Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138352e302f32342d3234203d3e203238393634.roa
File: 3137382e3235342e3138352e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: 3crgoKLzs2MzbagC59RrUPrZ953+IgZK/2nxybiEu6c=
Subject key identifier: 00:73:5D:79:15:9E:92:1A:5D:00:6B:5A:D8:15:9F:D1:C0:77:54:5B
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2B3D07E2B15E104316CE23F7F1A8C23FF0AA4485
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138352e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:19:36 +0000
ROA not before: Tue 06 Jun 2023 09:14:36 +0000
ROA not after: Tue 04 Jun 2024 09:19:36 +0000
asID: 28964
IP address blocks: 178.254.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3d:07:e2:b1:5e:10:43:16:ce:23:f7:f1:a8:c2:3f:f0:aa:44:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:14:36 2023 GMT
Not After : Jun 4 09:19:36 2024 GMT
Subject: CN=00735D79159E921A5D006B5AD8159FD1C077545B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:38:6c:04:49:98:49:5c:b4:0d:7a:fc:33:
7b:88:e1:ac:db:54:76:52:72:85:16:5e:7d:1b:37:
b7:b6:10:fe:58:66:c8:5d:1a:d0:f5:2a:31:e0:b0:
36:92:00:34:ea:b7:57:e2:b9:54:17:30:c4:22:8f:
7e:da:87:0e:43:e1:69:a5:a9:6d:5c:af:f1:18:4c:
58:82:9c:6b:be:49:b2:e3:c3:8d:a4:c0:18:59:8d:
c3:2e:3f:26:e4:91:10:5c:c0:70:8a:14:35:7c:2c:
c1:21:90:2f:20:41:dc:f0:48:d8:49:fc:3f:4f:f9:
6f:0a:d5:c8:14:56:eb:4b:d1:36:2b:41:54:ad:47:
7a:19:36:75:4c:4c:f8:3c:24:aa:69:a4:e7:ff:65:
3c:3a:54:16:42:2d:26:23:b0:72:02:04:91:dd:ef:
ac:87:d8:e4:ac:9f:b6:bb:33:28:e3:f7:2a:5f:06:
bd:e2:8a:62:1e:74:65:74:99:96:69:e7:7e:15:bc:
21:ad:24:f3:1c:f1:c0:c9:e3:61:9e:21:fe:27:a3:
6c:46:fd:4d:c3:3f:64:79:63:0c:e3:64:46:9a:e4:
44:81:1a:22:fc:f9:01:b2:ca:9e:57:1a:4d:b4:39:
e8:47:9c:2b:2c:81:fb:47:1f:fd:10:fb:86:61:7c:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:73:5D:79:15:9E:92:1A:5D:00:6B:5A:D8:15:9F:D1:C0:77:54:5B
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138352e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.185.0/24
Signature Algorithm: sha256WithRSAEncryption
67:93:dd:3c:d8:f9:a3:a3:54:05:dd:e4:bf:5f:cb:c1:65:1e:
3f:9c:d0:df:8e:fd:f7:57:7d:f0:2f:5f:93:50:66:e9:7e:f3:
05:0f:04:1e:69:dd:ab:b0:8f:41:11:89:cb:4a:96:fe:0f:48:
bf:66:64:41:7a:2b:dd:c0:14:08:ab:41:79:c9:38:a9:4f:f7:
bd:e2:25:32:00:65:48:cd:69:c0:de:18:27:7c:95:da:27:f1:
f1:dd:9f:fe:18:04:94:c4:a2:3d:20:65:2a:f3:ed:fc:1d:5a:
11:fa:a1:cc:21:92:e3:5c:62:96:34:37:bb:fa:84:3e:8f:ca:
2f:fc:a5:90:1f:ce:16:e8:89:14:bd:a9:f6:e8:8e:09:aa:e5:
4d:87:a8:ab:ff:ea:99:fd:54:c5:ba:b6:a8:42:6d:a2:88:e5:
f3:ee:8b:75:67:d6:20:7f:ea:85:41:f9:c1:77:e4:80:ce:aa:
b2:26:fd:16:e3:b8:31:48:02:cb:a6:e5:ae:3a:3a:21:70:a2:
71:53:2f:86:cf:b1:5b:36:b7:e9:5c:71:aa:f8:6f:e5:8a:70:
75:86:dd:a9:86:27:e7:9f:71:80:3a:12:fa:94:e8:eb:38:a2:
77:60:71:db:43:71:fb:f2:67:89:7b:b4:57:6b:29:95:d7:45:
c1:69:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:45:47 2025 by rpki-client