Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136372e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3136372e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: BtRxk7JVLrF1nq3aDx2CcXBinyDXXxVKpPWLzrACRVU=
Subject key identifier: F7:80:42:AB:8A:49:B8:E4:59:50:59:72:E1:16:F3:2F:F0:06:F8:07
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 54F8C989056CD48247DC917596D4DB8B2D5AADCE
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136372e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:16:27 +0000
ROA not before: Tue 06 Jun 2023 09:11:27 +0000
ROA not after: Tue 04 Jun 2024 09:16:27 +0000
asID: 28964
IP address blocks: 178.254.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f8:c9:89:05:6c:d4:82:47:dc:91:75:96:d4:db:8b:2d:5a:ad:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:27 2023 GMT
Not After : Jun 4 09:16:27 2024 GMT
Subject: CN=F78042AB8A49B8E459505972E116F32FF006F807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:53:70:ab:95:05:6d:b7:c8:1c:45:1b:0b:
65:e0:65:a7:e8:eb:04:eb:c7:8c:c3:64:9e:f6:64:
59:65:a5:4c:14:67:2b:f6:0e:d7:ce:df:a5:21:63:
5d:e0:77:5d:bd:bb:8f:d7:7f:5b:02:14:a0:35:ea:
45:e0:68:d7:a8:6c:d6:82:15:67:5d:56:41:f5:f5:
13:ff:3a:96:9b:8a:4d:fc:55:86:69:c0:b6:50:66:
60:3c:aa:91:42:da:65:3a:96:b9:18:5b:1d:54:bd:
e7:2d:ea:c6:cc:da:d1:4a:b2:03:1f:14:ac:07:cd:
f5:bb:71:25:b7:5b:4d:f1:64:e4:31:b1:19:6e:6f:
df:c9:d4:5c:e1:af:c6:3d:c0:62:d9:e5:cf:eb:2c:
04:c4:a2:5d:8e:3c:d1:99:ff:c0:ec:14:63:ea:e6:
9a:80:1f:18:62:23:de:9b:33:b7:0d:ff:62:33:3c:
fb:7d:70:5a:78:92:fb:1c:2e:a0:05:71:38:8f:97:
50:7e:51:db:12:58:3e:56:b0:69:db:dc:0f:f1:a2:
12:47:29:0a:76:57:cc:8a:4d:68:a1:11:6a:28:00:
de:ef:96:bf:61:09:15:cc:78:ab:34:4a:72:e0:b6:
f5:82:33:18:30:4e:50:28:5d:8d:57:05:b3:53:f0:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:42:AB:8A:49:B8:E4:59:50:59:72:E1:16:F3:2F:F0:06:F8:07
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136372e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:cd:c2:37:eb:c2:72:cf:c0:db:99:9a:ba:e8:0f:81:a1:37:
9d:8f:80:76:a4:98:c8:8d:e7:99:07:c1:fe:fe:6c:5a:b6:d3:
f2:85:16:8e:b6:7e:46:07:c9:50:7c:ce:88:15:29:e4:9b:f8:
28:5a:f6:dd:9f:de:d6:17:a1:d8:eb:f9:b2:2b:3c:d8:5c:f2:
10:fe:9c:37:b3:30:73:56:b5:32:8b:c6:cc:99:c2:c6:ac:f2:
ad:ce:8b:9e:e4:8c:22:df:e8:a1:b0:11:14:78:cd:f6:57:01:
3e:cc:30:b0:12:4b:bd:a6:54:49:4b:70:80:be:2b:18:ed:04:
ed:4c:7b:d2:01:8c:d8:2d:c5:c7:07:09:95:0c:17:26:2c:00:
b1:44:b7:4c:21:f3:38:61:37:da:92:20:c8:39:d9:b6:c4:c0:
08:2d:7d:14:b0:39:39:64:bf:9f:01:25:51:d8:3a:ca:b9:56:
05:72:7c:af:27:ed:3a:05:e6:0d:08:5e:4e:ad:5c:28:31:28:
87:43:7e:60:b7:0b:49:13:65:e0:4d:f3:60:c9:1d:c6:e6:e5:
ea:e7:4e:1c:73:b7:bf:1d:3b:e0:e4:e8:b3:e6:f8:24:90:18:
e4:ca:b4:57:a4:41:a3:df:16:4f:0b:55:f8:e9:0a:96:09:61:
34:af:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:49:10 2025 by rpki-client