Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234392e302f32342d3234203d3e203238393634.roa
File: 3130392e3131312e3234392e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: 84/vu1sYaSiRu0DEkypvkhjBoKoHJLU2KvGB6QCbxyQ=
Subject key identifier: 0D:B9:E4:6E:C2:6E:49:16:3A:3F:F6:50:26:EE:6B:F1:EE:54:3F:C4
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 3F0F830C76B8F1EA42817B5CD23DB55B89512CA9
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234392e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:12:43 +0000
ROA not before: Tue 06 Jun 2023 09:07:43 +0000
ROA not after: Tue 04 Jun 2024 09:12:43 +0000
asID: 28964
IP address blocks: 109.111.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:83:0c:76:b8:f1:ea:42:81:7b:5c:d2:3d:b5:5b:89:51:2c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:07:43 2023 GMT
Not After : Jun 4 09:12:43 2024 GMT
Subject: CN=0DB9E46EC26E49163A3FF65026EE6BF1EE543FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:45:ee:a6:61:48:d6:78:8e:b2:a7:e6:5a:
a8:60:4c:d8:47:43:9e:5a:c1:ea:f7:26:2b:07:03:
31:cb:32:16:78:56:da:70:91:cb:18:fa:84:c4:b6:
ed:1e:4c:a0:1d:82:97:c8:4d:f1:58:a7:3f:51:19:
7e:ea:13:00:a4:28:9d:db:f9:e6:1e:de:ab:d7:4c:
6e:79:5c:94:6a:05:1f:b3:4f:17:f6:be:41:9e:ac:
5b:d8:b5:77:b2:63:34:18:6d:33:01:bb:47:66:96:
1d:23:6d:0a:40:32:4b:78:62:87:d3:9b:12:d7:21:
dd:85:75:19:f8:f4:fc:62:44:d6:66:d9:94:b0:fe:
3f:07:82:42:db:fc:ba:37:9b:7f:0d:cd:c8:14:11:
84:85:25:e2:b3:05:62:9c:6c:38:c9:86:47:54:96:
9a:03:ff:0e:f1:f5:4b:b6:4a:33:0c:2c:e6:fc:5f:
35:25:3a:af:94:f7:aa:16:9a:6f:41:1c:cb:f9:73:
04:4c:23:74:2e:c1:84:22:51:f3:d1:d0:9c:8e:7a:
b0:b1:36:eb:c6:bb:fd:fe:e9:5d:33:c1:c9:ac:dd:
ba:92:9f:10:af:72:e0:26:e0:60:48:dc:6a:da:4b:
e6:f0:53:dc:66:44:89:d0:84:10:d1:b2:e0:82:69:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:E4:6E:C2:6E:49:16:3A:3F:F6:50:26:EE:6B:F1:EE:54:3F:C4
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234392e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:14:a3:f4:cf:61:56:f0:f1:3d:af:8f:9e:ed:97:e3:af:1f:
13:c1:b2:d5:87:80:c0:38:d6:dd:6f:f0:ba:fb:bd:17:f6:1f:
e1:f7:db:d3:0c:20:c5:a5:ff:3c:3d:40:b4:e9:23:64:5c:35:
c2:f9:67:c8:b7:d6:6d:03:4f:66:15:e8:80:d0:b9:8e:da:5f:
a1:de:7e:60:e2:15:46:22:77:00:6b:7a:7b:71:62:0f:bc:2b:
48:2d:78:de:e0:14:b3:49:0b:f7:66:e6:ed:ad:0e:ef:5c:17:
cf:03:42:62:77:b0:71:d9:1c:d3:39:b5:38:ba:ca:46:8f:24:
06:81:5b:f9:b8:81:85:05:2f:cb:a0:31:a9:d7:3f:c8:ce:0d:
fe:a0:09:a8:45:06:8e:75:59:ba:80:00:ee:d0:24:6d:b8:23:
a5:8a:da:5e:ce:22:a2:58:8b:88:3c:6f:85:56:07:a7:4e:99:
dd:7e:a7:9e:f8:4d:49:d4:5a:b4:8f:5d:34:9d:5a:4f:be:3a:
1c:d4:25:60:23:e8:16:a5:fb:c9:92:e0:a5:8a:07:90:cf:00:
0c:9f:23:b6:b1:ce:0d:16:bd:1c:c8:e3:8e:9d:bd:f7:31:db:
b2:b5:cc:26:c5:2f:c8:63:d7:72:14:80:b7:89:75:45:86:77:
46:58:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:35:24 2025 by rpki-client