Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133362e302f32322d3232203d3e2039313235.roa
File: 3137382e3235342e3133362e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: QBP5wdCvtOLWEp+zpB3QkANT8rvKKBH7KAVijoiUzwY=
Subject key identifier: 62:28:2F:E0:E9:04:ED:B5:DE:24:6E:80:68:4D:C7:D7:89:C4:96:4B
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0BA76A5E186E92560A5D082A1B457224D1EF76B2
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133362e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:14:35 +0000
ROA not before: Tue 06 Jun 2023 09:09:35 +0000
ROA not after: Tue 04 Jun 2024 09:14:35 +0000
asID: 9125
IP address blocks: 178.254.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a7:6a:5e:18:6e:92:56:0a:5d:08:2a:1b:45:72:24:d1:ef:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:35 2023 GMT
Not After : Jun 4 09:14:35 2024 GMT
Subject: CN=62282FE0E904EDB5DE246E80684DC7D789C4964B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:74:1a:51:da:6c:c0:32:f1:3c:5f:af:45:
80:08:66:22:cc:20:cf:d9:33:41:de:c8:1f:a6:61:
01:cc:c6:55:7d:92:56:3f:0d:8a:b4:26:4d:28:46:
43:d8:8d:ec:6c:33:fe:54:d3:05:7a:65:1f:08:a6:
eb:2e:4f:a5:4a:9c:7b:4a:76:f4:10:1a:9f:68:a4:
bd:73:8f:51:39:b4:ac:d0:82:6e:28:99:34:2a:a7:
d6:ba:a1:93:1f:c7:a4:12:77:e8:03:3a:06:4a:99:
09:27:6e:16:43:32:a9:bb:7a:bd:d7:f9:41:c1:5c:
d1:a7:bd:c1:60:71:27:db:15:d8:e4:df:9d:1a:19:
2d:17:92:ab:8e:a4:d5:94:18:bc:9a:74:0b:63:cf:
06:98:34:d3:f3:9e:68:56:db:5c:90:dd:27:83:cd:
14:88:1c:0b:cb:5c:25:9b:05:b7:49:a9:fe:1d:28:
82:d6:9d:e0:86:e6:d8:77:9d:93:e6:ed:6b:a3:1a:
cf:1b:55:75:54:f5:fa:5c:0e:a1:8e:88:a4:76:67:
7b:db:a0:c0:c9:fa:19:a1:98:f4:f1:e9:71:81:ba:
a1:c8:87:1b:46:06:bf:a2:64:5a:56:54:be:b0:21:
6c:94:eb:e0:d0:23:64:4d:17:a9:d7:88:83:99:73:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:2F:E0:E9:04:ED:B5:DE:24:6E:80:68:4D:C7:D7:89:C4:96:4B
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3133362e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:08:fb:1a:47:ac:8c:0f:33:0f:2e:6d:51:3d:53:ad:14:39:
11:c7:cc:14:0d:ac:50:05:c4:b8:b1:de:18:45:e4:ce:6d:cc:
e7:cd:ca:30:bc:b2:8c:18:be:bf:9d:f1:f5:d0:e3:9c:71:a7:
fe:9f:9f:e3:9b:21:d4:8f:4e:7a:1f:ed:d5:43:eb:ee:88:f9:
6f:11:e6:d7:9a:25:2b:8e:76:4b:98:03:45:7b:62:65:e8:d0:
57:3f:d0:5b:5e:6e:6a:2d:6a:25:86:73:22:1f:00:2b:f9:6c:
50:5d:dc:4e:b3:d6:71:d7:4e:e7:78:af:af:a1:f0:65:9c:59:
67:aa:d3:07:d8:3a:5b:1d:b3:3d:b2:51:df:7e:53:51:d9:60:
37:f7:88:29:62:41:e2:6e:5a:c5:2f:39:19:a4:d4:11:31:5a:
eb:19:91:20:22:57:1b:8d:42:32:80:27:39:4a:27:41:82:a2:
4d:cf:82:23:73:36:c0:2d:b6:51:08:48:d4:8b:c2:f4:a2:a4:
4a:7b:98:e2:7b:fc:65:fb:27:1a:78:c5:0a:45:4d:2d:dd:bc:
99:63:94:e3:29:61:84:c8:2f:15:e3:12:6e:17:5f:dc:04:90:
0c:68:19:fb:d0:8e:b5:66:63:02:b3:19:0b:a5:9e:a5:60:eb:
e1:62:d3:b6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUC6dqXhhuklYKXQgqG0VyJNHvdrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTA5MzVaFw0yNDA2MDQwOTE0MzVaMDMxMTAvBgNV
BAMTKDYyMjgyRkUwRTkwNEVEQjVERTI0NkU4MDY4NERDN0Q3ODlDNDk2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsnQaUdpswDLxPF+vRYAIZiLM
IM/ZM0HeyB+mYQHMxlV9klY/DYq0Jk0oRkPYjexsM/5U0wV6ZR8IpusuT6VKnHtK
dvQQGp9opL1zj1E5tKzQgm4omTQqp9a6oZMfx6QSd+gDOgZKmQknbhZDMqm7er3X
+UHBXNGnvcFgcSfbFdjk350aGS0XkquOpNWUGLyadAtjzwaYNNPznmhW21yQ3SeD
zRSIHAvLXCWbBbdJqf4dKILWneCG5th3nZPm7WujGs8bVXVU9fpcDqGOiKR2Z3vb
oMDJ+hmhmPTx6XGBuqHIhxtGBr+iZFpWVL6wIWyU6+DQI2RNF6nXiIOZc8obAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUYigv4OkE7bXeJG6AaE3H14nElkswHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sv6IMA0GCSqGSIb3DQEBCwUAA4IBAQCkCPsaR6yMDzMPLm1RPVOtFDkRx8wUDaxQ
BcS4sd4YReTObcznzcowvLKMGL6/nfH10OOccaf+n5/jmyHUj056H+3VQ+vuiPlv
EebXmiUrjnZLmANFe2Jl6NBXP9BbXm5qLWolhnMiHwAr+WxQXdxOs9Zx107neK+v
ofBlnFlnqtMH2DpbHbM9slHfflNR2WA394gpYkHiblrFLzkZpNQRMVrrGZEgIlcb
jUIygCc5SidBgqJNz4IjczbALbZRCEjUi8L0oqRKe5jie/xl+ycaeMUKRU0t3byZ
Y5TjKWGEyC8V4xJuF1/cBJAMaBn70I61ZmMCsxkLpZ6lYOvhYtO2
-----END CERTIFICATE-----
Generated at Sat May 10 00:28:52 2025 by rpki-client