Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137342e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3137342e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: unySB+K8ZrJZVqh8TZlmJt4seEJRWB26uiAHhZoxN1g=
Subject key identifier: 96:DA:43:F8:99:8C:D6:F7:F4:18:6E:E4:E7:22:5A:F7:4A:D6:86:3D
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 41AC386402C077E14A074133375136213DC3F87E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137342e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:17:35 +0000
ROA not before: Tue 06 Jun 2023 09:12:35 +0000
ROA not after: Tue 04 Jun 2024 09:17:35 +0000
asID: 28964
IP address blocks: 178.254.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ac:38:64:02:c0:77:e1:4a:07:41:33:37:51:36:21:3d:c3:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:35 2023 GMT
Not After : Jun 4 09:17:35 2024 GMT
Subject: CN=96DA43F8998CD6F7F4186EE4E7225AF74AD6863D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:bf:4d:d3:41:2e:5a:64:5e:9a:92:22:bf:
db:64:1b:3d:5a:e7:d4:56:97:e2:d9:54:8a:e8:a1:
ec:85:db:69:9c:02:92:23:6b:7c:43:b0:6c:24:81:
95:c6:90:0e:96:94:02:56:0a:6f:59:ac:1f:3e:21:
0f:bc:fd:59:62:7e:5b:cb:92:ba:6a:dd:7e:4e:8b:
da:63:3b:22:17:68:5d:0f:47:5a:84:6d:84:d1:1f:
0a:cc:fd:c2:6e:63:8b:d6:bf:87:31:b1:03:9b:9c:
fc:08:57:32:0c:2f:09:16:00:d1:16:8f:83:9a:11:
d3:db:66:5b:aa:1f:d3:7f:fe:35:7d:a1:5c:4b:21:
17:94:69:91:8d:63:5d:fb:bc:9d:de:f8:92:5a:a8:
91:05:42:59:f6:fd:84:78:44:f4:bc:00:37:c2:24:
2c:04:d6:8b:f8:ee:d3:aa:ce:ea:1d:72:c3:29:97:
1d:6b:30:16:91:89:e6:27:82:65:f5:32:d7:04:93:
30:de:3f:8c:23:08:b8:a1:79:5b:5e:fc:05:6a:74:
1d:db:3e:b9:5f:ca:eb:52:92:f9:f1:61:51:73:ab:
d1:f3:ae:02:26:16:e4:de:97:1b:2f:e1:84:b4:02:
de:f2:a7:72:ec:fb:30:aa:95:7c:d7:d8:6d:a9:bc:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:43:F8:99:8C:D6:F7:F4:18:6E:E4:E7:22:5A:F7:4A:D6:86:3D
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137342e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4d:c1:af:71:6d:e7:1b:05:01:bc:27:98:c4:18:91:56:18:
ed:f7:f1:6d:30:d3:69:30:4a:0f:58:7f:3a:0b:94:1b:54:4b:
57:9a:22:fd:f2:1e:e1:06:73:9b:25:d4:1f:5a:b1:be:9f:4c:
fc:65:9e:ae:82:76:3a:a1:17:46:aa:ea:1c:44:0d:02:71:89:
bb:5e:42:bb:c5:e8:bc:58:4a:1f:fc:ac:c8:ad:ab:61:25:9b:
a1:e1:e9:f8:dd:cf:f3:33:74:74:e6:0f:e4:ff:17:54:bd:4e:
b1:03:5d:23:f2:13:d8:cd:6a:2e:5d:3c:8c:93:c0:b8:e1:73:
b9:09:3d:e0:3d:e7:89:c7:b3:33:02:f0:4e:08:0a:29:f3:f8:
0f:5c:9f:31:6a:af:5f:cd:3c:ca:da:03:aa:6e:96:c3:d0:7e:
29:f2:70:e1:48:ab:44:b0:e9:7b:b9:99:c5:df:0e:fd:84:64:
02:4b:f4:05:53:fc:45:57:72:58:7c:43:1f:7b:20:c0:f6:52:
b2:f7:f0:ca:a5:78:f6:67:c2:02:3b:44:d7:e3:38:6f:82:52:
8a:2c:d4:ed:32:42:ea:b8:9a:73:9d:0e:e6:61:83:30:5b:9d:
bb:84:18:69:ac:cf:46:9c:2b:03:bc:23:2d:13:a2:73:2a:80:
1c:04:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:08:07 2025 by rpki-client