Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138342e302f32312d3231203d3e2039313235.roa
File: 3137382e3235342e3138342e302f32312d3231203d3e2039313235.roa (raw, json)
Hash identifier: tzBJ1Z2DTedAuTOFSdGo5m1i66N2uL1GAHT7M4ZO5u8=
Subject key identifier: 3A:D4:E1:F1:76:E1:90:E8:12:2C:DC:E4:2E:1C:67:25:22:59:F0:E1
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 1A9DE89B2C5AB957C9AC4F594BF903D7930F88D0
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138342e302f32312d3231203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:19:29 +0000
ROA not before: Tue 06 Jun 2023 09:14:29 +0000
ROA not after: Tue 04 Jun 2024 09:19:29 +0000
asID: 9125
IP address blocks: 178.254.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9d:e8:9b:2c:5a:b9:57:c9:ac:4f:59:4b:f9:03:d7:93:0f:88:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:14:29 2023 GMT
Not After : Jun 4 09:19:29 2024 GMT
Subject: CN=3AD4E1F176E190E8122CDCE42E1C67252259F0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:e7:92:50:3a:7b:92:f5:9c:ec:d2:05:af:
ea:07:2a:80:62:78:ad:48:89:13:f8:0a:b5:c1:5e:
65:c1:03:d4:3d:e8:44:14:f4:1b:e0:66:1f:eb:15:
1a:37:b0:a9:a1:3c:39:fb:09:45:3b:4f:7f:00:6f:
fb:a2:f7:d8:87:49:b4:24:5e:4e:b3:f5:89:47:f8:
63:a7:78:d0:83:15:34:3d:9a:7b:21:2b:d4:b0:2e:
01:a2:8a:4c:b0:1e:18:ae:bd:c2:9d:ee:66:ac:ef:
f8:fe:0c:0b:bc:dd:94:56:1d:08:af:00:a1:fc:33:
57:9c:39:ac:86:fc:6a:b8:40:9b:6d:04:a2:b9:46:
e8:14:ea:38:af:f6:0c:ea:53:b2:8d:cb:4d:b8:fe:
80:aa:bd:2e:d9:0b:8c:86:c8:c6:43:23:c8:bc:ed:
3f:aa:ef:fe:04:91:0d:4b:d3:13:7b:06:3b:69:28:
6c:f0:1b:0a:7c:7b:67:f1:d1:3c:68:f4:ab:2c:2a:
e7:6d:af:d7:a8:08:e6:13:a8:f1:98:4b:c6:e3:52:
fb:1a:a9:44:e4:36:19:df:d7:65:46:ed:1d:80:d0:
7e:f4:9c:b1:1b:7a:98:9d:a5:eb:34:14:35:9e:86:
18:54:c7:69:7d:36:39:9c:ed:14:e0:8f:6c:b2:12:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D4:E1:F1:76:E1:90:E8:12:2C:DC:E4:2E:1C:67:25:22:59:F0:E1
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138342e302f32312d3231203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.184.0/21
Signature Algorithm: sha256WithRSAEncryption
96:45:58:e9:bb:6a:c8:a6:dd:34:20:9b:27:5c:7e:da:0f:3e:
fb:4c:52:b8:0a:85:07:7f:5b:3b:98:d2:59:db:05:7c:f1:51:
c3:b0:62:38:49:53:60:b0:91:f7:04:3f:03:c6:39:89:ad:6b:
c4:b2:5e:92:b3:f1:40:d8:32:c1:93:41:4e:15:97:49:fa:e0:
35:e1:37:01:f7:07:56:38:b9:6d:64:e9:af:63:c3:76:4b:aa:
f9:45:1a:d3:bb:c1:18:cf:ee:74:79:59:57:4c:a2:52:25:66:
2b:5d:79:5c:d3:d3:1f:b4:07:12:f8:61:a3:cb:1d:53:12:3f:
9e:9e:aa:24:69:98:e1:19:4e:0f:32:68:91:ce:10:10:2c:7d:
12:84:b7:fc:96:e4:a9:29:d1:7d:be:b5:4a:fa:f3:dc:b8:6d:
b9:4c:96:bb:29:8c:8b:f5:4c:3e:9a:c2:b7:e1:34:2f:18:e5:
90:33:a2:2f:54:e0:a6:dd:28:4e:78:78:cc:be:bf:45:c6:dd:
ec:a5:3a:cd:be:99:a6:44:58:41:72:01:d4:13:f8:30:d3:d9:
52:d3:b4:b3:2e:00:b8:1d:11:d2:2d:1c:35:5c:c3:51:d8:6b:
cd:ad:a0:0d:99:81:76:da:a7:3e:93:22:27:d6:68:57:ef:f9:
a7:40:32:a6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGp3omyxauVfJrE9ZS/kD15MPiNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTE0MjlaFw0yNDA2MDQwOTE5MjlaMDMxMTAvBgNV
BAMTKDNBRDRFMUYxNzZFMTkwRTgxMjJDRENFNDJFMUM2NzI1MjI1OUYwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa7eeSUDp7kvWc7NIFr+oHKoBi
eK1IiRP4CrXBXmXBA9Q96EQU9BvgZh/rFRo3sKmhPDn7CUU7T38Ab/ui99iHSbQk
Xk6z9YlH+GOneNCDFTQ9mnshK9SwLgGiikywHhiuvcKd7mas7/j+DAu83ZRWHQiv
AKH8M1ecOayG/Gq4QJttBKK5RugU6jiv9gzqU7KNy024/oCqvS7ZC4yGyMZDI8i8
7T+q7/4EkQ1L0xN7BjtpKGzwGwp8e2fx0Txo9KssKudtr9eoCOYTqPGYS8bjUvsa
qUTkNhnf12VG7R2A0H70nLEbepidpes0FDWehhhUx2l9Njmc7RTgj2yyEu9TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOtTh8XbhkOgSLNzkLhxnJSJZ8OEwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzgzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM5MzEzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sv64MA0GCSqGSIb3DQEBCwUAA4IBAQCWRVjpu2rIpt00IJsnXH7aDz77TFK4CoUH
f1s7mNJZ2wV88VHDsGI4SVNgsJH3BD8DxjmJrWvEsl6Ss/FA2DLBk0FOFZdJ+uA1
4TcB9wdWOLltZOmvY8N2S6r5RRrTu8EYz+50eVlXTKJSJWYrXXlc09MftAcS+GGj
yx1TEj+enqokaZjhGU4PMmiRzhAQLH0ShLf8luSpKdF9vrVK+vPcuG25TJa7KYyL
9Uw+msK34TQvGOWQM6IvVOCm3ShOeHjMvr9Fxt3spTrNvpmmRFhBcgHUE/gw09lS
07SzLgC4HRHSLRw1XMNR2GvNraANmYF22qc+kyIn1mhX7/mnQDKm
-----END CERTIFICATE-----
Generated at Thu May 8 15:40:23 2025 by rpki-client