Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234362e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3234362e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: 2IMLaRtzPGibaMkFhoaM74hcoE8dCtvEOtegaQenHaY=
Subject key identifier: BB:ED:8F:FD:D6:3F:A6:E4:3F:61:24:57:F3:EB:71:19:90:CC:7A:03
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0C4022E9EF37DC06157506CC96407188421D5B04
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234362e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:12:19 +0000
ROA not before: Tue 06 Jun 2023 09:07:19 +0000
ROA not after: Tue 04 Jun 2024 09:12:19 +0000
asID: 9125
IP address blocks: 109.111.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:40:22:e9:ef:37:dc:06:15:75:06:cc:96:40:71:88:42:1d:5b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:07:19 2023 GMT
Not After : Jun 4 09:12:19 2024 GMT
Subject: CN=BBED8FFDD63FA6E43F612457F3EB711990CC7A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:eb:56:39:ff:35:67:36:62:80:46:ad:1b:
aa:1c:62:29:d0:e9:3c:a6:09:e8:46:11:9a:6b:c7:
dd:30:24:0d:29:24:f7:f4:d4:c5:83:22:79:e2:a4:
57:7d:74:af:48:9e:00:d5:9c:3a:33:4b:a8:ef:1c:
b7:3d:3d:fe:8d:e6:7b:78:c7:39:5b:93:bd:3f:e6:
2a:f2:02:66:ab:82:ed:a0:7a:cf:33:57:e0:9e:8a:
e1:48:53:7c:f6:5c:b4:63:ce:28:1d:c3:2a:9d:f7:
68:38:50:84:e0:25:8d:9a:09:ee:36:15:d8:96:0a:
22:5d:fe:e9:2a:99:47:01:c7:34:b1:19:48:04:aa:
d2:58:21:9e:3f:94:d8:ac:83:a2:cf:d8:9b:16:80:
1c:8c:2c:4c:9f:cb:65:89:46:75:47:77:40:ce:30:
77:ff:92:c5:4e:6d:df:f9:24:c5:bd:be:22:df:62:
71:6e:34:cc:92:06:39:03:28:11:58:e2:a6:5b:5b:
5f:9a:8e:73:67:82:3a:6f:c4:b5:6e:59:f6:c9:25:
cd:04:e2:9f:35:77:75:18:5b:3e:1e:f6:bb:45:75:
3c:a7:fe:5c:0f:9b:4b:bd:ee:d6:ee:a6:b5:8a:41:
3f:ec:e7:e9:82:c2:e6:1a:1a:31:d1:fa:ae:d7:92:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:8F:FD:D6:3F:A6:E4:3F:61:24:57:F3:EB:71:19:90:CC:7A:03
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234362e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ed:f9:bb:65:4a:1f:e1:d9:d2:89:71:9a:e2:df:c4:c8:28:
03:8c:40:65:87:72:b5:60:a6:92:1b:fe:ea:7a:1a:fe:7d:bc:
47:4e:af:87:47:56:28:08:74:94:76:64:f5:ed:6a:67:50:d8:
41:24:f8:6a:ae:bf:d6:37:83:71:e9:65:7d:87:2b:70:f5:8e:
34:b6:0c:6d:22:f4:cf:61:e7:81:a3:89:3c:56:44:cf:c4:35:
d1:fe:56:93:28:6e:a3:68:7e:92:25:ff:1e:55:b1:ad:0d:1a:
7b:15:2d:ad:25:1b:03:d4:72:07:f2:13:43:7e:5e:e5:54:15:
6b:fe:69:71:e6:c2:1f:97:46:bb:02:3b:2b:99:76:08:5f:6f:
99:65:72:be:6d:6e:5c:d0:eb:9f:ad:38:3d:68:e1:0d:45:dd:
fc:8a:54:b1:be:55:bd:c4:0d:27:64:18:21:76:79:44:c2:01:
12:db:98:c5:be:7b:6a:f1:57:8d:ad:65:7f:b4:7f:82:ed:cb:
4b:c3:18:95:b1:5f:ee:62:9b:4e:c7:fd:33:42:59:fb:8c:63:
1e:65:32:7f:13:91:b9:53:4a:bd:be:35:63:b6:3e:3d:e8:3b:
fa:fe:d5:d0:a9:75:77:72:29:52:88:b0:22:f9:dc:54:7d:60:
46:66:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:44:19 2025 by rpki-client