Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133342e302f32342d3234203d3e203437343739.roa
File: 3137382e3235342e3133342e302f32342d3234203d3e203437343739.roa (raw, json)
Hash identifier: iMWPbDFz6RfjBlF9CdFln81cAtwycdjhIIb1taznGhQ=
Subject key identifier: 6B:38:9C:20:21:9B:1A:77:5F:DA:49:53:11:50:6E:1D:52:09:5E:B5
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2BD1875EE6EEF1842D534ACB24E682FFD145140D
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133342e302f32342d3234203d3e203437343739.roa
Signing time: Tue 06 Jun 2023 09:14:27 +0000
ROA not before: Tue 06 Jun 2023 09:09:27 +0000
ROA not after: Tue 04 Jun 2024 09:14:27 +0000
asID: 47479
IP address blocks: 178.254.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d1:87:5e:e6:ee:f1:84:2d:53:4a:cb:24:e6:82:ff:d1:45:14:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:27 2023 GMT
Not After : Jun 4 09:14:27 2024 GMT
Subject: CN=6B389C20219B1A775FDA495311506E1D52095EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:34:18:d9:68:97:7c:b8:e7:3a:27:85:58:
b4:4f:52:33:bb:09:02:9e:4e:e5:8c:b7:94:bd:e3:
43:b7:c7:4a:bb:61:d8:65:c0:f9:52:7e:8e:6e:5a:
75:fb:dc:2c:81:64:07:3d:6c:05:e2:df:8b:7e:1b:
9e:34:88:b9:03:30:5b:43:2c:bc:d2:8c:13:e5:4a:
6a:8a:b1:e1:72:8d:d6:d7:7e:5d:b4:f3:c5:1d:37:
30:b8:a2:ae:0e:48:4e:4c:34:95:65:8b:59:e6:51:
e8:34:f2:0c:9d:b2:a9:87:d6:ff:45:2a:d5:ae:9c:
e7:2f:34:3c:42:bd:76:ac:6c:8a:dc:5d:90:6b:83:
11:66:1f:d1:fc:fa:7d:85:c3:25:bb:f0:7c:17:13:
fd:c8:6f:43:e0:f4:93:6f:6c:1b:b7:08:9d:2d:f5:
6b:ed:e8:f9:a9:8d:95:b2:5a:8f:10:94:a1:bb:34:
0b:12:ea:db:7a:9b:bc:cc:b8:aa:1b:9e:a0:7e:d5:
58:e5:eb:5f:fb:a6:8a:6c:1c:06:40:69:e5:7a:80:
3f:33:44:9a:f7:51:43:8b:65:00:02:18:2d:8f:2c:
d9:08:21:26:ed:a7:b1:5c:f3:1d:e7:53:9a:be:51:
e4:08:ab:3b:55:0a:25:99:95:1b:7b:e6:d6:c4:0b:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:9C:20:21:9B:1A:77:5F:DA:49:53:11:50:6E:1D:52:09:5E:B5
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133342e302f32342d3234203d3e203437343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bd:cc:08:4f:e6:d5:4c:d3:dd:56:e7:7e:78:1e:38:f0:53:
49:f0:db:22:5d:59:5c:e1:12:09:7a:f4:53:c8:81:2c:d9:21:
97:10:4c:1a:82:9d:d8:45:ee:91:fe:a9:aa:b7:37:d7:4b:58:
d2:b7:ff:62:d0:7b:2a:92:07:3c:93:41:51:f2:37:a8:b0:3b:
02:64:e6:a3:91:4d:47:d2:21:fe:58:f0:3c:cd:3f:12:df:62:
44:9f:85:46:d3:a0:e6:95:8c:ba:fa:9b:32:cd:57:25:fa:9f:
20:a3:39:ad:01:a4:a6:02:b5:fb:e7:ff:ba:69:03:4c:b6:74:
3a:26:bb:d8:39:03:ad:b2:40:ba:c2:ad:58:12:ad:e9:d9:59:
55:a8:4e:14:c9:ed:5d:25:a4:51:c3:7b:44:cb:77:47:03:ae:
6b:4f:4d:72:e8:56:a8:db:29:9c:25:17:0c:12:3e:36:6d:41:
3a:63:c0:85:55:d5:39:89:b9:31:e6:2a:db:93:76:83:5c:be:
cd:0d:47:4c:86:1c:3e:fc:03:03:77:03:fa:46:03:d1:f5:af:
16:6f:bd:59:74:e1:20:bd:75:0e:1d:f8:04:6a:6b:33:8d:a5:
7d:21:de:9c:f0:7e:6e:34:49:2a:92:11:a3:24:56:cc:8e:49:
da:dd:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:23 2025 by rpki-client