Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34362e302f32342d3234203d3e203238393634.roa
File: 3138352e3135372e34362e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: PI1yHYJiWQBFfgQ0z1ejoE5oI8nPszeeob6q88R2UY0=
Subject key identifier: 85:22:D2:04:DF:49:F7:AD:AD:9A:87:C2:1D:8D:B6:56:58:AE:A5:60
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2431575500918EFDCA067CDE498C5D7138590B36
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34362e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:20:03 +0000
ROA not before: Tue 06 Jun 2023 09:15:03 +0000
ROA not after: Tue 04 Jun 2024 09:20:03 +0000
asID: 28964
IP address blocks: 185.157.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:31:57:55:00:91:8e:fd:ca:06:7c:de:49:8c:5d:71:38:59:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:15:03 2023 GMT
Not After : Jun 4 09:20:03 2024 GMT
Subject: CN=8522D204DF49F7ADAD9A87C21D8DB65658AEA560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:b7:de:05:23:1b:7d:a5:07:14:e7:52:68:
93:01:b8:ea:bd:51:b2:45:b7:9d:bd:d9:2d:51:43:
d1:92:4c:7a:1e:69:aa:a0:2b:35:52:4a:bb:ff:bc:
bd:d2:55:f7:b1:59:fd:fc:c1:37:8a:7d:98:c0:13:
04:27:51:ea:f1:fc:11:d1:4b:6c:88:35:1f:84:bb:
dc:92:55:a4:75:9b:b9:0b:c4:d6:c8:c7:61:03:31:
a1:79:09:d8:d3:ef:f9:af:97:52:b8:a7:77:0f:a4:
22:cb:9e:97:9f:98:35:3b:cf:78:89:cc:55:5f:28:
37:47:db:9f:8e:b5:ac:1e:a6:79:11:65:a5:d7:17:
98:ac:42:77:9e:64:c7:95:82:db:ca:86:64:06:8c:
3f:a1:48:8f:67:cf:68:db:53:94:da:31:50:87:23:
5d:f2:80:92:84:8d:9c:b1:0f:48:36:b8:cb:77:f1:
fa:47:0e:82:d0:3f:cd:62:8f:7c:72:04:c2:61:a1:
89:47:b7:17:34:5d:d6:9f:24:59:61:02:51:ab:83:
16:a0:2b:c6:83:70:8d:8f:3b:aa:da:f7:ab:9a:c3:
c2:c3:69:c1:47:df:89:33:43:ff:ba:ba:88:d7:f7:
84:c8:87:4a:62:ec:0c:17:1a:d8:17:e8:27:cb:6a:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:D2:04:DF:49:F7:AD:AD:9A:87:C2:1D:8D:B6:56:58:AE:A5:60
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34362e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:17:04:c9:78:3b:e1:90:9e:da:96:4b:79:e8:2a:55:d0:5b:
fb:3c:3b:16:04:fd:96:ee:e6:ad:9e:f9:72:35:25:6a:9e:34:
b0:81:97:c0:03:36:36:f6:ea:91:ee:09:71:ae:28:44:d5:aa:
52:06:0a:dc:ba:37:d6:4c:2a:b4:c4:d5:82:54:1c:3a:7b:13:
84:ed:30:16:fd:93:9a:2c:09:73:db:0c:f0:e3:a4:2e:ac:8e:
91:0b:8f:92:d0:94:c1:58:52:69:a4:c1:92:01:05:e9:13:63:
75:10:b8:e6:80:20:2a:3a:eb:03:f5:1e:48:98:fc:fb:18:88:
49:bd:e3:00:d7:c0:5d:36:91:ce:fe:80:7c:7a:58:50:a2:d8:
1d:39:96:b4:87:7c:29:9e:dc:86:e1:52:a1:6a:78:7e:73:2a:
a8:a2:5c:f8:3e:69:1f:1c:ed:82:1d:ca:98:f7:1e:09:2e:d6:
24:62:c8:c7:6f:9f:67:f1:8e:ce:de:91:fc:9c:35:c0:e6:8e:
1a:ea:de:62:42:8f:da:ae:47:b7:86:75:13:0d:34:7a:04:34:
a1:94:e7:1e:73:f0:42:f3:10:3f:68:a7:5a:9e:e1:9c:c6:42:
47:91:2f:7a:40:70:0b:c3:95:1a:08:a9:1c:c6:44:51:7e:cf:
2f:29:94:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:13 2025 by rpki-client