Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234342e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3234342e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: C83B4O96hckEZgng6JuZytbrwdmxEhKQpwNxAFLhyvo=
Subject key identifier: 08:60:55:53:03:59:B9:07:96:F0:54:E4:0B:3C:4A:0F:D5:4B:40:08
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 5A3961C4F5C9B42C988F1618FCFBB5C80000FB22
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234342e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:11:46 +0000
ROA not before: Tue 06 Jun 2023 09:06:46 +0000
ROA not after: Tue 04 Jun 2024 09:11:46 +0000
asID: 9125
IP address blocks: 109.111.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:39:61:c4:f5:c9:b4:2c:98:8f:16:18:fc:fb:b5:c8:00:00:fb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:06:46 2023 GMT
Not After : Jun 4 09:11:46 2024 GMT
Subject: CN=086055530359B90796F054E40B3C4A0FD54B4008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:b3:68:a8:d0:e2:93:1f:b0:10:82:ae:37:
04:61:07:37:92:d3:ab:c1:5e:3a:73:52:26:99:da:
7f:6a:fa:b7:fc:da:98:b9:6c:02:c7:14:4f:2c:2f:
c1:30:0c:cd:79:c6:a1:d2:b1:b7:f8:9b:d9:a6:82:
71:aa:0c:7a:ff:ff:e9:9a:80:46:da:d7:a2:30:df:
53:79:81:28:97:60:3b:71:75:ba:0b:99:0e:68:e4:
84:f8:9b:f5:eb:5c:c5:a0:f2:eb:b1:80:1f:b9:4d:
22:7a:77:bf:5b:72:c1:4f:d4:b6:e8:5f:33:ec:84:
96:03:01:d7:38:e4:9d:3d:be:e4:ae:e1:91:d2:78:
79:3f:f4:93:60:e6:79:68:e0:f6:df:3a:05:63:eb:
a9:04:8a:af:38:f9:08:37:46:13:e1:12:61:af:1d:
6b:d4:1c:a1:5d:ec:d3:fa:2f:40:8e:fe:bb:12:93:
37:bc:4a:53:0e:ca:39:53:29:78:57:45:63:27:b2:
7a:dc:b7:c3:e5:01:f0:3e:1f:64:ce:f5:c1:39:89:
2f:ac:cd:74:be:eb:fa:8c:b0:4c:cc:4f:65:66:1f:
8a:c5:f2:77:38:79:90:e8:5e:f4:c0:9a:17:f4:2a:
c4:fa:7f:c5:d4:b6:82:7a:e6:be:65:ab:a9:10:75:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:55:53:03:59:B9:07:96:F0:54:E4:0B:3C:4A:0F:D5:4B:40:08
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234342e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.244.0/24
Signature Algorithm: sha256WithRSAEncryption
30:42:63:17:00:5b:92:12:c5:49:ad:a5:46:88:5a:45:51:b6:
1b:6e:6e:15:cb:aa:dd:a0:be:a5:20:69:f5:98:42:46:9f:0e:
e4:94:de:6d:26:5e:a0:82:5d:86:29:38:7e:2c:5b:ce:36:8b:
0d:c4:08:34:33:e9:34:e3:08:46:d6:ce:06:0e:15:2d:07:5b:
17:0c:dc:55:53:a4:15:cf:b2:9f:53:56:a3:7c:8c:4f:03:61:
b4:47:61:18:0d:e0:b3:f0:69:3c:b2:27:67:4d:79:e6:7e:0e:
f8:b9:dd:c6:4d:e0:59:58:9d:69:5c:84:fc:e2:05:36:56:cd:
a9:b1:26:fa:08:8f:d8:09:5c:88:b9:ad:20:74:c4:59:35:bd:
86:20:50:53:7e:01:de:96:f3:63:e0:31:c8:65:2f:8a:6c:82:
91:1d:0b:25:f9:ca:fd:5c:37:5d:e4:57:cc:fe:99:fe:b4:af:
b7:91:51:eb:da:6d:fe:53:ec:bf:78:4f:42:2d:7b:89:6d:ce:
41:b1:ab:70:03:b2:3e:27:34:d5:23:cc:f3:af:8d:aa:34:b2:
1f:6d:a5:df:b0:4e:c3:13:d3:fc:4f:85:02:4a:b8:38:80:2b:
29:66:b7:f7:0c:ee:e1:bb:29:9a:ad:ec:80:df:3e:c1:1f:4c:
a4:3d:3b:9f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWjlhxPXJtCyYjxYY/Pu1yAAA+yIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA2NDZaFw0yNDA2MDQwOTExNDZaMDMxMTAvBgNV
BAMTKDA4NjA1NTUzMDM1OUI5MDc5NkYwNTRFNDBCM0M0QTBGRDU0QjQwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoLNoqNDikx+wEIKuNwRhBzeS
06vBXjpzUiaZ2n9q+rf82pi5bALHFE8sL8EwDM15xqHSsbf4m9mmgnGqDHr//+ma
gEba16Iw31N5gSiXYDtxdboLmQ5o5IT4m/XrXMWg8uuxgB+5TSJ6d79bcsFP1Lbo
XzPshJYDAdc45J09vuSu4ZHSeHk/9JNg5nlo4PbfOgVj66kEiq84+Qg3RhPhEmGv
HWvUHKFd7NP6L0CO/rsSkze8SlMOyjlTKXhXRWMnsnrct8PlAfA+H2TO9cE5iS+s
zXS+6/qMsEzMT2VmH4rF8nc4eZDoXvTAmhf0KsT6f8XUtoJ65r5lq6kQdcKNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCGBVUwNZuQeW8FTkCzxKD9VLQAgwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy
MzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
bW/0MA0GCSqGSIb3DQEBCwUAA4IBAQAwQmMXAFuSEsVJraVGiFpFUbYbbm4Vy6rd
oL6lIGn1mEJGnw7klN5tJl6ggl2GKTh+LFvONosNxAg0M+k04whG1s4GDhUtB1sX
DNxVU6QVz7KfU1ajfIxPA2G0R2EYDeCz8Gk8sidnTXnmfg74ud3GTeBZWJ1pXIT8
4gU2Vs2psSb6CI/YCVyIua0gdMRZNb2GIFBTfgHelvNj4DHIZS+KbIKRHQsl+cr9
XDdd5FfM/pn+tK+3kVHr2m3+U+y/eE9CLXuJbc5BsatwA7I+JzTVI8zzr42qNLIf
baXfsE7DE9P8T4UCSrg4gCspZrf3DO7huymareyA3z7BH0ykPTuf
-----END CERTIFICATE-----
Generated at Thu May 8 13:45:03 2025 by rpki-client