Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3232302e302f32322d3232203d3e2039313235.roa
File: 3231372e3136392e3232302e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: 3daNYzl+Fs+Ri6htidHFPuG3Z0oDFT8V5KXUNrXCWt0=
Subject key identifier: 95:A0:E5:C5:68:16:AD:FC:7A:6F:28:18:CC:90:6F:5E:40:1B:C2:46
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2D7191764829ED045817918CEF367A9D13C0034E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3232302e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:21:08 +0000
ROA not before: Tue 06 Jun 2023 09:16:08 +0000
ROA not after: Tue 04 Jun 2024 09:21:08 +0000
asID: 9125
IP address blocks: 217.169.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:71:91:76:48:29:ed:04:58:17:91:8c:ef:36:7a:9d:13:c0:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:16:08 2023 GMT
Not After : Jun 4 09:21:08 2024 GMT
Subject: CN=95A0E5C56816ADFC7A6F2818CC906F5E401BC246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:50:ec:92:00:12:4c:36:58:68:39:08:b7:
55:8c:17:64:a2:dc:e7:75:9f:96:f1:ba:13:27:81:
8e:57:8c:49:35:76:47:c4:c6:b0:66:ec:c5:61:e4:
1c:ce:9f:c0:f6:d3:6d:e0:95:3a:9b:60:4d:33:f5:
8d:a1:8e:d4:e8:97:53:8b:be:89:a4:c6:9c:3a:6d:
56:6a:f3:d9:9a:5d:22:c0:34:f6:28:de:17:af:ee:
7f:e1:ce:b4:78:90:93:b7:71:d4:fc:00:d7:6b:fc:
4b:35:71:1b:e1:af:cd:f5:08:d4:ae:76:1c:8b:0f:
e5:a2:ba:8b:dd:48:83:e0:9b:49:0b:7a:b0:8f:e3:
87:0a:b7:31:92:a5:b3:22:90:be:1d:d9:fc:ec:4d:
91:6d:a3:15:0f:17:67:87:b6:92:1f:7f:1a:41:20:
ce:fb:b1:d0:07:9d:74:8b:fd:dc:c9:86:7a:b4:80:
e3:de:23:e1:59:2c:69:69:78:c5:9c:75:5d:01:c6:
ac:c6:4f:09:4c:fd:2d:0f:53:5b:af:1f:03:00:1e:
7c:3b:9e:fc:8b:4f:3f:01:e1:2a:1f:ef:e1:c8:02:
53:63:21:98:5b:4c:18:20:97:7b:3d:dc:6d:40:57:
21:2d:8b:f5:61:36:03:f3:80:49:fc:df:99:b3:9b:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:E5:C5:68:16:AD:FC:7A:6F:28:18:CC:90:6F:5E:40:1B:C2:46
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3231372e3136392e3232302e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.220.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ee:2a:21:4c:8d:90:99:23:e1:63:8a:d2:36:64:67:05:28:
ec:37:72:c3:fe:22:3f:9f:b7:5c:53:c3:63:10:b1:9f:89:87:
e9:62:7f:23:d3:ba:93:e7:5b:b1:fb:2a:59:6e:18:0a:20:4b:
c8:e4:5b:d2:61:12:31:19:bd:01:39:dc:cd:c8:3b:fa:a3:0b:
13:36:ff:01:8c:7a:bf:96:3f:27:ea:c0:a2:0a:4d:2b:25:cb:
90:c9:9e:cc:4b:8d:53:b4:8d:04:5d:7d:6a:fe:e2:35:9a:61:
0c:2f:7b:e3:87:76:01:47:33:0c:03:5e:c5:9d:31:1b:46:50:
44:a3:f0:65:0c:a0:3e:88:8c:a7:5b:d7:2d:4d:f5:67:24:8c:
c2:4b:98:3a:c4:c5:58:42:5c:a0:cb:7a:fd:df:31:4e:ae:d7:
92:08:cc:cf:be:c9:cb:6d:0d:68:37:a7:ff:30:66:43:45:93:
19:17:04:0f:83:66:89:c5:4c:7e:3f:a0:1b:02:7a:a2:fa:e5:
50:6f:77:f2:6e:b7:ba:0a:d1:77:37:c3:fa:aa:ba:3e:c6:6e:
f2:0c:08:31:c8:c9:20:69:48:43:f9:aa:24:3e:a1:cd:db:d3:
a2:68:3d:47:66:a1:02:dd:2d:dd:a0:2d:51:b6:f7:3b:5d:12:
af:df:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:19:09 2025 by rpki-client