c4:
a9:af:b7:6c:de:b3:21:9f:fd:07:3f:ca:50:85:65:
6d:b8:fa:54:5b:bf:ef:5a:04:52:81:eb:e3:87:6c:
20:ea:b7:6a:76:d2:10:f0:67:a0:2b:ce:ca:65:55:
d9:0d:e5:a2:ea:d4:61:37:ab:1c:40:63:6b:0a:4d:
5d:57:76:0c:60:10:14:43:b9:6a:06:00:b3:0d:bc:
3f:a7:3d:37:ee:76:4e:31:07:a6:97:66:64:04:f7:
bc:ee:eb:c7:12:ed:57:16:32:cf:6e:c0:80:19:5b:
f6:15:60:05:00:4f:db:17:04:6c:dd:65:ae:ef:05:
51:8d:8a:d8:39:10:eb:76:73:58:16:db:0f:33:03:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BD:08:C1:E1:85:EF:0C:E3:32:3B:17:E9:5A:4A:23:10:98:C9:13
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233322e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:f9:d2:17:6a:39:ef:af:80:83:9f:fb:40:d2:28:44:1e:e1:
e7:9b:ee:ce:45:1f:4c:47:23:6a:f8:c0:2e:cd:01:8f:f3:36:
6f:54:c7:5d:76:0a:59:31:ba:e4:3f:d4:a7:83:c2:b0:50:05:
e0:33:a7:31:be:34:de:38:2e:d4:34:17:cf:84:5d:a5:ae:ff:
ac:65:47:5c:88:0b:70:8b:71:04:11:59:2e:77:33:88:28:93:
85:8d:63:21:e4:93:95:24:6f:c1:fe:6a:f0:a0:8a:52:9a:67:
4b:ca:eb:a1:73:9e:99:2f:40:3d:c0:57:a7:84:e1:00:7e:d9:
c6:00:85:a6:d5:6f:7e:30:3e:1e:03:6b:6a:56:5e:37:77:5d:
e1:9b:e4:1d:8a:5d:24:72:ff:d1:97:0a:dc:68:66:fa:01:48:
bc:5e:a4:3f:02:5f:ae:af:b6:22:ef:bc:26:52:6f:e9:4f:cb:
c7:67:6c:21:4a:19:e1:95:84:01:41:81:26:f5:dc:f2:8b:97:
69:b7:fd:af:08:86:13:16:e4:a2:dc:70:f4:e7:4e:54:6f:07:
b4:e1:f8:dd:d3:ee:7a:9a:d5:7a:d0:43:6e:eb:86:4f:5e:74:
67:08:a5:fc:b9:c9:a8:56:d0:98:13:04:b2:8a:aa:18:b1:c4:
24:2e:47:79
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWGsaHepBUh3yuQJD1OyRhqpoWkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA1NDJaFw0yNDA2MDQwOTEwNDJaMDMxMTAvBgNV
BAMTKEUyQkQwOEMxRTE4NUVGMENFMzMyM0IxN0U5NUE0QTIzMTA5OEM5MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufglbUkh+jm8ltzyzLNRBF0KH
Wz/QB0vhEyIg6pRbp7b30VCTdSYHEb6V2o75HgPo2aptiqVCdLe4NozCKJ1BQkli
ADmwL5+XOOCt32zOISWrd6a6jpvupc2L433CLdQ1MU8v0NvYg3X6DAeXLqrCbLLe
TlpTxKmvt2zesyGf/Qc/ylCFZW24+lRbv+9aBFKB6+OHbCDqt2p20hDwZ6Arzspl
VdkN5aLq1GE3qxxAY2sKTV1XdgxgEBRDuWoGALMNvD+nPTfudk4xB6aXZmQE97zu
68cS7VcWMs9uwIAZW/YVYAUAT9sXBGzdZa7vBVGNitg5EOt2c1gW2w8zA7Q1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU4r0IweGF7wzjMjsX6VpKIxCYyRMwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy
MzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
bW/oMA0GCSqGSIb3DQEBCwUAA4IBAQCd+dIXajnvr4CDn/tA0ihEHuHnm+7ORR9M
RyNq+MAuzQGP8zZvVMdddgpZMbrkP9Sng8KwUAXgM6cxvjTeOC7UNBfPhF2lrv+s
ZUdciAtwi3EEEVkudzOIKJOFjWMh5JOVJG/B/mrwoIpSmmdLyuuhc56ZL0A9wFen
hOEAftnGAIWm1W9+MD4eA2tqVl43d13hm+Qdil0kcv/RlwrcaGb6AUi8XqQ/Al+u
r7Yi77wmUm/pT8vHZ2whShnhlYQBQYEm9dzyi5dpt/2vCIYTFuSi3HD0505Ubwe0
4fjd0+56mtV60ENu64ZPXnRnCKX8ucmoVtCYEwSyiqoYscQkLkd5
-----END CERTIFICATE-----
Generated at Thu May 8 13:23:04 2025 by rpki-client