Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3135302e302f32342d3234203d3e2037303138.roa
File: 3137382e3235342e3135302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: oWLgd5AG+fOZySUMU5LI0WDZ7Y4ZBG7QUKs6k3d5gBY=
Subject key identifier: EF:EF:92:A5:6B:8F:E6:52:79:38:F1:96:57:6C:57:B2:2C:C0:41:EA
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 142C1FC85E6290E7DD5644CAD070FDCA141B2AD6
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3135302e302f32342d3234203d3e2037303138.roa
Signing time: Tue 06 Jun 2023 09:15:28 +0000
ROA not before: Tue 06 Jun 2023 09:10:28 +0000
ROA not after: Tue 04 Jun 2024 09:15:28 +0000
asID: 7018
IP address blocks: 178.254.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2c:1f:c8:5e:62:90:e7:dd:56:44:ca:d0:70:fd:ca:14:1b:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:10:28 2023 GMT
Not After : Jun 4 09:15:28 2024 GMT
Subject: CN=EFEF92A56B8FE6527938F196576C57B22CC041EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:9a:88:05:09:7c:b2:a0:10:b7:9b:2e:87:
c4:99:fc:0d:e1:70:67:3f:88:e5:3f:3f:0c:03:e6:
06:27:a3:b6:6e:ca:ad:df:60:23:ff:ab:9a:21:84:
69:6f:25:0f:63:a0:2e:53:85:0c:3b:d9:88:74:de:
4f:ca:57:45:ef:79:3e:be:62:36:2e:2c:15:dc:ba:
f9:ac:8b:b0:49:65:b6:87:7f:8f:c0:c8:43:3f:97:
d4:52:a4:ed:f3:ec:aa:6d:4f:a5:40:26:50:e2:7e:
b9:38:3f:f6:23:64:ba:a5:8b:c0:9c:d6:9d:65:a4:
a4:7f:c0:62:5b:4e:0a:24:62:47:31:21:10:7a:df:
5f:b1:17:54:14:9d:01:67:07:95:dc:25:3b:74:23:
e3:50:f8:e5:06:76:f0:1d:ab:ee:7e:8c:8b:18:37:
3b:b9:c5:c2:08:49:b7:78:2e:98:02:43:e0:f4:cd:
43:40:72:4e:8e:af:f1:fc:18:08:8e:3d:90:41:db:
f8:13:0d:9c:ef:36:fc:86:c8:cc:66:c1:f1:e4:1d:
8a:1b:5d:08:4b:4f:3f:21:4a:b1:ee:7f:76:2b:e5:
33:c5:86:41:5f:00:1f:00:c4:32:3a:78:a3:1f:52:
f0:1f:7b:b3:a5:eb:69:0d:10:f4:fb:34:6e:c6:46:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:92:A5:6B:8F:E6:52:79:38:F1:96:57:6C:57:B2:2C:C0:41:EA
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3135302e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a0:91:ca:ef:68:15:d0:78:85:da:ca:56:8b:fa:1a:12:ac:
63:5a:e5:22:2d:07:13:8a:a5:77:39:a5:09:ea:b7:a7:0d:75:
ef:5c:c5:d4:57:2d:5f:86:f4:f0:5d:42:23:7e:ab:1c:d3:85:
35:d2:43:b8:d1:79:b7:ba:94:2c:23:3d:f0:99:a3:17:ff:fb:
21:19:b2:37:38:00:e6:54:df:9d:41:81:e6:73:68:0b:fb:2f:
b9:95:cf:00:93:54:e3:48:c2:d8:b2:1f:2d:8d:43:dc:33:37:
e0:1f:27:b5:24:fd:07:67:2f:34:49:d4:6c:64:9c:36:a4:76:
4c:e2:b9:ac:a8:1b:f3:57:35:c5:f4:29:48:88:7f:63:af:52:
1a:31:7d:c3:03:e9:6d:d6:b7:f3:20:3a:14:6c:0d:a6:66:10:
0d:a8:46:31:31:8b:f2:6d:14:41:dc:57:7d:4d:9e:eb:49:df:
82:ba:75:70:47:c3:5e:8a:95:e3:a4:b6:85:d0:c4:de:b1:aa:
e6:da:2b:93:bb:ba:1a:10:7a:08:c1:de:a5:4d:68:70:b3:22:
1a:21:9e:fd:c3:f4:a9:66:e7:ac:f0:03:de:c2:35:3e:55:3a:
b4:26:cd:41:07:07:76:45:49:a5:2e:ec:56:f2:bd:71:af:01:
ac:76:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:56:14 2025 by rpki-client