Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203136353039.roa
File: 352e3232362e3138392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: kr8izgLHpyQBspO5iJHck3IkjuDOsdRfI0aINRgfnKo=
Subject key identifier: 7A:F9:EE:2C:CD:82:7B:A4:DC:25:EA:7E:48:FD:11:13:36:D6:77:B8
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 5E967D8DCFBBDD607658A0D51435B303FE054369
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203136353039.roa
Signing time: Tue 04 Feb 2025 10:26:45 +0000
ROA not before: Tue 04 Feb 2025 10:21:45 +0000
ROA not after: Tue 03 Feb 2026 10:26:45 +0000
asID: 16509
IP address blocks: 5.226.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:96:7d:8d:cf:bb:dd:60:76:58:a0:d5:14:35:b3:03:fe:05:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 4 10:21:45 2025 GMT
Not After : Feb 3 10:26:45 2026 GMT
Subject: CN=7AF9EE2CCD827BA4DC25EA7E48FD111336D677B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:7b:74:20:77:59:78:f5:ad:37:b5:25:9c:
6c:d7:5d:4b:06:da:96:f5:e1:d3:93:ab:18:d1:b0:
32:1d:b3:f0:49:a2:02:cf:85:18:45:56:86:ad:40:
ee:d1:69:17:82:0c:67:8a:63:c8:36:21:9e:14:c9:
98:4b:c3:60:15:2b:65:37:15:a7:a0:2b:8e:bf:57:
9d:9e:2f:62:49:12:38:99:f9:ef:58:03:c7:8d:ea:
27:2f:7d:95:41:67:9f:0b:bd:28:66:5e:25:da:bb:
f9:b0:5e:be:fc:bf:5b:3a:42:df:c3:e7:fd:54:ee:
00:8e:14:ad:a4:54:34:da:f2:35:b1:7e:bc:23:8b:
9e:77:a8:27:f5:60:da:c9:8e:9d:34:7a:b1:35:eb:
89:f8:fc:9a:39:60:c5:3d:37:89:64:5a:24:e3:43:
7c:a5:ad:55:37:88:c7:d8:78:1f:1c:f4:f9:b1:69:
21:26:be:23:85:49:4c:77:28:20:87:38:88:6c:e4:
a3:51:03:f5:95:33:0e:cb:02:76:dd:d7:51:e1:2e:
fe:01:c3:e4:2c:bf:04:f5:83:df:a5:c6:c6:4a:cb:
40:6d:fc:85:4e:06:07:72:a3:35:91:ce:81:90:55:
bc:8d:1d:7e:25:d2:07:f6:ec:c7:48:c5:f7:dd:89:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:EE:2C:CD:82:7B:A4:DC:25:EA:7E:48:FD:11:13:36:D6:77:B8
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:55:6c:68:a9:c3:f6:90:c6:00:6c:8d:56:a4:76:0c:66:f1:
59:34:b6:0f:cb:81:f4:67:1e:ed:31:b4:87:9d:04:51:2a:6b:
d9:d2:8c:6f:8c:32:f7:17:47:eb:ad:9c:e7:38:09:1f:7d:ce:
73:ab:43:cf:41:85:e4:5d:78:5a:d6:4d:77:1d:33:a1:56:61:
fa:3a:70:80:3e:ec:fb:f3:1a:2b:61:a2:7e:c7:d8:5f:00:80:
d3:0d:23:d9:40:91:d6:58:69:fd:1a:92:8b:b8:6a:4f:b2:6d:
60:cd:95:79:34:27:6e:a8:95:3d:b7:4e:0c:d1:54:7b:db:3c:
de:cb:22:61:5d:21:51:9b:5d:df:30:a8:96:13:6f:25:66:e3:
2c:f7:12:43:ca:bb:96:31:bb:18:c2:69:0c:c3:1e:43:04:67:
9e:0a:bc:21:f3:20:e6:7d:ee:b2:97:32:0b:78:03:7f:ca:18:
41:33:da:6c:21:06:19:5c:c8:38:e8:21:ae:d4:be:46:ac:c3:
f8:13:3d:ea:5f:79:e8:28:8f:dd:8b:4c:40:f6:88:a7:ce:3c:
e0:c1:25:d8:64:74:b3:07:fc:a6:df:3f:12:33:29:a3:6f:a6:
cc:0c:89:34:59:e7:17:15:38:46:03:3b:bc:59:99:f3:e5:0d:
be:f6:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:46 2025 by rpki-client