Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3139332e3130342e36382e302f32342d3234203d3e203238393634.roa
File: 3139332e3130342e36382e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: Q7ltdFNeSvgZfngErwyOIGuI1N9pShPkc3I/9CCPVVs=
Subject key identifier: 48:9B:90:6B:13:20:13:95:28:C1:9C:2D:E6:9D:F8:E6:F6:C4:FB:6E
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 363AA203B677A72BD984E3E38E9EEA8D2281E42C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3139332e3130342e36382e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:20:28 +0000
ROA not before: Tue 06 Jun 2023 09:15:28 +0000
ROA not after: Tue 04 Jun 2024 09:20:28 +0000
asID: 28964
IP address blocks: 193.104.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3a:a2:03:b6:77:a7:2b:d9:84:e3:e3:8e:9e:ea:8d:22:81:e4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:15:28 2023 GMT
Not After : Jun 4 09:20:28 2024 GMT
Subject: CN=489B906B1320139528C19C2DE69DF8E6F6C4FB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:e2:1d:26:2a:64:3f:72:7d:d9:20:42:7d:
79:f8:5e:89:57:61:c2:da:e6:dc:da:29:81:29:7d:
ed:83:16:85:37:ac:14:4f:5b:69:f2:16:b6:40:25:
84:22:af:42:0a:99:c4:59:5f:10:3c:42:90:0f:eb:
e3:28:bf:47:45:09:44:95:95:23:c9:72:4e:4e:0b:
93:f6:bd:5a:1c:0c:39:c0:cf:24:12:25:74:bf:d0:
5e:62:69:a5:7e:ec:dc:33:c5:d2:9b:72:ef:0a:15:
39:2a:11:40:15:64:09:7a:e1:af:7d:b9:a3:02:be:
55:f8:e6:a8:de:19:f9:e5:b4:31:82:ee:ce:3d:16:
bb:4b:94:21:15:27:71:02:92:d0:52:f4:8e:3f:d6:
47:80:43:d8:4c:c8:e9:17:44:4f:1f:8d:03:c0:72:
8c:9a:57:a5:92:20:3c:f4:2c:5d:8f:75:fe:59:c0:
1a:c0:a3:25:15:df:4f:88:83:74:4a:b7:1f:fc:09:
e0:b1:70:7e:dc:dc:9a:20:c3:e8:d3:e2:0a:98:79:
61:ea:45:b8:79:70:d4:3e:a0:11:98:79:94:e7:a7:
7b:40:b2:ad:4b:e6:5e:c4:24:9d:5c:56:c8:d7:ed:
30:f5:1d:05:85:92:fb:cc:64:20:a1:eb:f3:a5:46:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:90:6B:13:20:13:95:28:C1:9C:2D:E6:9D:F8:E6:F6:C4:FB:6E
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3139332e3130342e36382e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.68.0/24
Signature Algorithm: sha256WithRSAEncryption
98:68:0f:ed:c5:c8:85:14:9f:bd:d4:2b:64:b4:26:4e:2e:8a:
5b:d1:d7:2e:a5:75:af:b0:7c:35:a8:ec:89:73:e1:a4:da:21:
fb:5d:97:3a:19:2c:41:d7:6a:11:be:2a:d3:23:e3:82:46:2b:
b9:cd:d8:ab:25:13:4d:d9:73:80:76:2c:1c:e9:ce:00:db:3e:
43:67:af:fc:e6:87:16:57:6f:07:a3:3b:46:14:a2:98:51:d7:
ab:01:de:a7:82:bf:8d:93:d0:8b:40:3b:63:82:92:e5:ba:2e:
cf:cf:8a:05:af:f1:e0:24:2f:ab:67:23:ad:bb:d0:6f:5d:46:
a2:9a:c2:96:83:fe:38:ea:02:66:a8:5d:03:a3:c2:c5:13:30:
63:e4:08:cc:d3:e5:1c:30:f7:03:69:d4:5a:19:a1:55:6e:2a:
58:d6:c8:08:e0:72:e7:a3:0c:d3:6f:6f:34:a0:ba:96:0a:2b:
31:cf:68:c8:6f:79:e2:53:1e:8f:8c:61:d2:99:da:2e:0d:df:
0c:c0:43:f6:bc:44:32:b6:bf:6d:eb:ba:ed:80:6c:c5:8a:e7:
0b:bc:b0:e9:86:75:77:bd:27:85:64:f5:4b:b3:8d:fa:1c:56:
1d:04:c6:36:4f:ce:73:3c:9e:4f:a9:16:01:ce:f7:45:91:8b:
09:29:6c:ed
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNjqiA7Z3pyvZhOPjjp7qjSKB5CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTE1MjhaFw0yNDA2MDQwOTIwMjhaMDMxMTAvBgNV
BAMTKDQ4OUI5MDZCMTMyMDEzOTUyOEMxOUMyREU2OURGOEU2RjZDNEZCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7euIdJipkP3J92SBCfXn4XolX
YcLa5tzaKYEpfe2DFoU3rBRPW2nyFrZAJYQir0IKmcRZXxA8QpAP6+Mov0dFCUSV
lSPJck5OC5P2vVocDDnAzyQSJXS/0F5iaaV+7NwzxdKbcu8KFTkqEUAVZAl64a99
uaMCvlX45qjeGfnltDGC7s49FrtLlCEVJ3ECktBS9I4/1keAQ9hMyOkXRE8fjQPA
coyaV6WSIDz0LF2Pdf5ZwBrAoyUV30+Ig3RKtx/8CeCxcH7c3Jogw+jT4gqYeWHq
Rbh5cNQ+oBGYeZTnp3tAsq1L5l7EJJ1cVsjX7TD1HQWFkvvMZCCh6/OlRuvdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUSJuQaxMgE5UowZwt5p345vbE+24wHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzOTMzMmUzMTMwMzQyZTM2
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzkzNjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wWhEMA0GCSqGSIb3DQEBCwUAA4IBAQCYaA/txciFFJ+91CtktCZOLopb0dcupXWv
sHw1qOyJc+Gk2iH7XZc6GSxB12oRvirTI+OCRiu5zdirJRNN2XOAdiwc6c4A2z5D
Z6/85ocWV28HoztGFKKYUderAd6ngr+Nk9CLQDtjgpLlui7Pz4oFr/HgJC+rZyOt
u9BvXUaimsKWg/446gJmqF0Do8LFEzBj5AjM0+UcMPcDadRaGaFVbipY1sgI4HLn
owzTb280oLqWCisxz2jIb3niUx6PjGHSmdouDd8MwEP2vEQytr9t67rtgGzFiucL
vLDphnV3vSeFZPVLs436HFYdBMY2T85zPJ5PqRYBzvdFkYsJKWzt
-----END CERTIFICATE-----
Generated at Thu May 8 11:34:55 2025 by rpki-client