Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231322e302f32322d3232203d3e2039313235.roa
File: 3231372e3136392e3231322e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: OTyMprSmhMm6FMEFOtOXZ2FQG5XZU2BFs6xhdnwO1O8=
Subject key identifier: 8D:CA:7A:EE:3A:0F:8F:D4:DB:3B:57:82:5A:E1:24:31:0C:0E:D9:84
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 624D2F8CE17ED024E81A444A052AA6BAE29B6D
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231322e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:20:49 +0000
ROA not before: Tue 06 Jun 2023 09:15:49 +0000
ROA not after: Tue 04 Jun 2024 09:20:49 +0000
asID: 9125
IP address blocks: 217.169.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4d:2f:8c:e1:7e:d0:24:e8:1a:44:4a:05:2a:a6:ba:e2:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:15:49 2023 GMT
Not After : Jun 4 09:20:49 2024 GMT
Subject: CN=8DCA7AEE3A0F8FD4DB3B57825AE124310C0ED984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:8c:6c:9f:58:f9:df:18:5c:bc:52:70:db:
cb:d9:22:35:db:e4:2d:ff:26:9f:f0:eb:97:12:ca:
77:18:14:4e:e8:c6:9c:fb:18:d9:81:68:68:59:0f:
40:a4:12:4b:07:b0:8f:76:7d:31:5f:c0:3c:78:d7:
4f:21:92:2b:69:a5:8a:24:06:38:5c:29:b1:9c:6f:
25:8e:1c:96:b2:e0:7b:54:7e:00:87:7c:1f:d9:e8:
0a:46:96:73:34:6a:15:4a:91:51:b3:4d:7d:15:8c:
92:0b:0e:15:09:8b:de:27:4b:bb:2f:c7:68:a1:16:
84:75:26:4b:62:01:64:48:71:ac:60:93:af:60:43:
9a:73:9b:60:76:12:84:3f:85:75:07:a0:2d:a6:87:
fb:3e:9d:33:33:09:32:c4:be:fa:e8:f2:0d:fc:11:
d2:65:8e:55:18:f1:d3:bd:7b:d4:79:06:62:15:3c:
6c:59:23:ea:b9:e3:15:db:aa:58:83:42:ea:f2:e2:
5d:e3:3a:b3:82:3a:ae:28:c2:7e:57:e2:4a:0b:17:
27:cb:8c:bc:00:8a:01:7e:63:69:68:bf:c0:79:98:
31:e0:d6:71:42:44:e5:f7:9d:74:0a:0a:e6:9d:44:
d6:43:1b:aa:23:99:d8:24:d0:a1:e3:dd:d0:d1:57:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:7A:EE:3A:0F:8F:D4:DB:3B:57:82:5A:E1:24:31:0C:0E:D9:84
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231322e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.212.0/22
Signature Algorithm: sha256WithRSAEncryption
04:9f:20:2e:e7:f1:53:bc:1b:93:35:65:79:d2:db:0a:25:e5:
4c:b1:43:97:ce:ae:f0:63:9e:95:41:54:b4:a0:c8:fd:4d:95:
0a:5d:25:b9:62:dd:93:93:0f:cf:56:21:56:c3:5d:d9:2a:46:
5b:40:79:57:cf:bc:b8:58:25:0c:cd:b8:30:54:dc:0b:19:77:
77:12:4a:a4:e7:9b:01:16:0f:35:90:21:76:a3:63:a3:ba:a9:
8c:19:52:61:7d:65:d1:4b:0e:39:8c:91:b6:44:d5:54:63:69:
12:9f:a9:54:34:af:9c:db:f6:c2:21:ce:f0:e5:4e:ed:c4:51:
7c:13:fb:0e:29:a1:44:58:46:0b:24:1f:2a:66:72:78:5f:f6:
eb:8f:73:2a:c7:a6:6a:91:b5:b0:44:fc:66:35:b1:bf:03:05:
50:d9:c4:50:e8:d3:68:93:a1:18:f8:9b:37:b6:ca:05:d3:0c:
3d:e2:0a:bc:f1:2a:1f:a0:b4:83:36:ae:a0:30:48:e5:f4:6a:
88:a3:0b:ad:1f:5d:b0:6f:74:77:a7:ce:1e:ce:49:da:a5:6a:
0f:0b:d4:82:ea:48:85:61:94:ab:ce:ed:e6:7d:3c:71:3a:6a:
b8:17:b2:cd:8e:a9:4f:ea:9a:3e:f0:e5:ff:b7:e8:57:58:6b:
1b:90:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:31:36 2025 by rpki-client