Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203134363138.roa
File: 352e3232362e3138392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: W5RSzcuC1NRqUmarwMyiabGjcoNk6+K+D+yepMOENN0=
Subject key identifier: 2F:33:25:B3:8A:17:EF:41:62:8F:09:04:69:45:D5:11:78:1B:DB:ED
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 3098B0726023C50DB64030CB48A564156A6ADC4B
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203134363138.roa
Signing time: Tue 04 Feb 2025 10:26:45 +0000
ROA not before: Tue 04 Feb 2025 10:21:45 +0000
ROA not after: Tue 03 Feb 2026 10:26:45 +0000
asID: 14618
IP address blocks: 5.226.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:98:b0:72:60:23:c5:0d:b6:40:30:cb:48:a5:64:15:6a:6a:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 4 10:21:45 2025 GMT
Not After : Feb 3 10:26:45 2026 GMT
Subject: CN=2F3325B38A17EF41628F09046945D511781BDBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:fb:f7:fb:1b:da:ff:f1:b8:a9:bf:0a:59:
e0:23:d2:46:4b:a0:8e:68:f8:d8:00:ff:65:93:43:
3e:54:4f:77:d9:0f:da:34:b2:22:01:e4:ce:a5:9a:
68:16:07:a5:7d:2b:52:9b:c1:fa:18:78:f6:6e:98:
43:1b:98:94:10:d6:04:23:55:b6:73:a8:a3:4b:e7:
4f:31:ba:8d:3d:08:1a:7b:53:45:18:61:00:e2:9a:
ab:3e:bd:36:90:1a:4c:cc:58:f5:b4:70:d4:e0:8b:
43:4d:7b:f1:de:91:51:b2:e7:67:d0:b3:ad:44:3b:
aa:fa:4a:1a:34:ef:d0:ca:61:b2:a6:38:89:41:99:
33:67:a3:d9:0e:11:18:96:d7:e0:49:94:4b:3c:2e:
6d:f9:59:e0:97:52:ba:f5:8d:d7:9f:8a:f4:5d:1c:
eb:8e:b0:03:60:d1:c4:bb:08:e7:d8:0b:b0:81:65:
4e:a5:96:2d:03:9d:42:e8:b0:fe:30:4f:d1:db:dc:
52:2f:9b:02:28:d1:9d:5b:9b:c4:e8:82:cd:b8:e5:
be:a1:15:2b:93:60:9e:28:09:d5:2e:0d:f5:05:a5:
d7:97:e0:36:d6:88:83:9b:30:00:45:dc:3b:ee:f3:
f8:63:5c:df:64:65:1b:16:d5:09:74:1a:00:a5:82:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:25:B3:8A:17:EF:41:62:8F:09:04:69:45:D5:11:78:1B:DB:ED
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138392e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.189.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4e:61:62:ac:02:01:08:3d:36:c1:a5:fc:14:e4:03:2e:fe:
7d:47:b0:6c:ee:4a:97:ce:05:23:32:31:32:1d:98:be:48:d2:
67:be:d6:a7:1c:81:35:b1:37:9b:61:0a:bd:7e:08:d8:e0:db:
4d:83:e5:e8:f5:ff:f0:45:0d:a6:8d:bc:0b:87:e4:97:5b:44:
5e:f6:84:08:ec:91:c7:a5:e0:0d:78:20:5b:49:b2:36:f2:d3:
01:d2:63:de:34:7c:5b:3f:e1:80:e5:37:6b:85:dd:45:c5:a3:
b8:64:f6:3c:cf:34:f0:d3:5e:b0:89:44:d3:fa:e2:56:bf:40:
3c:47:85:a3:a6:05:05:10:c5:fd:68:cb:ed:d5:af:03:8b:63:
b9:f3:23:ee:91:f7:8b:d5:a2:12:f8:3b:b5:ca:7f:3d:4d:b7:
58:9a:99:60:39:7b:f1:98:68:9f:3c:86:a8:f5:93:f3:3f:b3:
4a:f9:0a:7a:1b:8b:aa:38:c8:25:52:15:3f:58:ff:cd:b8:aa:
27:db:d1:3e:e9:08:91:c1:60:aa:b5:75:0d:82:35:c8:1b:72:
6b:ce:2a:93:75:f3:d7:27:58:ee:77:f2:60:45:a6:b5:56:14:
2a:c4:e7:f9:6f:2e:2e:50:80:85:20:e7:20:05:67:a0:4e:25:
13:21:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:22 2025 by rpki-client