Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36352e302f32342d3234203d3e2039313235.roa
File: 38392e32332e36352e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier: s1Lmzz17CfqP2KRoucHfbIiEuprNWSdTnYZU/KxIaK0=
Subject key identifier: B6:D5:D9:E0:13:60:DA:65:09:2A:52:02:AD:DA:E2:53:8A:84:10:37
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2885C0D881EED0CBFD30718FE3402916303D9790
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36352e302f32342d3234203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:22:24 +0000
ROA not before: Tue 06 Jun 2023 09:17:24 +0000
ROA not after: Tue 04 Jun 2024 09:22:24 +0000
asID: 9125
IP address blocks: 89.23.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:85:c0:d8:81:ee:d0:cb:fd:30:71:8f:e3:40:29:16:30:3d:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:17:24 2023 GMT
Not After : Jun 4 09:22:24 2024 GMT
Subject: CN=B6D5D9E01360DA65092A5202ADDAE2538A841037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:76:b8:81:20:c9:56:e8:d2:4f:a5:22:15:
06:89:0e:30:5b:c0:55:32:5d:5a:03:fb:79:49:b2:
0d:0a:fb:52:fd:33:4a:00:f3:23:39:93:b4:2d:a4:
f1:67:1e:90:52:74:50:db:c0:6a:20:3b:24:1a:9e:
7b:89:46:5f:d9:45:12:a1:6a:e4:0c:db:9a:2f:4e:
fb:4b:22:a9:bd:f8:50:b3:f9:6e:50:37:03:fe:0c:
17:05:9e:71:8b:df:5f:f3:8b:e9:fc:42:49:73:43:
50:17:db:07:53:f7:6e:5a:4c:0f:37:20:45:cc:3c:
33:c1:4c:fe:b8:c9:32:68:ea:39:de:04:5c:c3:e2:
d9:c3:d2:e3:74:ee:db:d8:98:5b:ee:0f:e6:9c:63:
64:02:92:4c:2a:4c:d6:23:14:1c:a0:47:a0:d5:a2:
5c:9b:b3:61:a7:13:5a:f5:9c:7b:44:6d:7b:76:46:
1b:af:11:c2:f2:02:c9:23:de:4a:85:2d:4d:a4:5a:
da:f4:18:5e:4d:7e:3d:0a:fd:d0:ae:79:d4:eb:71:
67:ca:98:9c:e8:8c:a6:4d:95:cf:7b:2a:b8:37:6a:
38:3c:a6:f5:00:8a:bc:74:1f:34:2d:dc:76:04:c0:
ef:97:ca:87:82:62:27:b1:98:19:bb:05:b3:6e:f5:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:D9:E0:13:60:DA:65:09:2A:52:02:AD:DA:E2:53:8A:84:10:37
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36352e302f32342d3234203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:49:93:5e:dc:56:b7:04:13:e3:f8:36:7e:49:e5:d4:2d:53:
37:9f:2d:ab:fb:86:3e:fd:77:c3:18:2a:73:3f:b2:62:d5:a9:
b8:49:8c:dd:98:31:69:16:b7:d0:31:e0:cd:8b:8a:0e:e0:2b:
59:ed:49:63:9c:4e:dd:fe:a5:bc:38:b0:91:bc:51:ee:93:de:
58:5d:b0:aa:67:4c:a8:c1:9e:9d:70:97:9f:2e:97:bb:f1:a2:
8f:12:a4:d8:08:ed:0c:02:f2:68:59:ac:f7:82:21:e1:ec:50:
41:71:ee:e4:80:a6:4e:50:f6:ed:1f:29:5e:f3:99:3a:0d:ef:
37:d4:08:ac:3e:be:90:63:6a:84:23:c9:53:9d:94:ab:f1:d7:
fe:05:b7:f8:5e:16:08:8c:01:a9:fa:67:38:c5:68:db:86:e8:
e3:25:05:aa:dc:66:fb:37:8e:27:16:08:c5:c2:98:e1:3b:1a:
16:0a:f3:26:64:9f:4e:a3:b6:b0:08:07:c3:ec:7a:0e:8f:d1:
5c:03:8a:a9:2f:2d:85:b3:2a:25:5e:eb:79:35:de:c8:59:90:
b9:e9:4e:2a:d7:08:32:4b:01:ac:60:9b:df:88:cf:75:5a:94:
15:83:e5:38:1a:33:1b:be:96:5e:dd:76:e9:bf:87:5a:96:c0:
d7:70:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:07:35 2025 by rpki-client