Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34372e302f32342d3234203d3e203238393634.roa
File: 3138352e3135372e34372e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: ln7q+iCztLk/Ts5dueyJFilmhwcz6XNKKvpPkXjGHE4=
Subject key identifier: 1E:0F:D7:39:CA:F4:F5:21:61:58:22:0C:93:48:B4:A6:67:9B:4E:F1
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 29A425BC913BC77D5BD0B2B2640675525965547C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34372e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:20:21 +0000
ROA not before: Tue 06 Jun 2023 09:15:21 +0000
ROA not after: Tue 04 Jun 2024 09:20:21 +0000
asID: 28964
IP address blocks: 185.157.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a4:25:bc:91:3b:c7:7d:5b:d0:b2:b2:64:06:75:52:59:65:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:15:21 2023 GMT
Not After : Jun 4 09:20:21 2024 GMT
Subject: CN=1E0FD739CAF4F5216158220C9348B4A6679B4EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:48:cc:0f:82:58:4f:00:c9:a6:61:22:35:
78:89:f9:67:8f:96:07:42:81:58:92:ac:93:8e:d1:
06:55:cc:e8:12:fb:d1:a5:68:79:6d:38:92:33:f4:
45:e0:c9:f2:4f:8a:ce:9b:9e:c5:da:62:14:a1:9a:
06:7c:e7:2d:09:f5:14:cb:e5:32:e3:6b:12:bc:21:
12:cd:9d:7b:07:2a:e9:ee:28:c2:e0:44:df:db:03:
48:8e:db:c6:d7:f5:75:27:da:13:c4:89:cf:12:b3:
fc:5f:ad:4a:46:2e:de:18:a8:8a:cf:cf:e4:d6:88:
d5:06:ad:39:e2:a0:02:a5:2c:46:2c:9c:e8:17:ac:
d0:5d:96:71:04:b0:9d:33:e2:9b:de:2d:12:da:df:
f4:3c:06:bb:18:5f:a2:28:30:db:ab:53:2e:ee:4b:
9b:b0:4b:15:f7:cf:53:ba:ce:13:fe:ee:1c:0b:da:
18:4f:57:d2:cc:5b:6a:1e:f3:06:81:17:a2:fd:34:
d4:df:bc:18:39:06:08:f4:66:ab:94:5e:6e:31:fc:
35:4f:a6:21:f0:ee:7c:af:95:d1:76:1e:40:95:68:
f7:6a:f6:fe:e9:40:c0:31:b2:95:9f:6e:33:ab:12:
e1:84:ec:9a:79:bd:c3:75:24:03:74:01:25:46:d3:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0F:D7:39:CA:F4:F5:21:61:58:22:0C:93:48:B4:A6:67:9B:4E:F1
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34372e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:31:ac:7b:06:fa:1d:b9:4c:d9:71:1e:11:45:6b:a8:01:ed:
44:6a:9d:ec:e9:bc:a2:c2:58:a5:fc:14:56:80:e5:fc:66:5d:
80:b8:c3:68:d3:db:ed:53:4d:e6:37:34:e9:93:fc:9c:de:be:
e3:61:ca:e1:9c:6a:6a:e7:79:6c:59:f4:45:13:79:cb:28:86:
bd:50:dd:7f:b7:47:dc:ab:e4:e7:f0:7c:c2:33:47:c6:eb:87:
f1:8e:dd:45:be:11:1f:da:c4:7e:48:d6:88:24:81:3f:f4:be:
1f:c8:6d:89:fa:8f:f5:ae:b0:31:3b:c1:82:08:1e:39:2d:dc:
2c:9d:d1:57:8e:88:32:57:02:51:76:a5:b2:c1:bb:b4:af:a5:
a6:d0:f8:99:e4:8f:94:18:e1:cd:74:45:43:36:d4:ef:2e:b1:
75:a6:29:48:3d:d7:a5:c0:30:f5:4e:61:0f:d4:0f:9b:0d:55:
3c:2a:5d:9d:d4:04:3d:8e:22:2b:7e:0a:c9:1d:91:da:13:0f:
38:55:c8:70:da:ca:07:0e:9e:40:39:52:5a:34:58:45:a6:79:
03:b5:a9:13:99:b6:89:0e:02:1b:07:21:71:77:bd:59:62:76:
b4:d3:05:a5:11:32:9f:58:c1:c4:e2:92:1c:57:1d:94:cc:b4:
b9:cb:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:52:05 2025 by rpki-client