Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137302e302f32342d3234203d3e203532313136.roa
File: 3137382e3235342e3137302e302f32342d3234203d3e203532313136.roa (raw, json)
Hash identifier: lPIWu2joqjblTVJ4jEnyBFFqmFlQ/hYBRzBJKM/ahz8=
Subject key identifier: F8:60:5B:03:C5:53:B2:9E:DE:33:68:F6:61:DE:10:87:40:8E:DF:86
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 74B840B4C35900B5BCD83E1B0AB3670CE3F8F787
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137302e302f32342d3234203d3e203532313136.roa
Signing time: Tue 06 Jun 2023 09:16:50 +0000
ROA not before: Tue 06 Jun 2023 09:11:50 +0000
ROA not after: Tue 04 Jun 2024 09:16:50 +0000
asID: 52116
IP address blocks: 178.254.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b8:40:b4:c3:59:00:b5:bc:d8:3e:1b:0a:b3:67:0c:e3:f8:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:11:50 2023 GMT
Not After : Jun 4 09:16:50 2024 GMT
Subject: CN=F8605B03C553B29EDE3368F661DE1087408EDF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:5e:3c:2a:f3:74:52:da:c3:e8:d8:66:33:
7c:5a:5c:4e:6a:5d:b3:d2:87:52:a8:32:1a:fa:05:
6b:21:88:83:be:40:7b:26:6a:44:5f:bb:c1:2a:fc:
de:57:4c:4d:fd:03:d3:f9:e9:21:db:4c:78:cb:42:
1b:9e:cd:08:f7:33:e5:06:06:4b:fb:91:f8:c0:d3:
23:bb:f1:7e:27:e2:d8:6a:d4:55:9d:f6:00:01:4d:
88:8f:96:0f:97:a2:89:af:0d:a2:86:f4:4c:b4:8b:
83:05:11:c4:35:e0:4b:77:21:93:7a:10:ab:a5:de:
f0:96:c0:cf:65:57:3d:45:4d:ee:9f:98:77:1e:d9:
1c:ff:b5:c3:f7:80:d3:48:85:35:af:7a:ce:fb:0b:
a7:35:85:0a:13:5d:14:6e:be:b7:fa:51:69:89:07:
c9:f2:3d:54:b6:35:89:ff:87:94:a0:01:05:c7:59:
14:9e:0a:45:c9:f5:34:23:60:42:fa:93:d8:59:98:
47:11:db:30:2c:a8:df:b1:61:8a:31:4a:13:e2:5b:
25:58:dd:b7:13:f3:ec:c8:35:75:10:dd:fd:5a:1a:
05:bc:ea:aa:9c:c2:fd:09:0d:ee:a9:b3:b2:a2:23:
b6:94:c3:4e:ee:2f:1e:1c:27:b4:f9:11:17:17:99:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:5B:03:C5:53:B2:9E:DE:33:68:F6:61:DE:10:87:40:8E:DF:86
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137302e302f32342d3234203d3e203532313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.170.0/24
Signature Algorithm: sha256WithRSAEncryption
95:80:e9:6c:5b:7a:89:cd:f0:d0:33:91:5b:57:3c:de:1b:93:
31:96:6b:74:93:0d:9e:77:11:05:b7:25:8b:a8:99:b6:36:6d:
ad:00:41:48:ac:95:5f:5e:50:ae:7a:de:94:3a:ff:68:6d:4e:
26:18:b0:d1:ee:d1:be:a7:f4:64:7f:4e:88:d7:50:2c:8e:fc:
b7:bb:78:5b:9a:59:43:51:e0:c4:5e:a7:45:22:63:2c:32:43:
aa:30:d2:3b:5f:3f:18:68:df:93:11:32:c6:cb:2b:2b:50:f5:
3f:9e:0c:d7:88:63:26:6a:06:77:32:9c:aa:e5:b8:25:b5:5c:
24:cf:25:51:f4:26:95:46:f5:73:f9:fd:34:dd:0a:06:72:32:
ce:b6:5b:f1:f3:00:f4:93:38:b0:ef:5b:ff:67:2c:a3:d0:79:
2d:49:61:f8:fc:48:39:9d:a2:d5:de:b6:49:55:f1:f2:db:6d:
1b:bf:74:b3:47:08:d1:70:62:2c:f6:59:b0:21:65:0f:c1:d9:
cd:06:aa:92:6a:6e:22:6b:fd:e0:6b:83:d5:9c:84:f0:99:01:
f7:1a:cd:ce:bc:64:da:a7:88:6c:75:70:cf:0f:c4:18:f5:f8:
26:42:d1:0a:b3:04:7d:5c:1f:31:18:7b:24:98:eb:fa:2b:0a:
93:97:78:7d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdLhAtMNZALW82D4bCrNnDOP494cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTExNTBaFw0yNDA2MDQwOTE2NTBaMDMxMTAvBgNV
BAMTKEY4NjA1QjAzQzU1M0IyOUVERTMzNjhGNjYxREUxMDg3NDA4RURGODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVtV48KvN0UtrD6NhmM3xaXE5q
XbPSh1KoMhr6BWshiIO+QHsmakRfu8Eq/N5XTE39A9P56SHbTHjLQhuezQj3M+UG
Bkv7kfjA0yO78X4n4thq1FWd9gABTYiPlg+XoomvDaKG9Ey0i4MFEcQ14Et3IZN6
EKul3vCWwM9lVz1FTe6fmHce2Rz/tcP3gNNIhTWves77C6c1hQoTXRRuvrf6UWmJ
B8nyPVS2NYn/h5SgAQXHWRSeCkXJ9TQjYEL6k9hZmEcR2zAsqN+xYYoxShPiWyVY
3bcT8+zINXUQ3f1aGgW86qqcwv0JDe6ps7KiI7aUw07uLx4cJ7T5ERcXmdD3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+GBbA8VTsp7eM2j2Yd4Qh0CO34YwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMTMxMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy/qowDQYJKoZIhvcNAQELBQADggEBAJWA6WxbeonN8NAzkVtXPN4bkzGWa3ST
DZ53EQW3JYuombY2ba0AQUislV9eUK563pQ6/2htTiYYsNHu0b6n9GR/TojXUCyO
/Le7eFuaWUNR4MRep0UiYywyQ6ow0jtfPxho35MRMsbLKytQ9T+eDNeIYyZqBncy
nKrluCW1XCTPJVH0JpVG9XP5/TTdCgZyMs62W/HzAPSTOLDvW/9nLKPQeS1JYfj8
SDmdotXetklV8fLbbRu/dLNHCNFwYiz2WbAhZQ/B2c0GqpJqbiJr/eBrg9WchPCZ
Afcazc68ZNqniGx1cM8PxBj1+CZC0QqzBH1cHzEYeySY6/orCpOXeH0=
-----END CERTIFICATE-----
Generated at Thu May 8 18:47:03 2025 by rpki-client