Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234332e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3234332e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: IlffLN0jc11sHeon+yr2wTio9KLODJol0rCHmsAy4dY=
Subject key identifier: B1:DC:92:AA:3B:69:80:79:6F:EA:08:99:D3:84:90:58:40:C6:47:4F
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 5DAB7505460EE8C70F8FE1099EC44A84D50ED261
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234332e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:11:36 +0000
ROA not before: Tue 06 Jun 2023 09:06:36 +0000
ROA not after: Tue 04 Jun 2024 09:11:36 +0000
asID: 9125
IP address blocks: 109.111.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ab:75:05:46:0e:e8:c7:0f:8f:e1:09:9e:c4:4a:84:d5:0e:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:06:36 2023 GMT
Not After : Jun 4 09:11:36 2024 GMT
Subject: CN=B1DC92AA3B6980796FEA0899D384905840C6474F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:de:8e:6f:9e:7f:1c:f9:78:47:f8:7b:bb:
0a:48:b0:cc:d1:d8:f0:a4:3c:a7:f1:7a:7c:02:82:
e0:9e:9a:7e:66:28:ee:2d:e6:eb:12:bb:d2:5b:42:
fc:c5:86:72:5b:9a:d7:1f:a2:52:7b:8c:15:e9:f9:
a8:4d:f6:68:7c:40:be:bd:c9:ef:99:d7:d1:c4:7e:
60:f4:05:94:93:a2:4e:12:d1:86:35:99:ec:5b:c4:
79:d0:49:62:3f:17:0e:d6:58:d3:fd:93:b2:3a:88:
bb:6e:85:2c:1a:60:0a:2d:30:6b:d2:b5:64:86:2d:
2a:36:ad:17:68:28:58:7d:ec:20:b2:a1:37:9f:70:
90:ca:88:0a:6f:2e:d3:2b:e4:56:b7:70:bf:64:77:
2c:a6:ce:9e:ca:f2:6c:45:ef:d3:b8:6c:25:84:c5:
7e:35:45:07:13:f2:d8:bb:bc:68:72:8c:1c:da:c7:
e6:68:0c:86:13:22:16:be:3c:df:7a:ba:67:a9:76:
6c:21:c3:e4:30:a2:b9:53:5f:b1:0b:52:73:18:eb:
c9:f0:2e:4c:25:bc:b7:7b:7b:d5:ee:e3:49:11:aa:
62:bd:a2:dd:11:2a:a7:8c:70:ff:81:e4:b7:2f:48:
d7:c0:02:f1:86:86:f2:53:81:4e:1f:b7:03:fb:25:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:92:AA:3B:69:80:79:6F:EA:08:99:D3:84:90:58:40:C6:47:4F
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234332e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:f5:7e:69:d5:d8:6d:42:87:bf:0f:cb:bd:48:f8:18:45:
2a:b6:28:4f:40:1f:dd:a8:73:91:82:9b:c8:d9:7f:da:73:d3:
38:65:cc:54:49:f8:37:d3:f4:5c:ff:6c:b6:f4:18:23:2c:11:
fd:02:31:65:7b:4f:ca:40:c7:2a:be:52:cf:52:16:3d:0d:63:
7d:73:f4:5a:d5:13:29:52:c9:16:7b:00:53:f8:82:d0:f7:76:
54:85:0b:55:88:54:9f:f9:0b:4e:b4:29:31:44:00:1f:8e:5b:
0a:1b:7c:78:d6:29:48:07:9b:9f:1e:1b:37:47:d9:66:42:a6:
2b:f0:70:3f:bd:62:62:8b:28:5b:91:c4:1f:a5:e6:28:7e:df:
39:b4:20:6e:12:f4:3c:bb:6c:4c:da:75:61:ae:fd:9e:ef:69:
7f:1f:8f:34:5c:e3:8a:5d:c6:2b:93:de:12:30:1d:57:f3:88:
5d:f4:31:2a:5a:72:d7:0d:43:66:49:89:76:db:5c:25:86:6e:
ec:d3:4e:89:f2:b4:36:1f:6f:64:d1:35:21:69:ee:9c:1c:5d:
62:37:d3:69:03:97:04:0c:87:c6:1c:bd:5f:21:19:8a:d7:02:
64:6a:f5:09:ac:6e:ad:c2:f3:28:04:1d:ed:b2:b4:b7:74:67:
20:cc:a7:b8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXat1BUYO6McPj+EJnsRKhNUO0mEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA2MzZaFw0yNDA2MDQwOTExMzZaMDMxMTAvBgNV
BAMTKEIxREM5MkFBM0I2OTgwNzk2RkVBMDg5OUQzODQ5MDU4NDBDNjQ3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlt6Ob55/HPl4R/h7uwpIsMzR
2PCkPKfxenwCguCemn5mKO4t5usSu9JbQvzFhnJbmtcfolJ7jBXp+ahN9mh8QL69
ye+Z19HEfmD0BZSTok4S0YY1mexbxHnQSWI/Fw7WWNP9k7I6iLtuhSwaYAotMGvS
tWSGLSo2rRdoKFh97CCyoTefcJDKiApvLtMr5Fa3cL9kdyymzp7K8mxF79O4bCWE
xX41RQcT8ti7vGhyjBzax+ZoDIYTIha+PN96umepdmwhw+QworlTX7ELUnMY68nw
LkwlvLd7e9Xu40kRqmK9ot0RKqeMcP+B5LcvSNfAAvGGhvJTgU4ftwP7JWDvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsdySqjtpgHlv6giZ04SQWEDGR08wHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy
MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
bW/zMA0GCSqGSIb3DQEBCwUAA4IBAQBdhvV+adXYbUKHvw/LvUj4GEUqtihPQB/d
qHORgpvI2X/ac9M4ZcxUSfg30/Rc/2y29BgjLBH9AjFle0/KQMcqvlLPUhY9DWN9
c/Ra1RMpUskWewBT+ILQ93ZUhQtViFSf+QtOtCkxRAAfjlsKG3x41ilIB5ufHhs3
R9lmQqYr8HA/vWJiiyhbkcQfpeYoft85tCBuEvQ8u2xM2nVhrv2e72l/H480XOOK
XcYrk94SMB1X84hd9DEqWnLXDUNmSYl221wlhm7s006J8rQ2H29k0TUhae6cHF1i
N9NpA5cEDIfGHL1fIRmK1wJkavUJrG6twvMoBB3tsrS3dGcgzKe4
-----END CERTIFICATE-----
Generated at Fri May 9 04:01:23 2025 by rpki-client