Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231362e302f32322d3232203d3e2039313235.roa
File: 3231372e3136392e3231362e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: 0kOtX8+1pg8kuj0WCuMmy1jNJ8WkJcs6KNuCefmBSMI=
Subject key identifier: FE:84:C1:96:6C:F5:CF:73:E0:37:24:B8:E3:52:9A:29:37:0C:1C:08
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 772C9B21F3C6CECC0783906F45756954C02CBC03
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231362e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:20:56 +0000
ROA not before: Tue 06 Jun 2023 09:15:56 +0000
ROA not after: Tue 04 Jun 2024 09:20:56 +0000
asID: 9125
IP address blocks: 217.169.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2c:9b:21:f3:c6:ce:cc:07:83:90:6f:45:75:69:54:c0:2c:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:15:56 2023 GMT
Not After : Jun 4 09:20:56 2024 GMT
Subject: CN=FE84C1966CF5CF73E03724B8E3529A29370C1C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:3a:87:a9:99:27:74:3c:bb:58:88:27:54:
e8:6a:bb:15:ef:a0:76:8a:3d:46:60:c6:e7:10:79:
d6:8c:c8:cd:65:b6:9f:04:7e:e4:4d:f3:77:4e:eb:
06:f9:1b:4d:ed:8c:68:64:e2:e0:80:01:d0:cf:2d:
ac:e1:d1:49:6f:34:85:d9:af:31:7e:2e:e5:8c:28:
a0:eb:7a:8f:79:83:16:f0:7a:6f:80:bd:7f:43:19:
81:4e:02:c6:1e:3f:39:aa:01:76:72:71:cb:ff:ec:
2c:aa:cf:3c:57:c0:13:b4:56:64:1f:8b:72:f8:03:
9d:c6:b6:c9:9b:fb:ec:2a:fe:df:14:c7:9a:77:25:
1e:1b:0f:b9:ae:05:be:45:ec:e5:b1:79:da:47:cb:
3a:53:58:f4:27:f8:c1:39:5c:72:aa:31:54:83:0d:
f7:fc:49:72:61:13:8a:6d:31:5d:71:bd:da:81:3e:
e0:32:68:05:01:8d:f6:fd:4a:04:32:0a:58:59:b2:
49:97:f5:d1:28:d7:72:a8:fe:2d:1f:33:a6:0d:e8:
e5:74:1f:2e:d5:64:1b:af:9d:14:ef:b8:7b:f7:72:
81:e9:2b:e0:2d:13:c9:ef:e1:00:3d:5c:0e:61:22:
bf:1e:08:c5:d2:2a:e6:6c:c5:81:88:b6:2d:a4:81:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:C1:96:6C:F5:CF:73:E0:37:24:B8:E3:52:9A:29:37:0C:1C:08
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231362e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:85:6c:1b:d2:30:e7:e6:1f:f0:b1:2a:8d:3f:70:5d:37:44:
a3:66:fa:89:02:c2:5f:2e:6b:02:96:45:fd:d9:61:5d:52:91:
45:dc:77:e9:06:cb:45:84:93:81:5f:ce:53:b1:e8:c8:c0:8e:
d1:5f:52:ee:3d:43:ae:50:e6:ff:6d:45:11:61:31:05:f3:ba:
c7:ff:ee:26:d7:d4:52:47:8a:56:7f:6f:d3:a7:96:8e:67:89:
aa:39:1c:6b:f2:c6:d0:cb:2c:e4:23:aa:08:bd:c4:43:d0:fd:
94:31:16:5e:5a:3d:c7:85:6e:b1:50:3b:bc:66:9c:df:99:bd:
98:25:84:e2:87:3e:53:fb:9c:1e:cf:d8:50:7f:96:38:e7:01:
a1:40:16:7e:1e:01:3b:f3:a2:8c:35:43:83:f7:96:05:11:a0:
92:97:f5:85:94:25:b1:63:93:89:fd:55:21:53:00:35:fb:0b:
5d:a2:75:12:40:eb:a3:f7:8a:e3:8e:2d:ed:c5:a5:61:7d:ca:
22:78:79:64:a7:7e:f7:1f:8f:d2:d1:77:6d:52:ea:53:9a:a0:
b2:63:e8:f6:34:1a:89:6b:a9:b0:e6:6a:f2:ed:63:7b:a1:32:
fe:05:b2:fd:fe:63:02:24:e3:e7:08:f4:1f:f7:c6:a3:63:c1:
52:11:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:46:37 2025 by rpki-client