Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136322e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3136322e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: uJ7kALU23bcXFolo1p9f5c/5febAKaj8KttDO9yd3Ww=
Subject key identifier: C3:38:B9:2B:C1:01:B8:B5:B8:C2:A2:AE:04:E9:5D:0A:C2:27:12:68
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 4332A058483CB4C09F0E2A4041F5125823D1D16C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136322e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:15:45 +0000
ROA not before: Tue 06 Jun 2023 09:10:45 +0000
ROA not after: Tue 04 Jun 2024 09:15:45 +0000
asID: 28964
IP address blocks: 178.254.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:32:a0:58:48:3c:b4:c0:9f:0e:2a:40:41:f5:12:58:23:d1:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:10:45 2023 GMT
Not After : Jun 4 09:15:45 2024 GMT
Subject: CN=C338B92BC101B8B5B8C2A2AE04E95D0AC2271268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:05:69:12:87:ad:d6:70:e3:c7:76:41:3c:
b7:fa:93:83:c4:ce:8d:d4:c4:28:5c:2e:c9:1c:69:
6d:c9:4f:cf:42:c3:3f:8b:ec:a4:9a:a5:34:77:c6:
79:7f:19:d5:e3:a8:0e:09:0f:b7:8b:df:17:19:b6:
ff:9b:72:c2:41:0c:d6:0f:05:24:a7:0b:f8:93:2d:
fc:62:de:5b:10:fb:61:e1:e1:e6:12:bc:d3:56:84:
da:fa:39:d0:ba:bc:ba:a4:d9:2d:6c:6b:4c:0e:8c:
63:64:49:4d:0b:c6:ca:2b:0e:a0:03:14:31:3b:27:
e7:79:26:d7:ed:44:db:05:3b:53:6b:3f:29:28:58:
78:10:88:bb:c1:cc:91:c4:ed:e5:df:e1:6a:f4:7e:
bf:2e:41:56:3a:2b:e1:68:e4:80:0d:df:8a:20:2a:
78:42:52:c8:c2:76:6f:f5:01:10:ba:ee:77:e9:57:
7e:5d:72:69:dc:a2:65:a1:f1:fc:3f:3a:8c:16:d5:
12:4e:00:e8:4c:1e:90:f9:39:a2:4d:51:3c:ba:60:
ea:6c:00:5e:5e:9b:cd:02:b8:aa:bc:ea:ce:19:7a:
dd:dc:f6:c6:76:3b:87:07:09:7b:6a:2a:3a:54:cc:
76:4c:e5:e8:ee:10:24:56:d9:45:79:fb:85:2a:bb:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:B9:2B:C1:01:B8:B5:B8:C2:A2:AE:04:E9:5D:0A:C2:27:12:68
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136322e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:68:0d:8b:91:cf:ed:dc:37:37:61:6c:5a:c8:fa:1b:8c:2c:
d1:f7:8c:64:18:d6:e0:69:ac:79:5f:33:4b:d7:f4:af:dc:02:
8a:61:ef:01:3d:2a:ff:36:77:2d:27:0b:3e:2c:dd:1c:ce:c6:
b5:d6:29:a8:91:15:ad:71:53:68:a0:6f:75:91:1a:ea:6f:fb:
b9:be:72:5d:03:f9:05:fd:0a:de:96:54:4d:5b:2c:99:d0:fd:
21:fd:04:51:cc:b6:51:3d:e0:79:6c:ef:aa:1c:a7:0b:45:c9:
08:b5:2b:92:46:5e:23:d8:f3:9c:12:a2:4b:3b:1f:56:42:74:
0d:6c:33:ff:13:ac:22:d6:66:44:47:dc:3c:c9:cf:c8:eb:3b:
cd:aa:77:d4:9b:fa:78:29:f8:09:45:eb:60:1d:20:13:db:59:
3d:f3:a8:f9:46:62:50:55:cf:46:aa:66:1d:3c:07:1b:d3:cc:
b2:2a:3c:fe:e0:98:04:96:f4:1a:35:26:7b:aa:1b:68:d1:be:
de:0b:34:43:99:75:23:33:0d:8b:e0:c0:4c:c8:5c:64:5e:28:
75:97:3d:04:f5:31:7e:e5:60:48:9b:7d:f3:66:cb:cb:e3:e8:
62:8d:6a:c1:ad:de:3d:61:5e:ce:d0:43:c8:e9:3c:9d:73:28:
fb:cf:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:58:58 2025 by rpki-client