Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134342e302f32302d3230203d3e2039313235.roa
File: 3137382e3235342e3134342e302f32302d3230203d3e2039313235.roa (raw, json)
Hash identifier: sUYWVlJ1hLHibHKTjGgwxQ63RSCrYEpKf05fdFUTMJk=
Subject key identifier: D8:C6:94:A5:5A:19:B3:90:3E:E2:9F:43:D5:78:F5:05:A2:34:35:A5
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0F98CF214D07969A170E0946CBD7E8BB8C7EA46B
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134342e302f32302d3230203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:14:57 +0000
ROA not before: Tue 06 Jun 2023 09:09:57 +0000
ROA not after: Tue 04 Jun 2024 09:14:57 +0000
asID: 9125
IP address blocks: 178.254.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:98:cf:21:4d:07:96:9a:17:0e:09:46:cb:d7:e8:bb:8c:7e:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:09:57 2023 GMT
Not After : Jun 4 09:14:57 2024 GMT
Subject: CN=D8C694A55A19B3903EE29F43D578F505A23435A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:49:b8:e1:d1:42:73:8e:f0:97:0f:83:b0:
22:fe:19:27:0b:46:f3:34:57:81:35:d9:41:c1:4f:
86:1a:58:b9:80:1d:24:f0:2a:5e:0d:b8:95:ad:70:
5a:41:c1:34:cd:16:98:50:da:8c:b9:8e:54:4a:36:
4b:ef:3e:09:c3:8f:f2:5c:ca:d3:88:a3:a4:74:43:
99:f6:8b:a5:41:b8:d3:b0:58:3e:47:0c:1f:e9:6f:
ed:2b:86:5b:45:da:3f:f2:10:59:a5:91:3f:5c:08:
4e:ee:92:c6:5f:57:8d:8d:de:9d:e7:56:15:97:22:
7a:88:34:6a:c3:bd:e0:0b:77:7d:29:d7:c6:11:cb:
16:c1:80:00:e7:df:15:29:77:77:8e:af:60:d7:e1:
54:92:a0:77:6e:d6:cd:c0:83:4f:d1:d1:87:81:3d:
4e:26:8c:7c:a7:75:7f:b7:7a:f7:15:2c:80:23:21:
74:e0:2c:41:d3:53:ff:66:11:d1:87:39:eb:82:2d:
2c:c7:83:89:3b:3f:26:c9:c8:ee:cf:c1:cb:93:59:
6c:3b:f5:e5:80:c5:78:14:17:09:e0:42:87:e4:3c:
d2:4e:f1:d5:6c:9f:a8:4e:8f:75:60:56:0a:a9:82:
4a:f5:76:d9:cf:21:32:0f:93:c1:b2:aa:6b:46:50:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:94:A5:5A:19:B3:90:3E:E2:9F:43:D5:78:F5:05:A2:34:35:A5
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134342e302f32302d3230203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:5a:d6:2c:3c:16:20:5a:e6:af:6b:84:19:38:3b:a9:56:ab:
a6:b7:14:34:c0:4d:e6:b8:84:6d:40:04:83:95:23:41:b7:9d:
1c:9d:ae:5a:41:5b:c6:12:fe:bc:5b:87:49:3b:0d:35:29:83:
c0:52:10:87:6a:54:b2:e4:2f:cd:7c:ab:34:bf:d6:be:fc:3b:
6a:e6:c2:17:5f:78:8b:a7:1a:45:42:0c:32:df:a5:ff:91:b3:
ab:75:43:ca:c0:33:12:f1:2c:d3:b3:e1:db:03:96:8c:49:f1:
08:81:e2:93:75:b5:f1:20:55:3c:d0:8d:89:25:40:6b:51:39:
07:5e:5a:02:2a:8f:09:b9:46:7e:94:6e:59:4a:1c:3a:82:a2:
c7:20:89:fa:a5:f0:6b:2b:9d:41:7d:f4:b8:71:5f:46:09:92:
9f:59:51:3e:3a:b7:69:70:8c:5a:64:62:07:d5:51:df:16:61:
60:72:43:a1:32:58:f9:38:6b:3a:1b:f2:e2:08:e7:ca:c1:9e:
a7:2b:f6:d9:19:d5:b5:5e:87:58:ff:28:b1:29:ae:01:56:47:
d0:f2:51:39:5c:fd:56:10:74:65:6e:16:48:91:de:12:87:60:
0a:f9:27:4f:ae:ce:5b:29:77:0a:5c:41:f3:e5:e8:2c:fd:bf:
03:a4:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:44:58 2025 by rpki-client