Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137352e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3137352e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: 33hJc/17cpOXaZLGBVFt8JvjAlfxJvNBj1MfZCx/WX4=
Subject key identifier: B6:40:51:C6:DC:52:DF:2D:DD:51:E2:C7:77:22:E6:E5:5A:F1:02:E6
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6EAE6B97BEBFF9CFF2418693B72F0F3354841EEC
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137352e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:17:43 +0000
ROA not before: Tue 06 Jun 2023 09:12:43 +0000
ROA not after: Tue 04 Jun 2024 09:17:43 +0000
asID: 9125
IP address blocks: 178.254.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ae:6b:97:be:bf:f9:cf:f2:41:86:93:b7:2f:0f:33:54:84:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:43 2023 GMT
Not After : Jun 4 09:17:43 2024 GMT
Subject: CN=B64051C6DC52DF2DDD51E2C77722E6E55AF102E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:f5:93:57:01:7b:9e:a5:7a:dc:fd:2d:0e:
30:fe:8e:11:d9:43:51:88:82:5b:30:5d:3b:bc:3c:
88:b7:1b:58:d9:09:7e:e0:7d:b4:d8:9c:91:5a:7c:
6b:d4:e8:c7:91:3c:ab:6f:4d:a4:c9:14:66:f7:26:
04:5c:de:f7:ba:8b:6c:d5:11:84:04:12:ee:9d:e3:
e8:9e:58:7a:90:01:57:61:ba:e2:d1:a2:88:1b:07:
b7:49:5e:f6:e7:d5:f6:85:e1:9f:11:c0:98:4d:d2:
ad:78:02:c0:8b:6c:e4:d2:3b:80:7b:f5:2e:c5:df:
90:e6:69:3a:cc:66:ce:9c:f4:f9:34:86:bb:3b:ad:
c2:c7:5a:12:24:b4:26:c7:3d:56:6c:d6:bd:6d:09:
ac:ab:45:25:de:3b:d3:69:6d:ab:db:be:8b:83:5d:
67:dc:10:5d:4d:bb:2c:b1:bc:48:a8:fe:73:e2:97:
e6:24:9c:0b:73:eb:19:a9:88:ad:82:20:f6:fd:01:
92:f5:7e:ab:37:71:3e:b2:94:56:85:bd:cc:bc:60:
ff:53:4d:96:d5:0b:92:ea:23:f2:85:c2:77:74:7b:
8d:48:71:9f:0c:9f:7d:36:0e:58:b7:10:24:48:c1:
cc:5b:50:fd:14:1b:45:bc:1b:c2:d0:3d:1c:ab:1d:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:51:C6:DC:52:DF:2D:DD:51:E2:C7:77:22:E6:E5:5A:F1:02:E6
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137352e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8c:43:0f:66:87:de:ff:2d:5d:23:ab:7d:33:04:c2:f8:4c:
f4:ed:cb:4c:66:af:c5:3a:5d:03:bf:91:e2:4a:49:04:55:29:
02:bf:01:cb:8d:31:4a:17:74:d2:3a:4c:dd:8e:f0:c5:46:4c:
98:3f:90:7a:37:35:cb:45:f6:ed:a0:c5:b8:52:d4:23:f5:80:
22:40:5a:4f:75:99:b0:7a:3a:16:c1:51:21:02:ba:2d:9c:6c:
57:6e:3f:db:61:98:88:1f:73:63:ff:00:aa:ec:1d:c7:41:35:
24:b9:03:7c:2a:4c:26:64:0c:8a:b1:0f:d8:12:5e:23:6e:0a:
07:0f:4e:5a:14:87:55:9e:66:23:be:2e:a1:b4:99:e9:fa:ce:
14:23:32:7b:5c:8d:a0:43:2d:fe:3a:59:f2:80:a8:a2:8c:66:
a2:73:f7:61:cd:7d:c3:80:9e:5b:00:24:27:c3:26:00:05:d3:
75:5e:e8:64:15:08:55:0f:e2:1c:67:41:88:8b:46:b9:c8:c1:
78:e3:3f:1d:48:ea:71:5f:33:6a:48:32:ea:bf:52:84:8b:39:
e9:34:84:01:2d:cd:59:ad:95:bd:db:d7:0b:13:57:4d:c7:b2:
05:63:1b:83:20:88:61:09:32:a8:57:f5:34:82:49:75:c5:9f:
61:0f:6c:0d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbq5rl76/+c/yQYaTty8PM1SEHuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTEyNDNaFw0yNDA2MDQwOTE3NDNaMDMxMTAvBgNV
BAMTKEI2NDA1MUM2REM1MkRGMkRERDUxRTJDNzc3MjJFNkU1NUFGMTAyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYPvWTVwF7nqV63P0tDjD+jhHZ
Q1GIglswXTu8PIi3G1jZCX7gfbTYnJFafGvU6MeRPKtvTaTJFGb3JgRc3ve6i2zV
EYQEEu6d4+ieWHqQAVdhuuLRoogbB7dJXvbn1faF4Z8RwJhN0q14AsCLbOTSO4B7
9S7F35DmaTrMZs6c9Pk0hrs7rcLHWhIktCbHPVZs1r1tCayrRSXeO9NpbavbvouD
XWfcEF1NuyyxvEio/nPil+YknAtz6xmpiK2CIPb9AZL1fqs3cT6ylFaFvcy8YP9T
TZbVC5LqI/KFwnd0e41IcZ8Mn302Dli3ECRIwcxbUP0UG0W8G8LQPRyrHTqjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUtkBRxtxS3y3dUeLHdyLm5VrxAuYwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sv6vMA0GCSqGSIb3DQEBCwUAA4IBAQCNjEMPZofe/y1dI6t9MwTC+Ez07ctMZq/F
Ol0Dv5HiSkkEVSkCvwHLjTFKF3TSOkzdjvDFRkyYP5B6NzXLRfbtoMW4UtQj9YAi
QFpPdZmwejoWwVEhArotnGxXbj/bYZiIH3Nj/wCq7B3HQTUkuQN8KkwmZAyKsQ/Y
El4jbgoHD05aFIdVnmYjvi6htJnp+s4UIzJ7XI2gQy3+OlnygKiijGaic/dhzX3D
gJ5bACQnwyYABdN1XuhkFQhVD+IcZ0GIi0a5yMF44z8dSOpxXzNqSDLqv1KEiznp
NIQBLc1ZrZW929cLE1dNx7IFYxuDIIhhCTKoV/U0gkl1xZ9hD2wN
-----END CERTIFICATE-----
Generated at Thu May 8 08:56:01 2025 by rpki-client