Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136382e302f32342d3234203d3e20323035353730.roa
File: 3137382e3235342e3136382e302f32342d3234203d3e20323035353730.roa (raw, json)
Hash identifier: a8PaGq8Pn+4yBrYPeNZhb9iyyOHY1x3N4mqZ2X2z/OI=
Subject key identifier: 94:05:B9:D6:B2:AF:31:0E:85:F1:4E:08:9E:21:B1:BB:AB:A5:B8:D9
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 32628D33CFBDA953769306807800EC08A4A9FFB6
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136382e302f32342d3234203d3e20323035353730.roa
Signing time: Tue 06 Jun 2023 09:16:34 +0000
ROA not before: Tue 06 Jun 2023 09:11:34 +0000
ROA not after: Tue 04 Jun 2024 09:16:34 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:62:8d:33:cf:bd:a9:53:76:93:06:80:78:00:ec:08:a4:a9:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:34 2023 GMT
Not After : Jun 4 09:16:34 2024 GMT
Subject: CN=9405B9D6B2AF310E85F14E089E21B1BBABA5B8D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:17:5b:d4:c7:51:42:d5:f5:8c:5b:3a:0b:
7d:c9:b2:a8:3d:41:00:8b:10:b8:a7:d3:3d:c5:7e:
b4:91:c9:8f:d1:a2:f3:cd:31:1e:63:6b:22:c4:8e:
c9:bd:21:aa:ba:7d:67:9b:b3:4c:c8:0c:25:38:14:
42:34:b5:72:07:2a:aa:a2:7e:31:da:fc:f2:78:60:
78:ad:25:0b:78:13:de:b7:13:11:00:ca:93:ee:bc:
41:15:dd:43:53:7d:e5:19:78:3c:69:e9:5d:6a:08:
ce:ba:e2:1c:df:ae:4d:e4:fa:67:2f:c0:19:16:a4:
e5:e3:1c:24:20:29:92:dc:1b:16:e5:2a:57:84:07:
59:96:65:55:00:8f:33:b8:ef:9d:03:89:32:2a:f3:
3e:a5:49:ea:89:aa:58:12:e6:d3:b7:38:69:3f:8c:
fc:29:6e:b8:ce:a2:87:dc:2c:89:1f:6c:c1:3a:26:
e0:21:de:21:96:e8:67:de:81:e4:53:bf:1f:b0:8f:
1d:f4:f2:68:b1:e7:ee:29:9b:1e:b8:18:27:80:bb:
26:41:44:28:fc:c5:06:40:3e:44:62:a5:d4:8d:a7:
7a:04:a5:e5:be:32:d5:e9:0a:38:fe:94:bb:e4:73:
17:e6:bd:0b:f2:01:87:c2:09:8d:a3:12:ae:90:18:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:05:B9:D6:B2:AF:31:0E:85:F1:4E:08:9E:21:B1:BB:AB:A5:B8:D9
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136382e302f32342d3234203d3e20323035353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
48:15:3b:77:69:f0:b8:23:d6:c8:1d:a2:85:7a:13:a0:e9:f2:
32:5c:44:bd:c4:91:9c:c3:84:9c:f3:66:71:90:37:f9:a6:c2:
7e:6b:17:94:11:dc:a8:0a:66:b1:d9:07:f1:61:bc:ac:33:ef:
00:e7:9e:47:1b:c9:97:40:67:a5:30:3f:61:b1:b5:ca:76:d4:
56:cd:5b:d1:d1:7c:3c:39:99:42:53:d6:fa:ab:14:6a:c3:e7:
62:6c:45:e4:89:66:d4:46:75:3c:57:99:9a:8d:a0:50:4e:78:
6a:b2:c9:9e:7f:ab:1b:42:cd:1d:29:37:5a:e1:ff:d9:0d:62:
a4:85:4b:09:77:0c:ef:ef:99:3a:c7:fe:1f:d8:62:20:48:53:
b2:76:35:4e:a1:18:7a:2c:d1:2d:37:6e:8b:03:3a:b0:61:d5:
ef:b4:34:d0:89:35:b2:7b:ee:f8:0e:43:30:65:f1:3d:54:ae:
d2:ba:57:43:99:d8:1f:ae:7b:52:f3:10:72:8b:3c:6d:51:07:
91:a1:82:05:84:5c:72:e2:a4:8a:63:79:ef:17:3c:3d:62:89:
5c:76:42:3e:d6:5d:75:b9:30:9b:ee:e8:62:f6:ab:65:d5:63:
39:57:f2:16:86:47:b1:5a:96:b8:6a:5b:7b:b1:16:13:be:16:
72:0e:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:56 2025 by rpki-client