Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137322e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3137322e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: D2BTAQ93FkXEokIsjhUgXFwKDHRHErDGtNuB0stG4QE=
Subject key identifier: 2B:30:59:C0:3C:C4:98:E3:F8:C0:7F:89:1B:40:47:12:5C:BA:A5:80
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 1E3F6244EE0399965F551EBA08217F94365DBBCD
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137322e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:17:17 +0000
ROA not before: Tue 06 Jun 2023 09:12:17 +0000
ROA not after: Tue 04 Jun 2024 09:17:17 +0000
asID: 9125
IP address blocks: 178.254.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3f:62:44:ee:03:99:96:5f:55:1e:ba:08:21:7f:94:36:5d:bb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:17 2023 GMT
Not After : Jun 4 09:17:17 2024 GMT
Subject: CN=2B3059C03CC498E3F8C07F891B4047125CBAA580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:22:57:e6:ca:0c:cc:0e:41:a9:f7:15:d3:
2d:fd:d4:d8:a4:0e:88:a0:71:c5:6a:8c:d0:57:1b:
81:95:78:fb:d5:bb:0d:f1:cd:80:31:f6:a4:4c:3f:
af:3d:95:cd:68:b1:18:4c:22:0e:9b:c2:2e:53:96:
8c:aa:90:ec:3f:ce:da:24:92:49:38:a5:69:8b:dc:
8d:65:68:51:89:09:b2:aa:a7:a9:5b:30:54:55:60:
ef:56:1a:48:5c:4d:46:6f:de:3d:15:0c:7c:e5:57:
8d:65:23:62:dc:b7:23:3e:1a:ac:bb:42:e7:dc:a3:
cb:6f:d7:47:45:7a:ea:24:2c:ae:6b:56:b5:e0:6f:
37:6e:1e:1d:15:2f:fb:0f:74:a0:37:1b:36:db:4a:
16:bf:25:6f:7b:3a:a3:5d:88:da:21:c2:c0:d6:66:
cb:ff:4d:b9:fd:42:f2:00:91:c8:34:3f:cc:37:1e:
f2:67:2c:70:eb:8a:ae:68:a3:4e:dd:03:0a:63:4e:
5d:ef:ed:f5:59:65:83:75:16:d7:27:57:68:e9:fc:
85:b3:ff:a5:ea:d8:c4:1b:9e:04:2f:10:01:ad:9c:
51:61:7e:b5:eb:49:13:d5:f2:87:36:96:98:fb:08:
90:23:4f:07:6c:99:b4:88:74:63:47:d1:8f:50:97:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:59:C0:3C:C4:98:E3:F8:C0:7F:89:1B:40:47:12:5C:BA:A5:80
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137322e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.172.0/24
Signature Algorithm: sha256WithRSAEncryption
79:58:99:6a:25:29:61:52:68:93:91:5b:7e:c8:09:6e:21:54:
fe:d8:aa:88:85:25:ca:7c:8d:94:bf:ae:f7:a1:d0:af:c6:86:
65:18:b0:69:28:27:fd:bc:3b:61:4c:d5:8e:bf:ce:d2:61:ea:
25:cb:36:29:3a:fc:99:ad:f6:10:05:83:79:d7:db:57:51:5d:
da:8a:8f:d7:05:e4:b0:b1:b5:74:3e:b6:7a:97:c3:5a:71:0e:
e0:0b:27:78:3b:ca:65:58:55:8e:98:5f:32:3e:61:74:50:00:
89:b6:16:de:2e:04:d1:fb:76:02:96:6a:50:ba:b0:a9:3d:b2:
36:6c:53:c9:04:22:8e:2e:e2:71:cb:32:ce:6b:c2:3d:2f:4d:
36:ba:b2:50:b8:5e:98:20:0e:85:55:8b:44:dd:9e:d5:a2:fc:
af:94:cf:84:88:53:ec:07:0e:5c:52:06:fe:53:0c:1e:e5:25:
89:c6:60:25:20:e8:9b:f9:b9:1f:ab:0c:aa:f7:94:de:d0:64:
ea:56:57:ed:e3:6d:b2:66:cb:3a:e0:81:78:42:da:fa:c3:7b:
95:2b:a2:01:85:c3:ae:ab:72:4e:66:22:2a:0c:20:15:6f:a0:
5e:68:50:60:b1:1c:92:d7:d7:c9:6d:87:97:65:01:4c:7d:fb:
24:41:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:04:46 2025 by rpki-client