Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134372e302f32342d3234203d3e20323032373439.roa
File: 3137382e3235342e3134372e302f32342d3234203d3e20323032373439.roa (raw, json)
Hash identifier: Hs/Y3g/uRpIzNUWqofpiFQ2pVQKyZSD11w5kSWj2SQI=
Subject key identifier: D5:11:37:9C:20:B1:43:5F:97:1C:5C:59:42:30:2D:A7:7A:EF:13:CD
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 3204FEAE657942B864AB0E98300E59289B38EA1C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134372e302f32342d3234203d3e20323032373439.roa
Signing time: Tue 06 Jun 2023 09:15:19 +0000
ROA not before: Tue 06 Jun 2023 09:10:19 +0000
ROA not after: Tue 04 Jun 2024 09:15:19 +0000
asID: 202749
IP address blocks: 178.254.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:04:fe:ae:65:79:42:b8:64:ab:0e:98:30:0e:59:28:9b:38:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:10:19 2023 GMT
Not After : Jun 4 09:15:19 2024 GMT
Subject: CN=D511379C20B1435F971C5C5942302DA77AEF13CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:d9:0a:53:03:f7:03:d3:09:38:89:70:c7:
3a:5d:a6:72:27:11:f4:0f:25:ca:4d:ca:0c:a3:c3:
d5:aa:ab:e6:8f:23:53:a0:6f:d7:51:b0:d0:b9:74:
1b:43:b4:a9:97:d6:97:77:5b:e5:67:38:86:02:e5:
a1:8c:73:ec:c3:e5:57:28:c9:e3:b2:f8:a6:46:f9:
50:07:fd:3f:93:9e:b1:9b:03:3b:ca:6a:29:31:1c:
0d:34:2b:84:39:ba:c1:08:38:6b:4a:6e:44:88:63:
40:36:94:9b:a4:af:26:f2:43:72:37:ca:60:99:d5:
10:66:a4:ff:56:61:45:12:cf:89:a0:73:37:aa:be:
1a:13:6b:57:c6:37:9d:85:f3:30:c1:35:13:a9:31:
bb:a0:4d:2e:65:22:d6:14:5b:47:5f:14:a0:e6:55:
a2:b0:59:be:15:bc:cb:91:3e:7b:7c:6e:3f:5a:ec:
f0:0d:eb:3d:f0:63:6a:80:44:a6:22:8f:03:50:7c:
74:af:17:7e:ff:a9:e8:dd:33:7f:64:4c:83:f5:34:
e3:60:45:9c:72:c9:f0:55:56:ad:16:45:fa:3f:1c:
c0:0b:f1:d6:b6:dd:92:9d:83:ec:53:e0:29:69:a9:
d8:f4:08:d2:bf:c4:f8:03:71:d6:77:32:3d:35:68:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:37:9C:20:B1:43:5F:97:1C:5C:59:42:30:2D:A7:7A:EF:13:CD
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134372e302f32342d3234203d3e20323032373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.147.0/24
Signature Algorithm: sha256WithRSAEncryption
04:05:7d:78:4a:96:10:56:db:ca:da:96:19:20:2b:0c:7c:61:
38:3a:35:27:3f:40:cd:31:0a:09:fc:90:6e:c3:b6:ea:f5:83:
38:32:f0:d9:ae:31:3c:81:4e:25:59:48:9d:02:6f:85:f1:4e:
cf:22:dc:62:f5:8f:f7:8a:a4:33:54:f3:9b:57:4b:11:89:de:
7d:c6:bc:04:7b:51:b3:e1:b0:5a:cf:a0:29:61:5a:64:ea:46:
a9:a5:70:4c:17:c6:66:14:9c:9d:b7:24:f1:05:8f:d8:20:0f:
57:5f:2b:20:d2:3c:1f:8e:72:e7:23:a7:40:fc:4f:34:fc:de:
80:d1:59:3c:c4:14:57:d8:ce:8e:d8:f9:3c:0a:02:2a:e1:6e:
d8:c1:00:49:fc:24:fe:9f:78:eb:a4:de:5a:f0:2f:ff:f4:66:
76:29:bd:4d:c6:67:57:74:4f:c1:83:a0:90:5c:c4:dc:66:38:
e4:04:6f:61:98:36:64:f4:ee:fb:07:99:7f:00:bc:2b:9e:d1:
b1:df:e7:6b:58:3c:60:b5:93:3a:df:2b:b6:e7:25:a9:1a:90:
f0:36:86:f0:86:42:b5:ff:7d:89:06:09:3a:6b:a4:04:79:65:
b0:5d:75:7b:ec:d3:c2:59:55:67:e7:44:32:80:45:3c:ee:35:
08:92:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:07:35 2025 by rpki-client