Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134302e302f32322d3232203d3e2039313235.roa
File: 3137382e3235342e3134302e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: C6EnX/HIwLYXn6sgRo2lXdx+dZBNHAxxDl4cJDz960o=
Subject key identifier: E9:8E:1B:83:06:2F:5B:C6:DA:85:06:4F:36:CA:28:1A:BD:0D:30:F7
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 781D8010348F0A69A0F95CF255313133E7A4231C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134302e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:14:46 +0000
ROA not before: Tue 06 Jun 2023 09:09:46 +0000
ROA not after: Tue 04 Jun 2024 09:14:46 +0000
asID: 9125
IP address blocks: 178.254.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1d:80:10:34:8f:0a:69:a0:f9:5c:f2:55:31:31:33:e7:a4:23:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:46 2023 GMT
Not After : Jun 4 09:14:46 2024 GMT
Subject: CN=E98E1B83062F5BC6DA85064F36CA281ABD0D30F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:ff:0b:46:62:2f:60:c0:3b:9c:06:2f:7c:
16:31:5f:3f:09:56:12:d7:3f:0a:3f:6c:c9:52:1e:
65:17:ae:09:30:cd:de:85:a3:50:9f:0c:be:c2:00:
72:0a:91:ac:2b:38:27:a1:04:c8:35:41:9f:49:40:
4a:59:11:39:7d:64:16:3d:0d:cf:2e:a4:c1:ab:58:
4e:3f:67:83:54:c7:3c:5c:2d:1a:17:cf:ff:49:ac:
53:a2:21:90:f5:d2:6e:48:fd:70:2a:5c:61:0c:dc:
85:50:5a:1e:ab:f9:90:a3:1c:4b:88:3a:e8:01:b2:
aa:3a:52:d6:02:79:5b:92:fe:f5:1a:d2:23:16:26:
0e:9c:16:d4:0a:df:54:a3:7d:ff:6c:b1:d4:15:2f:
f4:34:bc:1e:fd:02:ae:b3:5d:16:37:e9:84:0b:15:
59:57:b0:a9:91:f4:15:ee:d1:d4:8d:8c:10:2c:12:
ed:bb:1d:3e:4e:ae:11:8a:ef:8f:17:1d:db:0e:90:
c1:20:67:0a:3d:54:59:99:03:51:a4:d5:77:d9:cc:
ef:d0:6e:9d:c0:d9:4c:df:34:90:5f:e6:b9:7f:c6:
34:e2:a1:e2:c4:c0:42:25:c7:73:2a:d5:3e:9a:39:
ab:ea:62:74:d7:46:6b:96:8c:1a:69:b7:00:2a:b8:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:1B:83:06:2F:5B:C6:DA:85:06:4F:36:CA:28:1A:BD:0D:30:F7
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134302e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.140.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fa:1f:f3:36:3e:4a:11:c1:49:42:73:c4:88:ef:b3:9f:ff:
96:61:9d:55:21:db:fb:62:fa:51:79:6f:60:5a:2b:6d:d2:e2:
84:69:35:b6:43:c1:8f:87:20:14:b0:ae:a6:fc:fb:5a:6d:2c:
13:04:47:20:54:99:0a:61:c3:c8:1f:29:7f:df:1d:4b:61:69:
e0:38:75:e2:c0:44:d0:71:8f:3a:f6:65:f1:8e:d6:51:5e:35:
90:ce:a5:02:3b:8a:72:49:cc:cf:09:54:ba:eb:00:43:f9:4e:
11:2c:06:a3:13:2c:f6:43:8d:a6:33:4d:d1:1e:85:b6:db:90:
36:58:1b:8a:ba:8b:75:00:b8:fa:bd:d7:3d:da:b3:cc:45:3f:
94:2e:5d:d0:c8:c5:68:fe:3d:2d:0a:2a:90:0b:31:b0:bd:29:
29:84:8c:a1:d8:6a:27:74:0c:59:2e:69:f9:11:a3:bb:79:06:
b6:34:74:33:e0:16:b2:eb:7d:78:38:3e:35:96:ed:99:31:ff:
45:1d:6c:08:37:d0:6c:e8:dd:dd:36:27:36:83:80:95:dd:b0:
2d:e5:2b:c8:ab:6f:c5:80:20:47:d3:87:df:4d:0e:80:13:5e:
89:87:d3:39:52:15:ef:41:71:fd:a3:de:b4:0b:70:e8:1f:e1:
0d:0d:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:28:36 2025 by rpki-client