Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137332e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3137332e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: kug+cjrjqE4wvyDMScVNoLWArLElknpLsXuUFyD6Cg8=
Subject key identifier: D4:1B:B6:16:4D:09:54:93:68:16:DE:76:74:82:D0:70:F6:5C:0D:EC
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 358FF3D3D8C6573C64B34774C5276DE68F494352
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137332e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:17:24 +0000
ROA not before: Tue 06 Jun 2023 09:12:24 +0000
ROA not after: Tue 04 Jun 2024 09:17:24 +0000
asID: 28964
IP address blocks: 178.254.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8f:f3:d3:d8:c6:57:3c:64:b3:47:74:c5:27:6d:e6:8f:49:43:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:24 2023 GMT
Not After : Jun 4 09:17:24 2024 GMT
Subject: CN=D41BB6164D0954936816DE767482D070F65C0DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:79:81:6e:d1:a4:08:78:36:07:de:b9:e4:
81:13:46:6f:1b:a9:ee:a1:ec:1a:90:28:c0:4a:26:
62:a1:91:ab:c3:1d:41:e8:c2:83:b8:a8:37:68:6e:
0b:19:01:25:3c:73:3c:ba:1a:1d:3a:b6:68:5e:61:
ec:0e:3d:b6:52:a8:a3:26:1a:e4:4d:be:3f:51:db:
fd:7b:e9:c3:93:78:46:61:50:4f:dd:94:67:cb:31:
80:6f:95:ea:ca:da:b9:e9:e9:71:74:9a:70:16:62:
73:86:3a:98:b8:83:a8:47:d7:e8:1b:34:ee:f6:f7:
ef:6b:cb:23:c9:e0:85:69:5a:3e:c8:6b:0b:7e:9d:
11:e7:65:99:8c:f9:55:ba:dd:66:6e:bf:9f:86:e2:
63:a3:80:64:56:de:0b:3b:1c:2f:d3:25:df:c2:40:
ad:4b:9d:63:07:7f:ab:48:c7:97:71:3e:d3:b5:01:
f7:0d:aa:47:cd:1f:f3:7c:74:ad:c1:5a:2e:12:f8:
e6:91:4a:4f:2d:3c:22:f0:46:60:92:12:a2:02:c4:
1c:76:6b:52:b2:44:5b:32:5e:bd:89:76:46:cc:19:
bc:b9:12:68:b5:f5:f9:ee:24:1c:45:50:02:3c:af:
12:6d:cf:9f:b3:74:a9:d5:b4:5a:80:e6:69:c5:ba:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:B6:16:4D:09:54:93:68:16:DE:76:74:82:D0:70:F6:5C:0D:EC
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137332e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.173.0/24
Signature Algorithm: sha256WithRSAEncryption
44:57:40:93:68:4f:14:5e:e2:e5:ff:c6:ee:23:da:55:4a:d6:
5d:41:44:98:74:71:80:56:0f:7f:41:2e:fb:63:54:c6:e1:09:
f2:38:02:ee:3c:14:17:f7:ec:3b:f7:fb:32:ce:81:0e:34:e3:
6c:b3:19:8d:cf:d6:d8:f4:be:39:14:e9:3a:f3:c9:b5:97:2a:
ef:35:a2:fd:88:ed:f2:e2:7a:42:1c:1f:d3:e0:f6:e5:c8:1b:
8b:8c:be:0e:68:26:4b:ae:10:2d:72:b4:8d:27:d2:84:6f:47:
e1:6d:7e:92:5d:ba:e8:03:08:1f:4d:2a:ce:d5:bf:8a:57:6b:
1c:5b:78:78:1c:48:6c:bc:03:a8:4e:66:9f:4d:ee:b6:49:37:
0c:8c:cc:5e:01:ec:14:34:85:8d:2e:af:23:c8:dd:bc:9a:17:
34:87:3a:60:00:dd:bc:4e:ac:1e:91:6d:60:c5:bf:dd:01:11:
ec:27:81:6f:bc:49:df:2b:99:8d:50:fc:e4:4c:18:07:48:5f:
d8:ed:17:41:e2:72:b4:19:46:a6:d8:1f:e5:ee:c3:10:ce:f0:
c9:86:78:2b:73:d1:b1:78:a5:4a:49:ae:6d:a6:3d:b5:75:6c:
23:5c:49:4f:1a:f5:c7:59:b7:82:7b:be:0a:47:b7:c6:cb:90:
2f:36:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:09:48 2025 by rpki-client