Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20313532313739.roa
File: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=
Subject key identifier: 7C:CD:F2:05:86:32:6E:FE:7A:6E:37:DA:78:63:12:46:63:87:90:6C
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 1C783400CC5E4360CA367861A2D68CC87EA569FD
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20313532313739.roa
Signing time: Tue 04 Mar 2025 09:16:20 +0000
ROA not before: Tue 04 Mar 2025 09:11:20 +0000
ROA not after: Tue 03 Mar 2026 09:16:20 +0000
asID: 152179
IP address blocks: 5.226.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:34:00:cc:5e:43:60:ca:36:78:61:a2:d6:8c:c8:7e:a5:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 4 09:11:20 2025 GMT
Not After : Mar 3 09:16:20 2026 GMT
Subject: CN=7CCDF20586326EFE7A6E37DA786312466387906C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:59:d8:8f:77:32:bb:ec:a3:1f:ff:1f:6a:
da:61:2c:e3:f3:8a:93:6c:3a:ba:12:5b:30:1f:01:
d9:bf:f6:6b:79:f1:7c:9a:b5:52:41:64:6c:16:e1:
d8:b1:c6:8c:41:4a:cf:97:6f:93:a7:cf:bc:6a:df:
b2:ea:ba:b6:04:fa:63:73:3a:8c:ee:2d:aa:65:59:
28:50:21:b2:45:15:76:38:20:ca:9a:8c:88:15:43:
b7:19:10:89:86:51:e4:6b:f7:f5:d6:3f:d1:4c:64:
7a:89:a9:19:7e:f6:09:fc:03:7f:66:77:c4:8d:db:
c2:13:08:81:e7:35:c4:0f:8e:41:b2:e3:d5:48:f5:
77:3c:4d:78:63:55:d9:86:91:7e:65:3e:70:8d:48:
eb:6c:0f:d9:37:b8:92:b4:27:3a:ac:11:3e:59:d5:
f5:1a:f1:5e:44:ab:31:5e:c3:d9:37:36:86:71:70:
60:87:20:31:1d:28:3e:c8:df:34:07:94:a7:57:52:
14:43:77:07:bd:8c:97:d7:ad:a8:f0:b2:fe:d3:a0:
69:e1:0f:6d:e3:d3:dc:9d:27:9d:17:a4:ba:af:d2:
87:bd:7f:44:03:07:a0:10:c5:aa:3d:e9:f2:5a:71:
12:c1:da:3d:e7:66:a1:1f:9b:7a:b2:42:5a:8f:4a:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:F2:05:86:32:6E:FE:7A:6E:37:DA:78:63:12:46:63:87:90:6C
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.188.0/24
Signature Algorithm: sha256WithRSAEncryption
18:08:19:54:66:31:7d:27:58:35:1c:a4:5a:50:76:bc:22:da:
4b:3f:40:71:07:ff:7d:e2:23:0f:a4:b0:67:39:8e:f9:bd:cd:
4f:79:1c:2d:33:7b:96:72:c3:43:f9:87:ce:f9:e0:31:ce:a0:
c3:20:35:07:d0:7e:d0:88:8a:3a:ac:80:d0:85:e2:0d:37:2a:
a4:f1:45:98:b7:31:22:76:e8:17:ea:ee:d5:78:19:f3:66:23:
90:2c:12:7a:da:41:e3:75:86:4a:47:82:5e:fd:4d:3e:82:3f:
88:15:2c:39:75:ad:76:5b:75:c9:15:65:aa:e6:b9:b8:01:77:
bf:f3:78:b8:f1:8e:7d:bb:5f:3d:57:db:04:23:be:07:6d:08:
54:e8:ca:9a:18:b4:b2:cd:4f:cd:eb:cf:c0:cd:c7:ba:2b:ad:
1d:2b:e4:2c:6f:1c:d3:f5:68:ba:05:da:61:a4:d3:ab:d8:17:
df:10:d1:f7:26:de:f8:fe:10:eb:4d:8d:8e:7b:63:f5:d0:0c:
1c:39:cc:2a:87:ed:08:69:63:06:fe:e0:8b:02:d1:73:60:f7:
95:77:9a:c9:a9:27:34:3a:c4:14:ed:47:2e:0f:41:63:cc:7c:
21:ba:f7:b7:bf:7e:a9:2d:57:ff:00:ea:ca:86:50:25:68:d5:
f4:6e:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:01 2025 by rpki-client