Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136352e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3136352e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: ZIah8CQ8w89EDPf+cbYr2KwVCU4Xo3J04C6ACRSKQsI=
Subject key identifier: 04:B3:C0:28:AB:88:2C:E4:C7:2A:F8:32:B6:0A:87:E5:0B:1D:3A:AB
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 386C5CFE8CC5140BA9A7096979F67FD415D6546E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136352e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:16:13 +0000
ROA not before: Tue 06 Jun 2023 09:11:13 +0000
ROA not after: Tue 04 Jun 2024 09:16:13 +0000
asID: 9125
IP address blocks: 178.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6c:5c:fe:8c:c5:14:0b:a9:a7:09:69:79:f6:7f:d4:15:d6:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:13 2023 GMT
Not After : Jun 4 09:16:13 2024 GMT
Subject: CN=04B3C028AB882CE4C72AF832B60A87E50B1D3AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:d7:67:81:1c:af:37:61:ee:4c:11:02:b7:
2d:2b:4f:17:e2:42:a8:90:d2:64:f4:da:c1:e2:ae:
34:01:68:e3:74:85:04:e6:2a:83:2f:46:f7:22:57:
00:9f:dc:b9:df:e3:38:32:b7:1a:9e:1f:6c:85:8f:
c4:16:1b:18:11:c3:4c:ab:8f:b5:8d:32:cc:ad:da:
9a:71:d1:d6:06:1d:cb:a4:39:d2:12:59:66:b5:fb:
fe:60:75:18:73:61:0b:16:19:96:7b:60:27:3d:51:
ed:07:41:b8:17:50:bd:d0:5d:84:3e:8b:f1:a6:06:
99:a3:c1:32:22:be:69:19:5f:4c:e1:30:fa:d7:49:
fe:af:d7:ac:13:53:ee:9e:f1:d1:44:9a:e4:1d:2d:
83:43:ad:e6:6c:e1:07:5d:3d:9c:dd:d3:a1:2e:8f:
16:0d:62:8a:89:5e:ad:0e:86:02:a6:ed:31:df:95:
14:6b:61:21:57:72:40:9e:2a:ae:d0:5b:aa:12:ef:
cf:83:88:cd:59:ae:79:0d:8d:77:d4:2a:aa:e4:52:
de:1b:69:77:c5:44:38:2d:1a:79:8b:8e:34:b0:ea:
9d:fb:fd:fc:15:35:bb:8c:5c:95:31:2c:be:80:cc:
89:f6:36:19:47:b1:8b:f8:13:b4:ff:1e:bc:95:19:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:C0:28:AB:88:2C:E4:C7:2A:F8:32:B6:0A:87:E5:0B:1D:3A:AB
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136352e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a7:23:dd:83:13:ec:00:b6:3a:36:57:de:93:92:2d:64:27:
ab:35:53:c2:6b:12:70:6f:40:12:eb:e3:fb:3e:0a:89:9a:6a:
8a:6d:d5:74:30:60:56:eb:2e:c8:b1:03:c3:28:24:55:bf:30:
3f:c8:9f:f3:de:78:58:8d:57:1b:98:5a:2b:4f:f7:6b:38:84:
ba:bc:8f:e2:a8:78:34:e3:91:5e:45:d4:9a:c3:13:7c:b8:d1:
9a:84:4b:54:b3:3e:35:02:91:43:11:1d:c4:e0:e7:70:0b:04:
98:21:93:2c:37:d4:7d:ae:90:7a:ae:39:c2:e3:80:e1:56:60:
30:43:cd:e8:30:03:ae:f5:69:4a:b0:11:0b:e4:6f:18:8c:60:
73:11:8b:10:9f:7a:c0:1c:d0:a8:a5:9e:a6:16:2f:d3:dc:f3:
7b:83:62:5f:8c:33:5a:4f:0f:50:a6:c5:72:d8:f2:9b:22:4f:
cf:f3:96:28:f1:14:fd:53:d6:fc:84:ec:b3:86:50:d9:b0:7b:
71:05:c3:b3:c8:91:49:cd:8c:fd:e6:2c:52:23:6e:f1:5e:ca:
0f:2f:7e:8d:cd:cb:14:1d:e1:8c:8e:f7:4e:d9:e4:f1:7d:9b:
b6:38:5e:d3:8b:0a:44:0b:20:ad:aa:92:70:26:de:c5:d9:60:
22:d8:d7:a0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOGxc/ozFFAuppwlpefZ/1BXWVG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTExMTNaFw0yNDA2MDQwOTE2MTNaMDMxMTAvBgNV
BAMTKDA0QjNDMDI4QUI4ODJDRTRDNzJBRjgzMkI2MEE4N0U1MEIxRDNBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPNdngRyvN2HuTBECty0rTxfi
QqiQ0mT02sHirjQBaON0hQTmKoMvRvciVwCf3Lnf4zgytxqeH2yFj8QWGxgRw0yr
j7WNMsyt2ppx0dYGHcukOdISWWa1+/5gdRhzYQsWGZZ7YCc9Ue0HQbgXUL3QXYQ+
i/GmBpmjwTIivmkZX0zhMPrXSf6v16wTU+6e8dFEmuQdLYNDreZs4QddPZzd06Eu
jxYNYoqJXq0OhgKm7THflRRrYSFXckCeKq7QW6oS78+DiM1ZrnkNjXfUKqrkUt4b
aXfFRDgtGnmLjjSw6p37/fwVNbuMXJUxLL6AzIn2NhlHsYv4E7T/HryVGbvFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUBLPAKKuILOTHKvgytgqH5QsdOqswHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sv6lMA0GCSqGSIb3DQEBCwUAA4IBAQBqpyPdgxPsALY6Nlfek5ItZCerNVPCaxJw
b0AS6+P7PgqJmmqKbdV0MGBW6y7IsQPDKCRVvzA/yJ/z3nhYjVcbmForT/drOIS6
vI/iqHg045FeRdSawxN8uNGahEtUsz41ApFDER3E4OdwCwSYIZMsN9R9rpB6rjnC
44DhVmAwQ83oMAOu9WlKsBEL5G8YjGBzEYsQn3rAHNCopZ6mFi/T3PN7g2JfjDNa
Tw9QpsVy2PKbIk/P85Yo8RT9U9b8hOyzhlDZsHtxBcOzyJFJzYz95ixSI27xXsoP
L36NzcsUHeGMjvdO2eTxfZu2OF7TiwpECyCtqpJwJt7F2WAi2Neg
-----END CERTIFICATE-----
Generated at Sat May 10 00:27:33 2025 by rpki-client