Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136392e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3136392e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: /tDJKC+yOQ74vRFhKdRPS7Aj/CrE/anLJE41GMLS6RU=
Subject key identifier: 6C:0D:7C:5A:86:00:A7:54:15:94:A1:F6:62:0E:B7:68:6C:E4:0D:6B
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2E692DF8074B12F04A1AB9062FC39181564EC05E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136392e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:16:40 +0000
ROA not before: Tue 06 Jun 2023 09:11:40 +0000
ROA not after: Tue 04 Jun 2024 09:16:40 +0000
asID: 9125
IP address blocks: 178.254.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:69:2d:f8:07:4b:12:f0:4a:1a:b9:06:2f:c3:91:81:56:4e:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:40 2023 GMT
Not After : Jun 4 09:16:40 2024 GMT
Subject: CN=6C0D7C5A8600A7541594A1F6620EB7686CE40D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:d8:f6:11:49:02:1f:e8:e0:ae:1e:0e:8a:
5d:3b:7f:fc:7f:c7:11:4b:49:3a:a4:38:3f:13:9f:
ee:a3:7a:b7:b4:2d:49:3d:40:91:13:4c:b4:81:cc:
4b:35:0b:3b:87:c0:5e:3b:1e:27:f9:f7:4d:b7:e9:
db:62:f5:97:ed:6c:dd:2b:1e:b3:c9:8c:ec:33:ec:
42:be:e9:3f:f4:5e:3d:bc:ae:10:b2:1f:54:55:2e:
64:a6:d8:26:cf:20:dd:53:3a:28:81:b9:9a:a8:ef:
40:4e:76:cf:e6:da:b3:c1:85:c2:dd:01:54:9c:ac:
1f:4d:f3:de:5b:9a:fd:09:27:ea:b2:eb:6f:4e:99:
14:45:30:4d:a4:fd:9e:53:0b:30:13:be:26:c7:c6:
5a:a4:89:29:ed:16:86:7a:7c:de:23:bd:f6:51:2f:
3e:c2:6a:46:1b:42:e3:3c:5a:f5:69:6c:ae:17:da:
ec:0a:5e:09:b6:cf:05:63:ab:f8:8b:97:f5:f4:31:
80:8e:8c:fa:aa:55:a6:ca:02:58:66:6b:e2:ed:47:
c2:e9:a2:8d:f2:a7:8b:e5:21:07:51:4b:c5:07:ff:
fa:5b:0f:07:a5:5e:7e:6a:f3:d9:98:68:e5:7c:be:
6d:69:41:92:16:4f:fc:68:35:3e:a3:0f:b9:c4:0a:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:7C:5A:86:00:A7:54:15:94:A1:F6:62:0E:B7:68:6C:E4:0D:6B
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136392e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ba:9e:1d:92:59:20:44:42:1d:81:01:04:d8:76:2e:75:4d:
f0:87:aa:1e:46:03:7a:32:1a:f8:38:fc:59:95:88:97:b6:cf:
dd:06:81:2b:7f:b8:18:e9:74:4d:ff:43:95:af:f7:c3:55:49:
74:ed:cb:1c:6a:e1:88:94:54:63:7a:7a:71:b0:2b:cd:5d:aa:
a0:e2:7c:cf:37:1a:60:2b:aa:a8:eb:98:30:bf:0f:43:66:59:
98:a9:3e:96:e5:eb:08:a4:c3:74:b4:7e:08:57:78:53:38:7d:
d9:e8:58:3a:ae:aa:ab:af:05:ac:87:88:14:c9:e3:1c:93:05:
6b:e1:6d:ad:39:db:15:ca:e3:7a:af:7c:ec:53:d2:d5:d7:e0:
8d:74:21:ba:3f:37:6e:87:ce:f7:df:57:d7:8b:8c:f1:2e:d4:
3b:78:99:11:c6:ff:b9:4b:4a:76:ac:a4:43:ba:b1:51:01:55:
e7:79:20:49:6a:26:8d:a7:20:d0:8c:6e:19:47:5f:1b:ec:4c:
bd:0a:78:3c:0f:65:95:8d:c5:78:16:be:50:c7:31:b5:47:c3:
24:b2:9a:b2:06:90:68:05:77:27:b9:2b:2b:ae:c8:96:cb:ba:
c0:9b:0a:ec:5e:99:cf:65:af:5e:16:c7:59:3b:75:95:90:b1:
0b:83:9f:b2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULmkt+AdLEvBKGrkGL8ORgVZOwF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTExNDBaFw0yNDA2MDQwOTE2NDBaMDMxMTAvBgNV
BAMTKDZDMEQ3QzVBODYwMEE3NTQxNTk0QTFGNjYyMEVCNzY4NkNFNDBENkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3Nj2EUkCH+jgrh4Oil07f/x/
xxFLSTqkOD8Tn+6jere0LUk9QJETTLSBzEs1CzuHwF47Hif590236dti9ZftbN0r
HrPJjOwz7EK+6T/0Xj28rhCyH1RVLmSm2CbPIN1TOiiBuZqo70BOds/m2rPBhcLd
AVScrB9N895bmv0JJ+qy629OmRRFME2k/Z5TCzATvibHxlqkiSntFoZ6fN4jvfZR
Lz7CakYbQuM8WvVpbK4X2uwKXgm2zwVjq/iLl/X0MYCOjPqqVabKAlhma+LtR8Lp
oo3yp4vlIQdRS8UH//pbDwelXn5q89mYaOV8vm1pQZIWT/xoNT6jD7nECjpDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbA18WoYAp1QVlKH2Yg63aGzkDWswHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sv6pMA0GCSqGSIb3DQEBCwUAA4IBAQA6up4dklkgREIdgQEE2HYudU3wh6oeRgN6
Mhr4OPxZlYiXts/dBoErf7gY6XRN/0OVr/fDVUl07cscauGIlFRjenpxsCvNXaqg
4nzPNxpgK6qo65gwvw9DZlmYqT6W5esIpMN0tH4IV3hTOH3Z6Fg6rqqrrwWsh4gU
yeMckwVr4W2tOdsVyuN6r3zsU9LV1+CNdCG6Pzduh87331fXi4zxLtQ7eJkRxv+5
S0p2rKRDurFRAVXneSBJaiaNpyDQjG4ZR18b7Ey9Cng8D2WVjcV4Fr5QxzG1R8Mk
spqyBpBoBXcnuSsrrsiWy7rAmwrsXpnPZa9eFsdZO3WVkLELg5+y
-----END CERTIFICATE-----
Generated at Thu May 8 06:15:05 2025 by rpki-client