Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136342e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3136342e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: kO9ct6YMmue26bURw/hOw+4UZFgJUPqo9uyR67zySV0=
Subject key identifier: 4A:37:A1:CA:4D:A4:2E:76:BD:15:EA:86:35:86:26:DC:07:0D:6E:8E
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 20445D0CE74242B1DB3B3C9C9ABFA4050AC8054C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136342e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:16:06 +0000
ROA not before: Tue 06 Jun 2023 09:11:06 +0000
ROA not after: Tue 04 Jun 2024 09:16:06 +0000
asID: 28964
IP address blocks: 178.254.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:44:5d:0c:e7:42:42:b1:db:3b:3c:9c:9a:bf:a4:05:0a:c8:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:06 2023 GMT
Not After : Jun 4 09:16:06 2024 GMT
Subject: CN=4A37A1CA4DA42E76BD15EA86358626DC070D6E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:eb:d9:f5:5c:c6:f6:c0:34:76:95:ac:c7:
8d:d2:2b:41:28:8f:50:44:2b:2b:7b:71:ec:8e:cc:
59:61:21:fc:57:3f:4b:2f:06:4c:b5:90:76:d4:fa:
8f:7d:e4:03:df:8c:a3:35:03:08:24:ce:2d:3e:7b:
5e:f2:dd:a2:2e:87:eb:83:c7:c9:0c:dd:5d:52:24:
46:2f:7b:ef:ce:c9:04:f0:8c:70:9e:ae:c5:3b:30:
2b:06:2a:2d:03:9b:6e:43:d4:f6:fb:b0:4d:40:6e:
a1:56:8e:a1:6f:9d:8e:1c:2e:04:98:05:4f:92:44:
52:2f:d8:5a:29:f6:95:d8:42:ab:7a:16:13:12:8e:
87:0e:89:75:35:1c:c6:5e:87:d6:2d:90:1b:2d:76:
a2:b0:94:23:29:f1:bd:9d:3f:75:f5:d7:57:d2:c1:
fa:87:e8:c8:68:f0:e1:2d:bc:55:56:9d:d1:6c:d9:
ad:3d:f2:62:9d:28:d4:8e:15:c4:21:2f:3e:bf:d4:
4a:b6:63:b3:94:82:62:d2:db:f0:d2:b6:84:a4:a9:
d6:81:83:05:9c:f7:f1:75:4d:8d:aa:d7:b8:d0:e0:
c2:f3:05:8e:61:4f:83:2a:23:c8:6e:b2:e3:8c:3e:
bc:20:3c:53:de:98:09:da:ea:b9:b4:60:3c:18:c4:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:A1:CA:4D:A4:2E:76:BD:15:EA:86:35:86:26:DC:07:0D:6E:8E
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136342e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.164.0/24
Signature Algorithm: sha256WithRSAEncryption
61:44:3b:15:52:d1:6f:4d:f4:92:71:37:40:e4:84:fe:4a:bd:
57:e6:45:ca:f9:20:df:ed:69:13:3d:a0:9b:0b:b7:3d:ac:52:
f6:b9:e2:c8:44:05:84:28:ca:2b:7b:96:fd:4e:14:a1:be:61:
63:fa:7a:12:e8:1a:79:b9:9c:b5:d5:25:ce:ca:b9:97:af:cd:
c1:ba:fc:86:13:32:15:b9:01:64:c6:f8:01:fc:a0:c6:a7:ea:
24:0c:56:49:f2:65:65:d9:9d:60:ae:ee:45:6d:7b:37:87:9b:
f8:3e:cc:ac:d8:d4:70:b7:f1:12:1f:65:38:aa:bb:93:5f:7e:
5e:95:ff:72:e7:d8:0a:a8:99:20:95:4f:ac:36:95:87:6f:ae:
6e:fc:d0:69:6b:2d:cc:52:d7:4d:da:5a:5d:c0:b1:4a:8f:32:
d2:00:17:80:bf:9d:48:a9:7a:27:6a:ef:64:c6:8b:1d:28:61:
5a:39:b4:bc:f5:0d:2c:c1:29:50:fc:f5:f5:ad:00:c3:6d:b5:
89:b9:cb:a0:7b:05:71:18:f8:b3:b4:1b:35:7e:38:ee:7c:5f:
f9:78:4d:c7:b9:ec:cf:25:19:46:42:e4:1b:67:1f:a7:92:40:
2b:2f:8e:35:0d:51:9a:8c:4c:48:19:43:d2:a3:50:25:ab:ce:
ad:41:f7:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIERdDOdCQrHbOzycmr+kBQrIBUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTExMDZaFw0yNDA2MDQwOTE2MDZaMDMxMTAvBgNV
BAMTKDRBMzdBMUNBNERBNDJFNzZCRDE1RUE4NjM1ODYyNkRDMDcwRDZFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2p+vZ9VzG9sA0dpWsx43SK0Eo
j1BEKyt7ceyOzFlhIfxXP0svBky1kHbU+o995APfjKM1Awgkzi0+e17y3aIuh+uD
x8kM3V1SJEYve+/OyQTwjHCersU7MCsGKi0Dm25D1Pb7sE1AbqFWjqFvnY4cLgSY
BU+SRFIv2Fop9pXYQqt6FhMSjocOiXU1HMZeh9YtkBstdqKwlCMp8b2dP3X111fS
wfqH6Mho8OEtvFVWndFs2a098mKdKNSOFcQhLz6/1Eq2Y7OUgmLS2/DStoSkqdaB
gwWc9/F1TY2q17jQ4MLzBY5hT4MqI8husuOMPrwgPFPemAna6rm0YDwYxONNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSjehyk2kLna9FeqGNYYm3AcNbo4wHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzOTM2MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy/qQwDQYJKoZIhvcNAQELBQADggEBAGFEOxVS0W9N9JJxN0DkhP5KvVfmRcr5
IN/taRM9oJsLtz2sUva54shEBYQoyit7lv1OFKG+YWP6ehLoGnm5nLXVJc7KuZev
zcG6/IYTMhW5AWTG+AH8oMan6iQMVknyZWXZnWCu7kVtezeHm/g+zKzY1HC38RIf
ZTiqu5Nffl6V/3Ln2AqomSCVT6w2lYdvrm780GlrLcxS103aWl3AsUqPMtIAF4C/
nUipeidq72TGix0oYVo5tLz1DSzBKVD89fWtAMNttYm5y6B7BXEY+LO0GzV+OO58
X/l4Tce57M8lGUZC5BtnH6eSQCsvjjUNUZqMTEgZQ9KjUCWrzq1B94E=
-----END CERTIFICATE-----
Generated at Thu May 8 11:02:16 2025 by rpki-client