Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133332e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3133332e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: pXgFiiX1zUV07mI904L7lbSyERg3RXVkiapgrT4ZB7c=
Subject key identifier: 1A:6C:C6:9B:B4:DF:E1:CC:42:A1:C2:AF:3B:83:C8:62:63:0E:CC:80
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2ED852B5FCCDCE37B902E74EDE7D335892947602
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133332e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:14:15 +0000
ROA not before: Tue 06 Jun 2023 09:09:15 +0000
ROA not after: Tue 04 Jun 2024 09:14:15 +0000
asID: 9125
IP address blocks: 178.254.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d8:52:b5:fc:cd:ce:37:b9:02:e7:4e:de:7d:33:58:92:94:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:15 2023 GMT
Not After : Jun 4 09:14:15 2024 GMT
Subject: CN=1A6CC69BB4DFE1CC42A1C2AF3B83C862630ECC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:33:a8:a9:0b:52:87:34:49:1a:21:6e:c2:
49:b1:b2:0a:da:72:60:bd:de:c8:3d:8f:84:46:b2:
d9:c5:b0:70:03:7d:ae:a8:2b:02:4a:5b:3b:b9:bd:
94:6b:69:7f:d7:02:f9:ef:c8:e3:b8:23:b9:de:c8:
73:d9:85:e4:30:b9:f2:cf:bc:a7:f7:fe:d1:96:68:
13:33:1c:e8:e2:04:97:e8:4b:9c:5c:d1:41:ad:27:
38:72:7f:8e:7f:bb:fe:14:8c:81:fe:41:8a:6b:ca:
1e:7c:ac:0d:ab:7f:91:1b:a6:0e:23:9c:58:c0:27:
21:bd:92:38:33:13:26:1f:75:22:73:31:4d:0d:88:
28:0f:bd:11:2d:d6:c4:17:d2:93:54:da:1a:5f:4f:
85:06:29:8e:4d:fe:f1:07:b8:2d:eb:bb:1e:6d:cf:
75:0a:4a:23:0d:98:d9:25:91:1c:49:f8:9e:cf:57:
23:b0:1d:0a:62:5e:e6:97:64:32:00:fa:c0:55:9d:
43:37:d0:18:29:0b:ae:98:f6:34:06:7e:d6:3e:30:
35:af:1f:10:e7:52:ad:0b:06:dc:64:80:dd:1a:1e:
16:36:2a:ee:9a:95:e2:ca:85:71:f4:49:69:c6:8a:
36:d9:d7:d1:46:89:d6:82:89:f5:51:1a:d4:d3:30:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:C6:9B:B4:DF:E1:CC:42:A1:C2:AF:3B:83:C8:62:63:0E:CC:80
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133332e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7b:57:c4:ea:c2:67:e2:09:84:13:28:c8:93:ab:d1:9b:5a:
af:e3:64:7f:38:7c:b5:75:2e:24:3e:ab:a1:0f:47:b1:11:ab:
4e:35:45:df:15:86:73:6b:81:a8:ed:fd:45:ef:1a:1c:2f:de:
66:1d:23:bd:22:95:8c:69:2f:3c:99:96:65:cc:ac:3b:77:b0:
48:f7:b4:3e:a8:aa:89:6a:46:4e:0a:9b:61:38:78:8f:97:5a:
04:bf:3f:6c:fe:92:d1:ae:1f:97:08:db:78:e3:0b:61:5d:d6:
fa:94:25:de:59:8b:98:00:68:b5:e5:d4:de:3d:cd:0f:d7:ea:
3d:4e:26:c7:61:24:c4:78:b8:68:fc:4b:d4:02:bc:0b:9d:2c:
99:68:1b:2b:70:c7:64:d2:14:7d:8e:93:27:39:5f:42:09:30:
09:8b:5d:6c:50:cb:ad:42:57:34:99:8d:48:c6:19:ce:88:51:
6c:38:94:94:e7:d5:65:e5:ff:03:40:1b:b0:5a:dd:ac:fa:4d:
86:fe:b2:06:43:3f:6f:f3:d0:26:23:35:f3:b9:8f:f0:e9:f0:
19:48:d7:da:7d:62:b3:7d:7b:55:22:07:63:6c:1a:1b:02:7e:
62:0f:cb:42:53:d6:02:99:cb:b3:ed:9b:56:bf:66:0a:9e:54:
aa:41:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:45:39 2025 by rpki-client