Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136332e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3136332e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: fLBpSiBTZP4+3XhvE1K7ES1UyDYHq4KDeQQJ9/C4NLA=
Subject key identifier: EA:1A:70:6F:4B:9A:05:BC:9A:D3:29:0A:2B:53:37:64:F1:D1:FC:01
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 77DFB369AB650A5B1CAE1F39F7ED752C012FCA55
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136332e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:15:52 +0000
ROA not before: Tue 06 Jun 2023 09:10:52 +0000
ROA not after: Tue 04 Jun 2024 09:15:52 +0000
asID: 9125
IP address blocks: 178.254.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:df:b3:69:ab:65:0a:5b:1c:ae:1f:39:f7:ed:75:2c:01:2f:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:10:52 2023 GMT
Not After : Jun 4 09:15:52 2024 GMT
Subject: CN=EA1A706F4B9A05BC9AD3290A2B533764F1D1FC01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:bd:d1:be:2a:0f:6d:4f:57:7b:7d:f5:8f:
7b:9b:40:8e:4d:83:af:f6:d5:ab:eb:57:c3:f7:13:
9e:49:91:f1:df:a8:4e:3c:5f:cd:81:ad:e0:3d:38:
bf:7c:ee:5e:8f:d5:79:5a:05:0a:31:a8:24:ba:40:
98:c9:d4:32:71:a3:24:4d:9c:7c:3c:d5:8d:55:45:
88:69:f8:b9:2a:2a:ef:bc:82:e3:16:68:1c:91:66:
af:8e:86:47:b4:8b:cb:60:5a:0e:7e:88:a1:84:d5:
02:10:23:57:43:38:c7:e6:fc:30:d3:10:0a:e7:26:
0c:f0:5a:1a:ed:a0:66:c7:4d:31:df:2f:de:d9:eb:
3b:f2:45:cd:9d:13:ad:59:e6:98:f1:a9:4a:f4:16:
52:14:ea:7f:ca:b5:f5:fa:a8:67:d2:4a:eb:63:12:
6d:80:a2:64:79:00:9f:11:32:ac:8d:53:33:80:7e:
74:a3:a5:58:ed:da:af:e5:33:12:2b:32:b8:88:41:
e2:9f:9e:15:42:2c:49:51:4f:13:27:82:07:e7:6b:
32:30:63:89:a6:02:26:03:a1:07:21:a5:bb:4e:1e:
8a:47:52:e0:9b:ea:fe:de:36:e5:7a:88:76:90:e3:
27:09:a4:c4:35:45:dd:cc:b5:a3:dc:e2:2c:76:8c:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:70:6F:4B:9A:05:BC:9A:D3:29:0A:2B:53:37:64:F1:D1:FC:01
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136332e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:82:da:e7:4d:e5:f7:dc:e3:bc:c5:aa:c9:54:30:bf:bc:c9:
05:b2:6b:ae:51:42:9b:91:4d:3b:62:c5:e9:94:a6:74:00:9a:
46:75:ba:b7:cb:bc:6d:4d:90:6d:41:71:ac:d0:3b:f4:a6:89:
6a:df:5a:ff:3b:cc:0f:fc:dc:d0:39:91:eb:19:34:9a:89:de:
a9:5b:b4:6b:bc:4d:74:bd:2c:95:cd:d9:5a:a1:c9:8b:d7:2d:
95:34:1f:b0:f1:e5:94:a0:4b:6b:8d:69:31:e1:ac:64:df:e6:
9b:e7:e4:37:4e:88:51:8a:2c:49:ec:91:8d:e4:75:fe:0d:bc:
39:15:82:9a:0f:0c:e0:8a:11:ac:83:3e:29:d4:57:2b:d8:e6:
36:29:07:0e:14:fb:1b:5f:09:84:de:92:f3:d2:2f:53:b5:f0:
58:29:0c:6c:c8:6c:c6:c9:d8:2c:6e:8a:d8:ad:95:07:91:60:
20:e5:4d:38:c8:0a:d2:3b:17:a2:d3:73:d2:3a:71:24:df:23:
c2:33:0e:09:4f:f8:39:22:bc:6a:0d:54:cf:23:35:b8:d6:67:
44:ce:07:cc:fd:60:8a:e3:3e:10:96:d0:49:97:db:8b:e0:c6:
2d:36:ba:fb:c6:4b:77:f3:f3:2e:6a:b9:f7:3e:c0:b9:f9:96:
9a:ef:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:59:28 2025 by rpki-client