Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137312e302f32342d3234203d3e20313938393631.roa
File: 3137382e3235342e3137312e302f32342d3234203d3e20313938393631.roa (raw, json)
Hash identifier: OmSz83T7rrkCeEDGdgrxw6bc4CTkMVnavRaVnMMXsLI=
Subject key identifier: ED:9D:41:77:7B:74:24:6B:38:D0:C9:49:B5:4A:02:14:C1:6C:4B:60
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2D4897FBA182024C8D65F3D77732038652A4BD9C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137312e302f32342d3234203d3e20313938393631.roa
Signing time: Tue 06 Jun 2023 09:17:10 +0000
ROA not before: Tue 06 Jun 2023 09:12:10 +0000
ROA not after: Tue 04 Jun 2024 09:17:10 +0000
asID: 198961
IP address blocks: 178.254.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:48:97:fb:a1:82:02:4c:8d:65:f3:d7:77:32:03:86:52:a4:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:10 2023 GMT
Not After : Jun 4 09:17:10 2024 GMT
Subject: CN=ED9D41777B74246B38D0C949B54A0214C16C4B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:e8:c3:93:65:c8:57:96:2c:16:25:59:90:
93:34:b2:a4:6f:82:75:eb:2f:44:15:ca:3d:56:4d:
e3:c2:09:99:aa:da:de:ea:94:73:35:8a:fc:29:79:
d4:2e:88:07:ba:cc:17:3a:05:3a:08:e2:e9:c3:1b:
3c:89:14:5f:b7:4a:28:b8:20:82:3e:11:90:fe:7e:
94:35:36:e5:6d:4b:c7:78:90:30:ad:57:db:0d:5f:
21:89:1c:9c:fa:94:86:dc:1c:45:2c:e0:f4:ec:f9:
b4:af:16:e4:4e:73:a9:7d:2d:1e:0d:2d:09:94:88:
cc:98:fe:7c:ed:2c:b8:d1:21:9b:a8:44:f7:02:99:
89:be:c0:ee:e3:a4:b2:10:41:5c:ad:dd:e5:4d:a4:
51:bf:c4:9c:84:1c:fc:3a:4e:c5:58:d9:36:85:7c:
cb:d9:34:b4:18:0d:2f:cb:69:d9:3a:97:1d:91:4f:
fa:b8:35:d9:57:4b:d4:36:7a:ba:f2:92:8c:7f:7a:
58:74:44:e7:b2:8a:f2:dc:9b:29:69:19:5b:29:95:
3f:97:a1:f5:b7:68:b1:0a:92:62:e5:54:4f:5e:59:
99:c0:5f:0a:0d:88:5e:1b:cb:21:e7:cb:be:cd:07:
96:e2:69:75:32:0c:ef:5b:d1:3b:1d:69:68:20:ce:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:41:77:7B:74:24:6B:38:D0:C9:49:B5:4A:02:14:C1:6C:4B:60
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137312e302f32342d3234203d3e20313938393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:67:65:0a:b8:40:30:ec:29:4f:f0:d7:42:5a:0b:4b:4c:a8:
e4:82:fc:8b:f0:75:65:86:16:e0:fd:c4:8c:6b:1c:22:18:6e:
1d:00:59:b3:6d:99:ad:3a:89:2b:44:20:a0:d7:86:d0:54:07:
bc:79:c3:af:c0:43:f5:38:c9:60:36:5d:d4:39:24:68:9b:3a:
5c:23:95:a1:11:e9:76:b4:da:f8:3d:8d:2b:d2:4e:4e:9c:e8:
dc:59:14:44:44:ec:2f:db:e9:d3:2c:a9:0b:de:48:1e:25:db:
2f:1a:c1:21:8a:8f:ab:36:42:a6:c5:76:76:0b:7e:f7:cc:51:
47:b5:1e:5a:0d:f1:95:bf:a4:ea:5c:18:4d:6c:73:d1:c4:c3:
4a:9c:e5:05:df:67:75:e9:9f:2e:87:0f:a9:6b:81:83:7b:a0:
b1:0f:51:c2:61:26:b9:32:94:f8:fd:01:da:ea:25:fe:5b:22:
86:4f:32:1d:55:16:da:fd:bf:cc:ea:2d:84:ab:55:60:64:3c:
54:c3:79:d7:79:b0:cd:47:02:ac:f8:de:88:94:3b:68:1c:23:
de:7a:07:fa:22:e5:88:0e:fd:51:a7:d8:50:d6:4f:67:55:cf:
c7:71:8a:00:23:a4:58:f9:3d:9e:5f:64:24:d2:ac:dc:8c:87:
03:67:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:30 2025 by rpki-client