Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa
File: 352e3235332e3232372e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: TOKFfeiiOAUMeWdhWcy1Gck5Kdt6wsuIebN0YbT71DQ=
Subject key identifier: 13:5A:02:F6:76:F1:BA:CE:00:48:E5:9B:50:3F:1E:80:5B:A1:97:6F
Certificate issuer: /CN=5e571face4240a2b8b1561480b8a2e00a6d5e335
Certificate serial: 31AA46AB5AADFFF3C381689ED855651A1327F289
Authority key identifier: 5E:57:1F:AC:E4:24:0A:2B:8B:15:61:48:0B:8A:2E:00:A6:D5:E3:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlcfrOQkCiuLFWFIC4ouAKbV4zU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa
Signing time: Mon 27 Mar 2023 08:27:44 +0000
ROA not before: Mon 27 Mar 2023 08:22:44 +0000
ROA not after: Mon 25 Mar 2024 08:27:44 +0000
asID: 205659
IP address blocks: 5.253.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:aa:46:ab:5a:ad:ff:f3:c3:81:68:9e:d8:55:65:1a:13:27:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e571face4240a2b8b1561480b8a2e00a6d5e335
Validity
Not Before: Mar 27 08:22:44 2023 GMT
Not After : Mar 25 08:27:44 2024 GMT
Subject: CN=135A02F676F1BACE0048E59B503F1E805BA1976F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:98:d9:4a:89:7b:c7:1f:a2:1f:b3:9e:24:
81:38:e9:51:4a:4d:81:45:13:ba:79:02:40:b5:a1:
f2:ed:21:6d:a2:4c:5f:57:15:60:59:a0:76:fc:e0:
79:2d:82:c8:ca:fd:e3:3f:2d:06:b2:15:bd:18:1a:
05:c6:86:e7:e4:f0:4e:32:6a:60:f5:b5:df:04:8a:
94:3b:fc:20:f7:6f:5e:52:8d:8c:7b:ba:74:38:a1:
ba:e4:1e:db:7d:de:f1:f9:8a:58:36:55:78:79:63:
2c:a8:83:22:fb:32:40:a8:cb:aa:32:57:52:2d:77:
1a:44:24:54:78:30:b9:a6:79:65:49:f7:9c:d4:75:
9a:20:42:b7:17:7a:48:b2:ab:ed:61:02:ba:4a:aa:
34:c7:f1:fe:07:ee:a9:d1:02:15:3a:7c:c3:ec:ed:
8f:52:54:ce:1e:a5:54:04:de:4d:54:41:7e:43:b5:
4f:53:2a:d4:a6:44:f7:f5:8f:2b:1c:e5:6e:06:70:
23:85:ef:38:77:c2:30:66:0b:db:13:95:84:92:91:
d1:48:bf:9a:56:25:1f:38:70:6a:65:24:d6:7c:dc:
29:3b:11:14:50:85:46:09:f0:d6:05:70:35:7d:bc:
c8:39:ba:59:32:91:b8:30:e8:50:78:9c:4f:23:50:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:02:F6:76:F1:BA:CE:00:48:E5:9B:50:3F:1E:80:5B:A1:97:6F
X509v3 Authority Key Identifier:
keyid:5E:57:1F:AC:E4:24:0A:2B:8B:15:61:48:0B:8A:2E:00:A6:D5:E3:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/5E571FACE4240A2B8B1561480B8A2E00A6D5E335.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlcfrOQkCiuLFWFIC4ouAKbV4zU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/352e3235332e3232372e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
