Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235352e302f32342d3234203d3e203238393634.roa
File: 3130392e3131312e3235352e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: 3bjRariMBZyYx0vRJwTx8miybiauo1iE6/76HrMjAmM=
Subject key identifier: 5B:10:EC:25:BB:86:AE:E4:FD:AE:1B:4E:86:36:1F:61:21:9A:01:1B
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0936903F0E2EA78989F66596BB9D8F39B194D267
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235352e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:13:56 +0000
ROA not before: Tue 06 Jun 2023 09:08:56 +0000
ROA not after: Tue 04 Jun 2024 09:13:56 +0000
asID: 28964
IP address blocks: 109.111.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:36:90:3f:0e:2e:a7:89:89:f6:65:96:bb:9d:8f:39:b1:94:d2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:08:56 2023 GMT
Not After : Jun 4 09:13:56 2024 GMT
Subject: CN=5B10EC25BB86AEE4FDAE1B4E86361F61219A011B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:06:a8:dc:91:fd:4b:70:f8:66:44:08:e0:
de:0a:f3:78:a7:9e:70:a7:02:fe:56:2c:74:2b:a4:
d5:58:bb:12:82:94:4c:ed:f8:a9:e9:d7:d2:b7:19:
2e:73:b4:c9:61:79:e5:8d:82:2a:c5:40:8e:4a:05:
f1:99:de:4b:c5:d3:cc:34:08:5d:f5:f5:7d:08:00:
c1:84:cf:93:cd:41:47:b6:57:e0:bd:6d:84:c2:2c:
ad:c7:94:9a:cf:48:38:d6:17:ec:b2:47:02:e4:4c:
aa:a4:c7:7b:c0:52:87:de:83:c0:a4:dd:49:51:87:
94:97:e1:35:d7:e6:66:ce:0f:62:38:91:1a:15:d2:
4f:1f:3a:02:4e:02:6b:43:63:77:eb:40:72:8b:10:
e6:9b:bf:ef:48:95:05:8c:c5:9c:a0:94:58:17:af:
bc:33:21:8f:76:6a:a7:3f:84:fb:fe:c8:2c:95:82:
fe:a5:81:1f:90:af:ee:53:bd:8a:e1:4a:48:b4:e1:
37:9c:ab:b4:c4:07:11:1a:67:3e:df:23:44:bc:0e:
f0:6b:63:37:3a:51:83:93:d9:16:90:27:84:0e:10:
50:66:13:ba:a6:37:0d:c2:e5:5f:ce:50:c1:8f:09:
f8:cc:4f:db:dd:b2:2e:46:61:40:2a:79:45:77:bd:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:EC:25:BB:86:AE:E4:FD:AE:1B:4E:86:36:1F:61:21:9A:01:1B
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3235352e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f7:9b:c7:85:e5:e8:84:99:37:79:98:bf:f6:38:dd:53:25:
49:1b:ba:5c:9f:9b:2a:04:ac:35:ae:e6:30:7c:9f:f0:3c:f9:
fe:00:c8:e2:47:9e:d1:50:c9:6e:2f:9d:91:d4:fd:47:91:9a:
11:0b:0e:38:c9:17:48:13:4a:dd:a8:55:e0:28:b1:72:ab:4a:
e8:f2:66:56:b7:35:40:5c:48:91:2f:ff:a8:d4:c6:99:ed:ca:
6e:fa:cc:86:c6:aa:b0:4b:b9:1b:f5:a4:d6:46:77:e2:f6:2e:
b2:15:eb:a5:2e:7a:7d:e2:3d:d6:23:01:a8:5c:32:bd:ee:e4:
b1:75:3e:0c:83:aa:a1:4e:5a:6e:84:e6:83:07:bd:48:6d:9c:
4c:84:74:1e:4a:56:ac:03:ae:b9:b4:6b:1c:e0:77:e7:15:fd:
f7:19:33:c1:04:8a:dc:7c:39:7f:5f:4d:db:89:6a:85:a0:48:
cb:57:9a:84:3d:04:ae:b4:9a:67:82:48:a1:31:1e:0f:d8:b6:
92:44:ce:28:77:11:33:53:47:2a:2e:1d:20:87:15:96:4a:d5:
20:f7:e3:86:f9:23:96:b8:44:e6:33:27:34:db:74:61:04:a4:
37:4b:80:84:7a:f7:5c:83:9c:df:36:27:58:6f:ea:15:33:f3:
41:bf:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:29:58 2025 by rpki-client