Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3132382e302f32312d3231203d3e2039313235.roa
File: 3137382e3235342e3132382e302f32312d3231203d3e2039313235.roa (raw, json)
Hash identifier: l7EMMZsxB//cBYMb4PzosVy71glQbWTYwpymT+Jz74U=
Subject key identifier: D0:58:7A:D5:A8:EF:44:77:81:10:52:8F:A3:02:61:AB:C1:12:55:9E
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 21F58A794CD99B9C7FE34C6F8D56D6FA97DCBE04
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3132382e302f32312d3231203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:14:05 +0000
ROA not before: Tue 06 Jun 2023 09:09:05 +0000
ROA not after: Tue 04 Jun 2024 09:14:05 +0000
asID: 9125
IP address blocks: 178.254.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f5:8a:79:4c:d9:9b:9c:7f:e3:4c:6f:8d:56:d6:fa:97:dc:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:05 2023 GMT
Not After : Jun 4 09:14:05 2024 GMT
Subject: CN=D0587AD5A8EF44778110528FA30261ABC112559E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:38:47:50:f4:8a:75:0f:7d:ca:8e:ba:0b:
95:27:9e:ef:33:9a:5b:5a:04:94:94:4d:0b:0a:50:
c6:18:38:a2:6f:11:b3:4f:ba:a3:7f:fe:97:7d:52:
c8:a2:26:14:04:8e:f1:b0:8b:a6:ed:ba:e0:2b:d7:
a3:e1:e6:c2:a6:79:ac:83:91:50:d4:a7:fb:cb:f1:
24:8d:1c:d5:7a:37:49:25:db:48:46:77:e6:d8:17:
a5:3b:42:cb:48:02:30:ec:4b:c6:c0:c9:92:82:55:
de:b2:a6:4f:8d:b9:8a:c1:dd:6b:8f:ff:2f:17:55:
04:ea:e3:df:19:df:1f:07:26:7c:8d:54:e8:99:3a:
4e:55:7b:2f:8d:fe:90:25:aa:ce:5b:3c:84:f0:33:
de:e7:56:c8:20:cf:ae:5b:fd:33:1f:48:15:f3:cf:
72:9e:31:03:ad:a0:d6:be:f4:08:19:c0:35:c4:87:
a8:e1:aa:0e:30:35:e2:71:14:ee:b1:31:b1:66:d7:
ca:f7:b2:0a:22:07:ad:cb:37:33:3b:a7:38:bd:80:
67:06:bb:4f:39:71:69:df:93:2d:f1:90:cd:50:3a:
1a:76:1b:48:81:c7:23:95:bc:f7:7d:64:fe:49:78:
88:ab:5d:5a:02:a3:b4:56:80:d3:1f:c5:12:dc:31:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:7A:D5:A8:EF:44:77:81:10:52:8F:A3:02:61:AB:C1:12:55:9E
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3132382e302f32312d3231203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.128.0/21
Signature Algorithm: sha256WithRSAEncryption
16:2f:14:5f:8b:73:75:c3:48:f0:77:6d:0f:e9:76:de:bd:23:
43:86:12:cf:b9:e2:ff:c6:f3:03:08:a8:29:63:00:05:c5:8f:
64:49:2b:e3:0f:81:75:d5:5d:5a:2d:a1:87:e9:18:f2:dc:e9:
f5:e7:4a:c3:3a:aa:5e:b1:3b:72:bf:d0:7f:54:7e:06:46:28:
24:2e:ef:7a:6f:8d:df:da:08:dd:99:61:45:db:91:1f:b4:bc:
cf:0f:06:1c:b7:71:2a:14:83:03:92:0c:7e:3a:64:13:cc:df:
64:93:af:6f:01:5c:e8:90:c1:2a:9e:03:9e:56:b4:b1:92:1d:
e6:52:00:33:0e:88:ab:4c:47:63:50:bc:c8:09:36:1e:c4:1a:
ac:5b:32:94:4f:7f:c8:33:1f:47:12:9d:64:e1:c0:57:e7:22:
a4:3d:f1:e4:81:0d:96:0a:e1:39:18:62:30:85:13:ca:65:bc:
b2:f5:61:e2:37:a6:fb:4b:f8:d3:3e:c4:87:87:c6:a3:08:84:
6b:0f:46:10:23:df:18:a3:2d:ef:db:3c:5c:47:54:3a:8c:7f:
7c:96:de:38:88:c8:42:84:b0:6a:65:92:08:5e:ad:15:3c:7b:
92:80:31:6c:75:2e:c4:1d:70:f6:3a:59:4b:63:b0:bc:dd:44:
89:e3:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:29:58 2025 by rpki-client