Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231392e302f32342d3234203d3e2039313235.roa
File: 3231372e3136392e3231392e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: Uw3rW6aksZ01EZxorRYTqWhdE5L4OkxIi0f6jomTIx0=
Subject key identifier: 26:A7:89:A6:DF:C2:41:DA:73:FF:68:F2:72:73:6B:0F:8C:73:9F:09
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 1952F30D89C73DCECE30C7D56B97F5FA41CE667E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231392e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:21:02 +0000
ROA not before: Tue 06 Jun 2023 09:16:02 +0000
ROA not after: Tue 04 Jun 2024 09:21:02 +0000
asID: 9125
IP address blocks: 217.169.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:52:f3:0d:89:c7:3d:ce:ce:30:c7:d5:6b:97:f5:fa:41:ce:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:16:02 2023 GMT
Not After : Jun 4 09:21:02 2024 GMT
Subject: CN=26A789A6DFC241DA73FF68F272736B0F8C739F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:a6:f0:7b:47:4d:13:f3:af:75:73:9c:38:
87:29:02:72:26:66:aa:b5:39:a0:64:19:e1:3a:ae:
80:79:39:9c:62:86:df:a3:28:50:12:42:6e:c3:30:
ce:bd:78:cb:1c:01:70:31:a3:27:d3:b2:37:63:92:
f0:b2:ee:df:e5:53:4e:91:e0:18:11:21:31:84:d3:
b9:5f:6e:6e:d5:be:42:02:9d:96:c0:64:18:75:06:
4c:9c:aa:ef:09:42:95:f4:0f:bf:bb:93:6b:00:03:
19:23:eb:68:6d:a8:eb:cd:d5:4f:d5:02:d1:e5:12:
5e:6d:68:0f:39:e5:71:ed:e5:2d:a3:c2:ab:c5:57:
af:42:4d:e5:68:4e:fb:6a:9e:d2:b3:f4:b8:7f:c2:
a5:9a:05:2b:f0:c8:e4:75:9b:46:0e:4f:1b:3c:a5:
64:bc:fb:f9:17:2b:9e:e6:21:4a:90:e8:de:ac:ca:
7d:e6:73:74:f0:e2:5f:79:94:e7:42:b9:83:aa:90:
dc:8e:23:35:04:e9:35:31:f0:da:a1:0f:41:1f:4b:
1e:51:d0:ba:96:e8:2d:b3:46:20:12:d1:26:a0:43:
66:06:63:85:1c:86:30:92:cc:0d:ef:ee:64:98:7c:
22:53:e5:b9:cb:fe:ca:26:71:08:94:84:2b:76:35:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:89:A6:DF:C2:41:DA:73:FF:68:F2:72:73:6B:0F:8C:73:9F:09
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3231392e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.219.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d3:45:18:bb:1a:83:fd:65:16:f6:86:1d:7e:e5:a9:bd:93:
95:d8:1a:68:b4:65:a9:2a:f0:05:41:54:46:1e:9d:3d:e4:7e:
4c:59:7e:b8:61:55:7c:22:9c:da:76:88:68:6c:df:ba:4d:96:
bb:b9:8d:2e:89:69:75:2a:47:1e:11:46:e8:50:2f:4e:ac:44:
23:88:2b:1e:62:95:6e:98:bd:d1:bf:b9:92:29:23:fe:57:a5:
cb:bb:93:a8:d2:f2:d6:d1:3c:4b:ae:d5:fa:a1:e6:f2:b1:dc:
f0:c6:ac:3c:64:9a:f8:d4:15:43:ec:7b:86:93:a8:47:68:67:
50:33:a5:2f:99:e1:c0:7a:c1:4d:39:c8:4c:6f:60:76:4d:22:
49:10:55:bb:bf:ea:51:1f:ff:28:d3:a4:13:cd:0d:6e:f5:da:
1b:49:5b:e1:66:0a:75:e1:f8:9b:d7:11:f0:38:e7:94:46:2e:
28:ff:4a:0e:82:55:dc:ad:dd:2a:6d:87:f8:87:21:c9:e8:69:
40:49:7d:d1:e9:27:26:8a:4e:d4:0c:e3:b4:a9:84:42:f9:b0:
c1:94:7b:17:7d:7b:59:47:b3:80:d6:9a:c7:70:9b:90:ce:18:
f9:89:54:0f:28:e2:61:c4:ef:2d:6d:45:49:a7:29:6d:12:13:
1a:30:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:21:49 2025 by rpki-client