Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138362e302f32342d3234203d3e20313939353635.roa
File: 3137382e3235342e3138362e302f32342d3234203d3e20313939353635.roa (raw, json)
Hash identifier: XMIianPD/CzMaXUjqgxKi4J2QEVDruvfF7tHnImXLhQ=
Subject key identifier: 8E:63:C6:D3:A4:5A:B1:DA:0F:77:BD:98:5D:8C:B2:0C:99:94:70:81
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 28EBCAE76EDAAE1D223A7A207495DA309856B0AA
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138362e302f32342d3234203d3e20313939353635.roa
Signing time: Tue 06 Jun 2023 09:19:43 +0000
ROA not before: Tue 06 Jun 2023 09:14:43 +0000
ROA not after: Tue 04 Jun 2024 09:19:43 +0000
asID: 199565
IP address blocks: 178.254.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:eb:ca:e7:6e:da:ae:1d:22:3a:7a:20:74:95:da:30:98:56:b0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:14:43 2023 GMT
Not After : Jun 4 09:19:43 2024 GMT
Subject: CN=8E63C6D3A45AB1DA0F77BD985D8CB20C99947081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:a0:e7:a9:6b:2b:ab:2e:16:01:a8:ae:af:
df:9f:5d:fa:e6:f0:9b:58:4d:99:98:e4:26:1f:23:
53:a9:14:29:c0:89:2d:45:bf:94:b5:dc:cc:ab:bc:
fd:55:3c:91:96:da:54:58:15:54:3c:18:82:3d:0a:
16:48:52:1f:46:9b:5c:4b:9d:fb:b8:4d:7d:b0:0c:
25:ce:76:08:d7:0e:e7:2c:7c:43:65:e0:18:74:ec:
81:00:1d:ac:45:88:1e:e8:ee:09:e9:aa:30:40:ba:
55:84:5f:56:cf:5a:a1:b5:ac:ed:fb:27:4e:c4:cf:
c7:97:ae:c9:6f:2a:bc:bc:56:d8:22:fe:36:68:07:
2d:c0:39:f9:f2:54:c4:38:7c:98:8a:49:cc:a9:b9:
d1:e6:3f:fa:cc:55:3f:55:2e:dc:4f:ae:c4:1b:8a:
fa:84:9e:68:86:69:eb:29:3a:9c:e2:c4:68:e9:23:
b4:c5:10:53:bb:37:f5:4a:74:fa:d0:e6:15:28:02:
9c:32:68:0b:43:09:34:ab:fa:e6:a8:36:e9:1a:6a:
f2:03:71:46:c2:9c:41:fd:9a:4d:12:5a:1f:7e:f0:
71:0e:4f:15:48:d7:b8:74:1f:8c:fd:5f:00:6d:13:
a4:53:da:34:08:ac:85:12:8b:93:89:9c:93:51:ee:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:C6:D3:A4:5A:B1:DA:0F:77:BD:98:5D:8C:B2:0C:99:94:70:81
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3138362e302f32342d3234203d3e20313939353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.186.0/24
Signature Algorithm: sha256WithRSAEncryption
43:af:08:02:a3:70:46:a2:0a:ba:dd:46:22:2b:ad:94:1c:8d:
9e:a2:ef:2e:f3:1a:ed:7d:79:3a:14:e4:e0:ab:0d:41:98:d7:
8d:ea:d6:ce:23:b1:5d:be:9c:0c:ba:e3:f9:bb:be:f9:c3:f7:
17:31:16:a1:69:39:29:7c:61:0e:84:cd:ca:da:bb:f2:76:c1:
fc:34:10:1b:71:4c:c0:34:ea:65:9e:d2:58:cb:88:da:e0:3f:
d8:82:79:e6:51:9e:9d:4c:ca:fb:f7:78:0a:cb:37:59:92:e2:
f7:02:95:d8:f7:8f:11:d5:ea:ab:25:d5:13:0a:dd:63:85:f9:
a9:9d:cc:de:ba:2d:6a:b2:a3:22:b1:45:31:0f:29:dc:31:0d:
ce:8c:65:55:3d:66:1d:34:82:12:b3:2e:aa:4a:e8:db:8d:18:
e2:0d:f2:38:a8:d3:a3:1e:e8:2b:58:07:a3:a2:4a:0a:0e:03:
e6:35:59:79:51:f7:19:d8:e8:91:4b:b6:39:e0:fc:a7:cb:c5:
37:35:8a:f5:03:aa:b7:9e:ba:04:9f:e6:da:25:ad:5b:8b:51:
b6:31:10:fa:51:89:8e:25:8c:9e:9e:bb:eb:ad:32:27:62:04:
1b:48:4f:7a:e4:6d:03:85:ac:64:39:85:6b:59:aa:19:56:35:
64:bf:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:24:30 2025 by rpki-client