Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137372e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3137372e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: npCIqapznnyMU8t0TdiZoe32U2Y4bbMtZenaGQExadw=
Subject key identifier: BF:1D:EF:5D:7D:E3:61:C1:D7:E3:6A:F0:82:30:D6:08:1C:15:C9:54
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2E610EA33203B55AD306EB0214DEB4A11F70EA0C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137372e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:18:08 +0000
ROA not before: Tue 06 Jun 2023 09:13:08 +0000
ROA not after: Tue 04 Jun 2024 09:18:08 +0000
asID: 9125
IP address blocks: 178.254.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:61:0e:a3:32:03:b5:5a:d3:06:eb:02:14:de:b4:a1:1f:70:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:13:08 2023 GMT
Not After : Jun 4 09:18:08 2024 GMT
Subject: CN=BF1DEF5D7DE361C1D7E36AF08230D6081C15C954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f6:2b:ca:96:4f:88:d0:64:8e:8d:9a:4a:
bd:2d:2d:33:96:88:ed:fc:4e:d5:ff:e8:e6:84:ac:
28:b7:7b:cc:0e:18:c0:9b:25:af:3f:a5:e7:a2:bf:
6e:5a:4a:17:ed:73:d2:5a:91:76:a2:c0:97:0b:d2:
4f:82:c5:4b:47:d4:be:af:ac:aa:5e:1a:32:9e:04:
05:41:bf:e1:5a:40:d4:c7:a1:e0:59:5a:bf:61:32:
bd:b1:ec:09:d3:1b:fa:c6:c7:dc:59:e5:21:94:73:
3b:f3:0c:e1:3d:ed:ae:bb:b8:33:04:90:3e:06:7f:
b3:87:77:00:c3:47:25:86:79:29:b5:b9:35:8d:dd:
9a:0d:e3:c4:4a:22:f3:6f:fa:a0:7a:8a:19:4d:ac:
c8:39:d3:88:c8:53:06:47:e9:c5:fc:f0:66:73:31:
de:48:ab:27:ee:56:42:ae:0b:dd:45:6e:9e:21:6e:
8b:1b:f8:4d:ff:cc:87:01:55:3f:0b:ee:7c:ae:a2:
0a:77:07:05:af:ab:6d:b0:91:a9:62:d5:f5:ba:24:
30:95:7c:b4:75:00:c7:a6:62:e8:76:cc:12:4e:75:
db:c3:79:ae:0c:3f:7c:62:32:9e:48:26:7e:44:a4:
26:9d:1e:19:ca:9b:ab:fe:ff:3d:57:59:26:99:72:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:EF:5D:7D:E3:61:C1:D7:E3:6A:F0:82:30:D6:08:1C:15:C9:54
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3137372e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.177.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b3:35:37:f1:fe:ea:8d:ed:eb:66:59:f7:91:e5:c5:1c:19:
1f:52:55:ad:32:70:cf:0f:d5:3c:22:cd:42:6f:84:90:a3:98:
22:22:d8:2e:b6:51:d9:74:0a:11:40:3f:1d:d1:61:81:80:b0:
ef:a4:b9:c5:d6:32:70:45:17:71:50:54:61:55:a7:74:6c:b2:
14:4a:25:2b:96:35:05:a1:49:18:7e:97:4d:e2:f6:41:be:ca:
f8:60:5a:47:66:32:f1:4e:3b:14:6e:bf:ac:28:27:f2:c2:b3:
5b:b2:d5:ef:36:ef:c9:84:56:8d:ff:1d:fa:37:3c:6f:a4:48:
b3:44:19:7d:46:03:f9:27:ff:02:8b:29:d6:08:7b:94:df:7c:
56:39:0f:ae:5c:bc:86:c6:30:3a:3e:8f:77:1e:30:0e:e8:90:
ee:8d:14:26:44:c3:02:ec:8e:b2:cb:e4:90:81:bc:ea:05:12:
3d:9c:c1:a4:04:6e:1d:ce:7a:74:da:16:37:56:1b:a3:13:50:
86:98:49:f9:09:a6:ea:a7:97:6c:07:8c:6b:e5:1b:b7:fe:7e:
0f:ef:97:4e:45:38:51:65:51:ba:12:15:f7:7f:26:42:af:1c:
18:e0:cb:a3:41:30:e3:ac:00:16:06:d3:1c:36:fd:21:5c:9b:
a5:44:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:11:18 2025 by rpki-client