06:17:c6:51:a7:26:de:78:53:a5:08:e9:b3:5e:b7:0d:32:aa:
60:35:2d:64:6a:78:8d:09:cc:f5:8f:55:98:6a:89:4c:ab:04:
40:87:0f:0f:0d:a3:34:3b:41:dc:fa:2f:88:58:fa:b6:c8:9b:
cd:80:87:28:d9:53:e3:e3:9f:93:3e:43:b4:5f:43:32:23:b3:
15:d8:72:9e:2a:26:34:81:2b:5d:bb:9b:e5:73:45:b7:32:66:
a4:25:aa:d4:78:fd:cd:e9:35:80:2d:e1:bb:9c:13:77:09:93:
d8:fb:6a:01:08:3d:db:4c:f6:eb:5d:0d:59:1e:c1:00:8e:53:
a4:56:b4:fe:85:23:b0:29:50:b3:f9:ec:56:42:e6:79:ce:bc:
fe:74:60:64:07:e3:27:f1:42:6c:fe:ad:12:04:f0:b4:8c:7c:
2a:1a:57:46:16:ca:a1:8d:e9:f1:d8:e1:ea:83:ef:f0:b7:bb:
3c:a5:0a:2c:69:b9:b4:5a:10:49:46:c3:6b:ba:9f:ad:22:ff:
6d:66:92:e3:3d:8f:5d:46:2b:63:f7:2a:6b:e3:e0:99:03:81:
52:a4:46:b6:10:09:57:57:0c:3c:22:f6:61:81:a0:86:ff:06:
63:fa:b5:21:10:2c:d9:83:ad:6a:74:72:9c:26:ab:f4:de:34:
ec:dc:c6:f4
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUMapGq1qt//PDgWie2FVlGhMn8okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWU1NzFmYWNlNDI0MGEyYjhiMTU2MTQ4MGI4YTJlMDBh
NmQ1ZTMzNTAeFw0yMzAzMjcwODIyNDRaFw0yNDAzMjUwODI3NDRaMDMxMTAvBgNV
BAMTKDEzNUEwMkY2NzZGMUJBQ0UwMDQ4RTU5QjUwM0YxRTgwNUJBMTk3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWJjZSol7xx+iH7OeJIE46VFK
TYFFE7p5AkC1ofLtIW2iTF9XFWBZoHb84HktgsjK/eM/LQayFb0YGgXGhufk8E4y
amD1td8EipQ7/CD3b15SjYx7unQ4obrkHtt93vH5ilg2VXh5YyyogyL7MkCoy6oy
V1ItdxpEJFR4MLmmeWVJ95zUdZogQrcXekiyq+1hArpKqjTH8f4H7qnRAhU6fMPs
7Y9SVM4epVQE3k1UQX5DtU9TKtSmRPf1jysc5W4GcCOF7zh3wjBmC9sTlYSSkdFI
v5pWJR84cGplJNZ83Ck7ERRQhUYJ8NYFcDV9vMg5ulkykbgw6FB4nE8jUEQxAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUE1oC9nbxus4ASOWbUD8egFuhl28wHwYDVR0j
BBgwFoAUXlcfrOQkCiuLFWFIC4ouAKbV4zUwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xODEvNUU1NzFGQUNFNDI0MEEyQjhCMTU2MTQ4MEI4QTJFMDBBNkQ1RTMz
NS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsY2ZyT1FrQ2l1TEZXRklDNG91
QUtiVjR6VS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4MS8zNTJlMzIzNTMzMmUz
MjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzNjM1Mzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAF/eMwDQYJKoZIhvcNAQELBQADggEBAAYXxlGnJt54U6UI6bNetw0yqmA1
LWRqeI0JzPWPVZhqiUyrBECHDw8NozQ7Qdz6L4hY+rbIm82AhyjZU+Pjn5M+Q7Rf
QzIjsxXYcp4qJjSBK127m+VzRbcyZqQlqtR4/c3pNYAt4bucE3cJk9j7agEIPdtM
9utdDVkewQCOU6RWtP6FI7ApULP57FZC5nnOvP50YGQH4yfxQmz+rRIE8LSMfCoa
V0YWyqGN6fHY4eqD7/C3uzylCixpubRaEElGw2u6n60i/21mkuM9j11GK2P3Kmvj
4JkDgVKkRrYQCVdXDDwi9mGBoIb/BmP6tSEQLNmDrWp0cpwmq/TeNOzcxvQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org