Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138322e302f32342d3234203d3e2039313235.roa
File: 3137382e3235342e3138322e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: SB12atWQVBF/f47u2Ygv9Nda6TU6sZSms3freXFmPOE=
Subject key identifier: CD:7E:2E:6E:51:3F:9D:FE:93:1B:42:03:8C:37:C9:D8:74:47:C5:EF
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 29F1D2B512AAC176A592309EBD9DDD19A2A39BB8
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138322e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:19:15 +0000
ROA not before: Tue 06 Jun 2023 09:14:15 +0000
ROA not after: Tue 04 Jun 2024 09:19:15 +0000
asID: 9125
IP address blocks: 178.254.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f1:d2:b5:12:aa:c1:76:a5:92:30:9e:bd:9d:dd:19:a2:a3:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:14:15 2023 GMT
Not After : Jun 4 09:19:15 2024 GMT
Subject: CN=CD7E2E6E513F9DFE931B42038C37C9D87447C5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:32:e2:d0:7c:da:86:dc:ac:2b:fa:ae:b8:
b8:b2:40:04:67:bf:78:7f:67:68:1d:06:34:00:bf:
5a:89:30:f1:d5:61:9b:8b:22:0e:f2:8c:d5:b6:fc:
60:90:01:0c:55:48:8c:c9:b7:bf:0b:da:8d:9f:5f:
27:2e:4f:5b:3a:a9:25:22:bd:f6:8b:92:a4:99:c6:
90:8a:7d:cb:60:07:22:35:e0:91:ef:ad:fb:d1:1e:
b5:21:52:26:45:cf:73:c6:d7:9a:d5:fc:07:5a:fa:
c4:21:f4:0e:f5:19:38:33:3f:a2:b8:0f:00:5d:b2:
80:a1:3e:09:aa:21:67:df:eb:c1:eb:1a:ba:1e:f4:
d5:b8:5a:41:02:9a:b3:f8:1f:15:a8:a8:21:e2:88:
0d:2d:7d:c7:9f:16:dd:89:0f:5c:68:85:c3:49:b6:
40:a9:33:d4:a0:82:b3:61:d4:51:bf:d4:bf:b9:98:
c7:2b:6e:31:79:b3:67:29:ad:08:48:49:9d:32:5a:
bf:8c:77:a3:2a:84:8d:dd:5d:f7:6a:72:5b:0c:b8:
bb:36:f6:8b:bb:d3:d7:21:bb:4c:80:79:eb:18:3c:
58:ab:35:fb:5b:89:6e:81:46:3b:ad:53:3e:6c:22:
1f:c6:09:68:74:da:dd:bb:fb:ba:49:7f:ca:e8:e7:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:2E:6E:51:3F:9D:FE:93:1B:42:03:8C:37:C9:D8:74:47:C5:EF
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138322e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.182.0/24
Signature Algorithm: sha256WithRSAEncryption
50:32:2f:c2:6f:f8:48:db:7f:f0:ee:05:11:f1:58:e4:d5:d0:
aa:8c:96:b4:34:91:3d:57:76:b9:df:d8:ae:e5:a8:75:9e:9d:
68:ea:2a:71:4a:ec:3a:07:dc:fa:44:c3:f4:eb:ba:54:8d:19:
d7:66:e8:b2:00:cb:ad:21:c8:5e:06:22:b3:6f:9f:e0:bc:b0:
f6:41:d6:6e:17:48:44:cc:48:cd:b4:f0:0e:0d:45:0f:db:7b:
ae:ef:50:8a:74:f0:f0:d7:6b:9a:0c:ee:ea:c7:d8:03:c8:3e:
95:c7:eb:ab:39:e3:68:70:bf:8c:a5:78:7a:de:fe:6f:a6:26:
51:a1:d1:dc:47:0d:01:60:dd:fa:91:e9:7c:27:07:e2:96:31:
7b:03:99:41:7b:b3:39:39:cc:e2:36:2e:87:3c:1f:06:d6:68:
9e:ef:90:9b:88:7a:a1:0c:b6:0e:51:f6:a2:0b:db:63:02:99:
49:1c:91:68:c9:84:3c:31:2b:31:b1:9c:91:b2:87:fc:4b:36:
09:3b:f5:ff:e3:96:2c:90:cc:cd:e2:db:2e:0c:a2:e6:3a:75:
aa:10:f7:40:58:a4:ef:63:a5:5a:bb:85:b2:49:8e:09:56:95:
14:8d:af:76:4a:67:f2:ad:17:07:f1:d0:65:1d:8b:41:05:4d:
e1:3a:f3:cb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUKfHStRKqwXalkjCevZ3dGaKjm7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTE0MTVaFw0yNDA2MDQwOTE5MTVaMDMxMTAvBgNV
BAMTKENEN0UyRTZFNTEzRjlERkU5MzFCNDIwMzhDMzdDOUQ4NzQ0N0M1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUTLi0HzahtysK/quuLiyQARn
v3h/Z2gdBjQAv1qJMPHVYZuLIg7yjNW2/GCQAQxVSIzJt78L2o2fXycuT1s6qSUi
vfaLkqSZxpCKfctgByI14JHvrfvRHrUhUiZFz3PG15rV/Ada+sQh9A71GTgzP6K4
DwBdsoChPgmqIWff68HrGroe9NW4WkECmrP4HxWoqCHiiA0tfcefFt2JD1xohcNJ
tkCpM9SggrNh1FG/1L+5mMcrbjF5s2cprQhISZ0yWr+Md6MqhI3dXfdqclsMuLs2
9ou709chu0yAeesYPFirNftbiW6BRjutUz5sIh/GCWh02t27+7pJf8ro54opAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUzX4ublE/nf6TG0IDjDfJ2HRHxe8wHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sv62MA0GCSqGSIb3DQEBCwUAA4IBAQBQMi/Cb/hI23/w7gUR8Vjk1dCqjJa0NJE9
V3a539iu5ah1np1o6ipxSuw6B9z6RMP067pUjRnXZuiyAMutIcheBiKzb5/gvLD2
QdZuF0hEzEjNtPAODUUP23uu71CKdPDw12uaDO7qx9gDyD6Vx+urOeNocL+MpXh6
3v5vpiZRodHcRw0BYN36kel8JwfiljF7A5lBe7M5OcziNi6HPB8G1mie75CbiHqh
DLYOUfaiC9tjAplJHJFoyYQ8MSsxsZyRsof8SzYJO/X/45YskMzN4tsuDKLmOnWq
EPdAWKTvY6Vau4WySY4JVpUUja92SmfyrRcH8dBlHYtBBU3hOvPL
-----END CERTIFICATE-----
Generated at Thu May 8 20:44:13 2025 by rpki-client