Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234382e302f32342d3234203d3e2039313235.roa
File: 3130392e3131312e3234382e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: Gmj5j+rJXG3m/EJpsvsJ0mYBIgratNwJtPN9WXDsfVs=
Subject key identifier: F0:F9:1B:8E:42:A4:09:67:A3:AB:45:55:01:1A:CE:F6:3B:0E:C4:80
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2EBCA9C31533385EAF7852C91991C0837276875E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234382e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:12:33 +0000
ROA not before: Tue 06 Jun 2023 09:07:33 +0000
ROA not after: Tue 04 Jun 2024 09:12:33 +0000
asID: 9125
IP address blocks: 109.111.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bc:a9:c3:15:33:38:5e:af:78:52:c9:19:91:c0:83:72:76:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:07:33 2023 GMT
Not After : Jun 4 09:12:33 2024 GMT
Subject: CN=F0F91B8E42A40967A3AB4555011ACEF63B0EC480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:7f:bc:7c:78:71:af:7f:37:2e:b2:25:a5:
06:30:a5:1c:81:36:bc:73:17:e3:f7:1c:e1:bd:09:
8a:80:f5:47:f2:a4:bd:a0:44:88:1a:00:59:61:b4:
c4:b8:dd:9a:a0:29:4c:be:0d:48:41:b5:7a:b4:41:
f1:55:9d:4e:d5:54:cb:e5:06:d1:7f:19:50:c3:2b:
37:12:dc:db:82:4a:52:a4:28:82:48:7b:0b:bb:29:
b7:6a:d3:b0:da:d2:3a:92:6c:fe:93:cd:4c:29:e0:
0e:30:c6:73:37:20:dc:91:a8:89:45:70:0c:34:3d:
2c:1f:ae:d6:a2:d0:ea:2a:24:94:89:a8:46:4d:3c:
5f:90:34:8d:3d:2a:e1:ff:f3:84:e0:76:72:57:b1:
42:14:22:7a:46:90:15:ea:91:c2:00:85:f8:fd:76:
2f:d6:e9:a9:b5:c9:03:37:04:de:d2:77:82:da:cd:
aa:f3:e5:c5:e2:96:8f:05:17:06:b4:18:6e:4d:6c:
1e:bf:a6:50:51:ea:89:6e:a6:f4:9b:d0:18:a2:d0:
f8:6c:36:ab:0c:a6:df:d9:db:7a:29:00:58:58:a3:
af:48:68:97:ae:45:e4:f5:f7:3b:08:51:2d:11:26:
8e:da:dc:08:dc:b5:57:0f:2a:6f:ce:72:3b:96:70:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:1B:8E:42:A4:09:67:A3:AB:45:55:01:1A:CE:F6:3B:0E:C4:80
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234382e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.248.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9f:24:f9:48:4b:20:66:42:d7:db:4f:6d:15:b8:c9:fb:f5:
a3:aa:1e:86:1f:11:1e:90:fc:e7:e7:2d:48:fd:41:83:98:b8:
fa:31:3d:e9:8c:44:42:cb:bf:3b:7b:bf:79:d2:dd:f6:e7:39:
08:54:fa:04:d6:44:f0:36:13:25:99:7c:0b:04:1b:4d:83:d0:
9a:a4:64:b0:03:d5:d7:40:00:fb:1d:99:d0:c1:26:ad:ea:3e:
ad:27:6c:b8:73:75:e2:5b:a3:14:ab:bd:ba:fe:c5:5c:8c:00:
99:4c:67:31:0e:27:e5:55:90:ea:1d:cf:70:1e:83:ef:3c:02:
f1:01:de:d3:c1:27:85:65:5b:5e:96:4d:7a:74:3b:0d:b3:65:
90:f2:20:a3:46:0d:9f:d4:67:6d:7e:09:dd:d0:53:f0:49:07:
de:36:1e:50:d6:9c:de:96:3e:a1:5b:03:21:21:07:21:74:c0:
05:fa:7b:89:47:18:97:ea:be:64:78:0c:7c:f5:91:1b:c4:0c:
3e:c5:7a:8a:6b:08:04:37:2f:9f:3f:b0:8b:94:06:41:de:a0:
63:c3:fb:25:92:2c:04:76:ff:f1:b3:46:73:f3:31:8f:bd:9a:
d0:86:9a:75:87:fe:34:73:a9:99:f5:6d:33:1c:68:ba:6c:7a:
29:10:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:57:57 2025 by rpki-client