Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137362e302f32342d3234203d3e20323037303639.roa
File: 3137382e3235342e3137362e302f32342d3234203d3e20323037303639.roa (raw, json)
Hash identifier: tKUun7COVnsDbBGKck1rdNdsYYemAbWi75qSD6dAgeA=
Subject key identifier: 3D:89:B8:26:DE:7A:79:C8:30:3E:4F:4F:B1:C4:4F:3F:B2:6B:DF:87
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 4B99ACEA6FAA3B2863F0927FAEE137EE0F5E830E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137362e302f32342d3234203d3e20323037303639.roa
Signing time: Tue 06 Jun 2023 09:17:52 +0000
ROA not before: Tue 06 Jun 2023 09:12:52 +0000
ROA not after: Tue 04 Jun 2024 09:17:52 +0000
asID: 207069
IP address blocks: 178.254.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:99:ac:ea:6f:aa:3b:28:63:f0:92:7f:ae:e1:37:ee:0f:5e:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:12:52 2023 GMT
Not After : Jun 4 09:17:52 2024 GMT
Subject: CN=3D89B826DE7A79C8303E4F4FB1C44F3FB26BDF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:ca:86:95:fc:cd:ff:ec:b5:27:60:e2:70:
3b:a4:3e:61:29:0c:21:bd:a0:0b:66:46:a1:7d:27:
1a:f6:95:c8:64:0e:60:56:38:43:bd:32:14:21:a2:
8d:db:68:f5:a7:f0:9d:cd:74:6f:52:d6:e1:ea:cf:
f9:e1:e1:2b:c6:01:ef:9d:0e:65:7d:c5:3e:92:6d:
b1:b8:b7:a9:b0:6a:f5:57:cc:14:e1:96:73:f0:d3:
21:2c:75:b3:52:8e:41:7b:2a:a8:5b:9b:34:ba:7f:
f5:7e:de:df:08:5a:5d:b9:41:80:e7:93:5f:f4:a4:
49:c5:47:02:0d:e9:22:dc:c2:d3:31:90:8e:44:6a:
30:d2:fa:bd:54:ef:6e:63:27:0d:00:fe:a3:c6:59:
a9:04:28:02:ab:5c:41:67:64:18:67:5b:f5:4d:09:
20:5c:50:19:ed:44:06:8c:ab:c8:af:8f:9f:c2:e3:
7d:de:fd:fb:2f:f5:fe:4f:1e:78:4c:b6:b5:72:a9:
da:8d:ad:b1:6c:0f:59:78:81:82:24:ec:fe:be:4d:
7a:41:55:ba:05:11:57:c5:50:6e:aa:fc:54:86:fb:
96:36:ea:c8:a1:60:22:7d:27:89:e1:b0:51:17:e1:
56:7e:a8:08:1a:4f:cb:07:7c:3e:31:af:f9:f0:03:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:B8:26:DE:7A:79:C8:30:3E:4F:4F:B1:C4:4F:3F:B2:6B:DF:87
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137362e302f32342d3234203d3e20323037303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.176.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b7:4d:6f:cd:4c:3e:0c:46:be:49:32:00:7e:76:28:a2:ff:
18:13:7f:15:2d:bd:d2:1d:b0:90:80:0f:32:7f:bb:e9:51:11:
7e:c4:e7:e6:88:af:6e:00:c4:29:a4:1f:98:24:b3:ed:ca:4c:
36:68:00:30:e7:df:cb:b6:7e:f8:0f:ab:6a:3f:04:93:72:45:
db:3c:48:5a:a6:9e:7f:41:32:54:0c:94:49:1c:6e:87:39:13:
f5:11:7a:fb:15:1a:38:26:8b:5e:fd:40:3d:ed:11:83:37:e0:
4d:24:18:c2:c9:fe:63:fd:af:11:f1:2b:29:e7:6d:b7:2f:7b:
57:d0:51:fa:1c:9d:41:43:9b:d4:d6:bd:ea:bf:86:58:39:2e:
15:38:7b:62:6c:00:1f:43:86:74:1a:06:6b:87:66:2a:e1:66:
20:0d:04:ec:75:1c:e9:c0:99:35:62:91:6d:1c:c4:d6:7b:ab:
d9:74:d4:d7:01:32:ef:ee:ae:aa:bb:0a:94:b9:0c:c7:4d:f9:
1a:c0:5d:7b:3f:c2:14:e9:bb:3b:5c:bd:b7:02:52:84:d0:e8:
a8:cd:50:66:45:3e:27:20:b0:b1:f8:e5:25:62:a1:f0:66:73:
5f:15:80:16:88:c0:73:ab:46:2a:43:f2:15:23:bf:38:ee:8f:
a0:aa:cc:8a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUS5ms6m+qOyhj8JJ/ruE37g9egw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTEyNTJaFw0yNDA2MDQwOTE3NTJaMDMxMTAvBgNV
BAMTKDNEODlCODI2REU3QTc5QzgzMDNFNEY0RkIxQzQ0RjNGQjI2QkRGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuMqGlfzN/+y1J2DicDukPmEp
DCG9oAtmRqF9Jxr2lchkDmBWOEO9MhQhoo3baPWn8J3NdG9S1uHqz/nh4SvGAe+d
DmV9xT6SbbG4t6mwavVXzBThlnPw0yEsdbNSjkF7KqhbmzS6f/V+3t8IWl25QYDn
k1/0pEnFRwIN6SLcwtMxkI5EajDS+r1U725jJw0A/qPGWakEKAKrXEFnZBhnW/VN
CSBcUBntRAaMq8ivj5/C433e/fsv9f5PHnhMtrVyqdqNrbFsD1l4gYIk7P6+TXpB
VboFEVfFUG6q/FSG+5Y26sihYCJ9J4nhsFEX4VZ+qAgaT8sHfD4xr/nwA9s1AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUPYm4Jt56ecgwPk9PscRPP7Jr34cwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMwMzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALL+sDANBgkqhkiG9w0BAQsFAAOCAQEAGLdNb81MPgxGvkkyAH52KKL/GBN/
FS290h2wkIAPMn+76VERfsTn5oivbgDEKaQfmCSz7cpMNmgAMOffy7Z++A+raj8E
k3JF2zxIWqaef0EyVAyUSRxuhzkT9RF6+xUaOCaLXv1APe0RgzfgTSQYwsn+Y/2v
EfErKedtty97V9BR+hydQUOb1Na96r+GWDkuFTh7YmwAH0OGdBoGa4dmKuFmIA0E
7HUc6cCZNWKRbRzE1nur2XTU1wEy7+6uqrsKlLkMx035GsBdez/CFOm7O1y9twJS
hNDoqM1QZkU+JyCwsfjlJWKh8GZzXxWAFojAc6tGKkPyFSO/OO6PoKrMig==
-----END CERTIFICATE-----
Generated at Thu May 8 14:26:37 2025 by rpki-client