Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233362e302f32322d3232203d3e2039313235.roa
File: 3130392e3131312e3233362e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: juQu9dqaOfJAo2wMyahAwPjp4nI8DOHc2pN1znufm8U=
Subject key identifier: 8B:50:1F:F0:31:51:BC:78:41:FB:C2:1A:8B:DE:61:C6:57:0F:D2:20
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 065BB4F30C7A7E59CFCC07EFD28086673D3A8E2B
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233362e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:10:49 +0000
ROA not before: Tue 06 Jun 2023 09:05:49 +0000
ROA not after: Tue 04 Jun 2024 09:10:49 +0000
asID: 9125
IP address blocks: 109.111.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:b4:f3:0c:7a:7e:59:cf:cc:07:ef:d2:80:86:67:3d:3a:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:05:49 2023 GMT
Not After : Jun 4 09:10:49 2024 GMT
Subject: CN=8B501FF03151BC7841FBC21A8BDE61C6570FD220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:af:02:1e:75:9d:aa:8f:bc:54:4a:73:36:
0b:19:34:23:94:72:40:14:6a:b2:47:98:a4:04:55:
03:94:71:45:57:b4:c8:d3:38:a0:58:8e:53:df:a8:
3b:8a:f7:8e:8d:e9:fa:f9:5f:72:ae:c0:cf:b9:c1:
a2:a3:37:5f:cd:b9:fa:be:52:e4:2a:7b:22:e3:63:
92:b6:54:54:32:ec:37:f2:0f:70:59:b5:34:ec:cd:
de:63:c7:00:87:93:14:a5:52:50:2c:36:86:71:62:
9d:09:8c:ef:9c:36:0f:10:02:bd:67:01:7f:bc:1b:
97:c3:04:ba:bf:22:c2:91:30:69:34:16:bd:e2:39:
12:32:59:7e:67:85:65:ce:e5:bb:1b:08:c0:ce:a6:
cd:fe:91:36:3c:a1:6a:0a:9c:1c:a0:40:04:df:9d:
c2:bc:af:94:f7:af:0d:b2:86:36:92:b1:a2:60:52:
6e:19:54:52:96:54:ad:34:7e:28:5f:e6:21:5f:d7:
b4:22:19:b5:35:24:09:58:ff:69:a6:83:90:34:f9:
6d:c9:12:86:e2:d0:45:53:e2:e4:8f:30:68:ef:6f:
43:10:f4:97:22:17:80:6d:9e:20:6c:61:d9:c4:27:
44:49:21:ad:f9:d4:b5:dd:0b:af:52:52:5f:c0:7c:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:1F:F0:31:51:BC:78:41:FB:C2:1A:8B:DE:61:C6:57:0F:D2:20
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3233362e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.236.0/22
Signature Algorithm: sha256WithRSAEncryption
12:d5:d2:5f:e9:80:40:16:86:61:fe:57:a8:ec:bf:4f:ed:dd:
0c:f0:f2:66:ca:63:26:85:a3:a8:99:da:c6:f9:c6:fa:65:35:
e5:33:cf:ec:eb:b5:62:00:e0:68:b5:65:e3:c1:5a:65:0b:01:
2d:39:77:d2:da:0d:7a:85:9f:be:34:65:0f:34:59:23:4e:ac:
7b:c2:6f:e1:03:97:4b:c2:5d:41:cb:ee:d3:7b:ab:ab:b3:8c:
55:7e:53:a8:30:fa:57:43:86:68:d6:f5:bc:51:c8:a3:88:69:
51:ab:62:99:09:08:1d:85:1b:8b:de:29:93:a7:df:3b:91:84:
b2:b2:2d:27:46:8e:d5:1a:ce:5d:f4:1c:48:df:a0:5d:23:05:
2c:1e:ce:99:ca:10:ca:7a:2c:91:12:af:0e:c7:bf:b6:33:1e:
71:1c:d7:cc:de:d8:4f:fa:8b:f4:28:c5:8b:fd:bf:99:cf:24:
19:60:6a:f2:e6:01:4e:ca:d4:33:83:bf:47:d4:42:8b:cc:63:
00:29:0e:6a:f1:11:98:b9:a2:b7:f6:e6:e2:4e:57:b3:4e:ed:
b7:93:e7:e1:60:2e:21:cc:2c:24:80:23:da:53:18:55:d4:9e:
03:5f:14:56:1a:ba:a2:69:86:3e:88:57:d3:5f:28:0c:7c:22:
ae:81:dd:74
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBlu08wx6flnPzAfv0oCGZz06jiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA1NDlaFw0yNDA2MDQwOTEwNDlaMDMxMTAvBgNV
BAMTKDhCNTAxRkYwMzE1MUJDNzg0MUZCQzIxQThCREU2MUM2NTcwRkQyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZea8CHnWdqo+8VEpzNgsZNCOU
ckAUarJHmKQEVQOUcUVXtMjTOKBYjlPfqDuK946N6fr5X3KuwM+5waKjN1/Nufq+
UuQqeyLjY5K2VFQy7DfyD3BZtTTszd5jxwCHkxSlUlAsNoZxYp0JjO+cNg8QAr1n
AX+8G5fDBLq/IsKRMGk0Fr3iORIyWX5nhWXO5bsbCMDOps3+kTY8oWoKnBygQATf
ncK8r5T3rw2yhjaSsaJgUm4ZVFKWVK00fihf5iFf17QiGbU1JAlY/2mmg5A0+W3J
Eobi0EVT4uSPMGjvb0MQ9JciF4BtniBsYdnEJ0RJIa351LXdC69SUl/AfDmpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUi1Af8DFRvHhB+8Iai95hxlcP0iAwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy
MzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
bW/sMA0GCSqGSIb3DQEBCwUAA4IBAQAS1dJf6YBAFoZh/leo7L9P7d0M8PJmymMm
haOomdrG+cb6ZTXlM8/s67ViAOBotWXjwVplCwEtOXfS2g16hZ++NGUPNFkjTqx7
wm/hA5dLwl1By+7Te6urs4xVflOoMPpXQ4Zo1vW8UcijiGlRq2KZCQgdhRuL3imT
p987kYSysi0nRo7VGs5d9BxI36BdIwUsHs6ZyhDKeiyREq8Ox7+2Mx5xHNfM3thP
+ov0KMWL/b+ZzyQZYGry5gFOytQzg79H1EKLzGMAKQ5q8RGYuaK39ubiTlezTu23
k+fhYC4hzCwkgCPaUxhV1J4DXxRWGrqiaYY+iFfTXygMfCKugd10
-----END CERTIFICATE-----
Generated at Thu May 8 06:14:57 2025 by rpki-client