Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234352e302f32342d3234203d3e203433323630.roa
File: 3130392e3131312e3234352e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: 4qL7DjKY89nUDAwVPqdBhqoJt0nfqK0+Zj3eHOiJD2g=
Subject key identifier: 5F:E3:1B:4D:84:32:5A:37:9A:4C:A1:06:82:FF:2A:6A:62:B2:C3:59
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 5A6D7B919FB4256211FFAD1509A5CD26CEA59DAC
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234352e302f32342d3234203d3e203433323630.roa
Signing time: Tue 06 Jun 2023 09:11:58 +0000
ROA not before: Tue 06 Jun 2023 09:06:58 +0000
ROA not after: Tue 04 Jun 2024 09:11:58 +0000
asID: 43260
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6d:7b:91:9f:b4:25:62:11:ff:ad:15:09:a5:cd:26:ce:a5:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:06:58 2023 GMT
Not After : Jun 4 09:11:58 2024 GMT
Subject: CN=5FE31B4D84325A379A4CA10682FF2A6A62B2C359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:2a:a3:fa:e4:5d:3c:09:46:a9:f3:0e:97:
67:37:99:0b:50:cf:83:af:17:21:5e:7e:79:4d:9b:
36:94:6d:88:f4:88:d7:4c:6a:05:7d:eb:91:9a:c1:
5e:55:9d:99:56:42:7b:7c:70:38:7e:30:8f:82:86:
32:b8:45:a0:3f:2a:e1:35:62:13:86:a6:32:2c:bf:
4c:3b:26:b0:67:15:9c:af:9f:fb:18:08:5e:4b:3c:
f9:1e:ca:f6:47:3e:97:ce:52:ac:a9:1a:73:98:0d:
38:8a:c3:89:52:fb:4e:f2:16:5f:77:76:f0:8d:65:
c6:f8:f8:f7:04:f1:21:1d:b5:cf:97:83:95:b3:18:
75:64:12:b6:37:6f:6c:6a:20:b4:cf:e2:98:5e:47:
f8:ec:a0:53:a5:d9:5b:2f:b2:58:9e:ac:1e:05:8f:
1e:46:49:38:26:e0:2b:c9:6d:6a:72:44:87:6e:60:
93:ed:bd:b2:45:0b:11:5e:4f:38:29:89:e9:f5:58:
8a:66:16:53:6c:7d:41:b1:04:6f:24:93:0e:2a:c1:
2a:2c:61:44:fc:60:64:4e:5b:bf:c4:3e:28:4d:d5:
04:a3:81:88:cf:7f:08:40:36:0a:2d:08:b6:b9:97:
a6:a8:50:2d:50:6b:a4:27:d1:a3:ff:31:1f:a4:94:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E3:1B:4D:84:32:5A:37:9A:4C:A1:06:82:FF:2A:6A:62:B2:C3:59
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234352e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c0:a7:8d:c0:9c:7a:70:2e:2c:9e:3c:5b:5f:4d:a9:50:da:
3f:68:44:b7:be:28:53:4c:a3:ca:1a:22:35:29:d6:a5:47:a3:
6b:fd:bd:df:db:f4:f7:05:4c:a1:74:3e:84:05:d6:3f:04:f7:
0c:cf:37:df:8b:1f:5d:48:0c:1c:f4:2a:a9:64:f4:e3:d0:e1:
8b:1b:25:5f:fa:1f:cc:9d:0a:50:37:bc:7c:9c:2f:73:94:60:
8a:c1:15:ea:5e:53:b3:39:07:3c:0e:96:6e:7d:9d:f4:0d:e7:
70:0b:b3:13:f0:d3:be:fe:0a:97:f3:f3:45:6f:7e:62:66:56:
ff:92:1e:aa:d5:84:b2:ed:1f:ca:a2:cd:e7:56:54:fd:1d:ec:
14:d6:73:c9:69:3a:4f:e8:6d:31:3e:5a:68:e1:6f:3c:d1:62:
fb:41:50:72:73:e0:fa:90:46:fc:14:2f:77:33:ca:c4:3a:cf:
78:09:af:e1:60:4d:ca:10:4b:c8:05:82:50:02:66:a1:e6:4e:
31:fc:16:49:f7:4a:8a:8c:b6:ae:79:4a:5d:60:78:bc:35:a8:
4a:b5:ab:b1:72:80:7f:35:bd:56:03:fa:ee:42:f5:34:5c:5f:
e0:8b:03:f3:ec:04:d1:55:e2:bc:ac:fa:51:bd:83:af:97:b4:
0f:b6:13:92
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWm17kZ+0JWIR/60VCaXNJs6lnawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA2NThaFw0yNDA2MDQwOTExNThaMDMxMTAvBgNV
BAMTKDVGRTMxQjREODQzMjVBMzc5QTRDQTEwNjgyRkYyQTZBNjJCMkMzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCSqj+uRdPAlGqfMOl2c3mQtQ
z4OvFyFefnlNmzaUbYj0iNdMagV965GawV5VnZlWQnt8cDh+MI+ChjK4RaA/KuE1
YhOGpjIsv0w7JrBnFZyvn/sYCF5LPPkeyvZHPpfOUqypGnOYDTiKw4lS+07yFl93
dvCNZcb4+PcE8SEdtc+Xg5WzGHVkErY3b2xqILTP4pheR/jsoFOl2VsvslierB4F
jx5GSTgm4CvJbWpyRIduYJPtvbJFCxFeTzgpien1WIpmFlNsfUGxBG8kkw4qwSos
YUT8YGROW7/EPihN1QSjgYjPfwhANgotCLa5l6aoUC1Qa6Qn0aP/MR+klKKVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUX+MbTYQyWjeaTKEGgv8qamKyw1kwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzMDM5MmUzMTMxMzEyZTMy
MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzMzMjM2MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtb/UwDQYJKoZIhvcNAQELBQADggEBAJ3Ap43AnHpwLiyePFtfTalQ2j9oRLe+
KFNMo8oaIjUp1qVHo2v9vd/b9PcFTKF0PoQF1j8E9wzPN9+LH11IDBz0Kqlk9OPQ
4YsbJV/6H8ydClA3vHycL3OUYIrBFepeU7M5BzwOlm59nfQN53ALsxPw077+Cpfz
80VvfmJmVv+SHqrVhLLtH8qizedWVP0d7BTWc8lpOk/obTE+WmjhbzzRYvtBUHJz
4PqQRvwUL3czysQ6z3gJr+FgTcoQS8gFglACZqHmTjH8Fkn3SoqMtq55Sl1geLw1
qEq1q7FygH81vVYD+u5C9TRcX+CLA/PsBNFV4rys+lG9g6+XtA+2E5I=
-----END CERTIFICATE-----
Generated at Thu May 8 11:29:03 2025 by rpki-client