Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139312e302f32342d3234203d3e203230343733.roa
File: 352e3232362e3139312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: UPFXIsNngs7ii0fChRVSrq5M20PxfDmf/pm0ZfcYEhU=
Subject key identifier: DF:24:83:93:F1:C2:D7:14:D6:F9:D9:27:10:C2:03:E5:0D:67:84:28
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 31705F5F381E100A2CF5DEDC0F7866C06DB1AB4F
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139312e302f32342d3234203d3e203230343733.roa
Signing time: Fri 28 Feb 2025 13:45:23 +0000
ROA not before: Fri 28 Feb 2025 13:40:23 +0000
ROA not after: Fri 27 Feb 2026 13:45:23 +0000
asID: 20473
IP address blocks: 5.226.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:70:5f:5f:38:1e:10:0a:2c:f5:de:dc:0f:78:66:c0:6d:b1:ab:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 28 13:40:23 2025 GMT
Not After : Feb 27 13:45:23 2026 GMT
Subject: CN=DF248393F1C2D714D6F9D92710C203E50D678428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:7b:42:98:d5:16:37:ae:00:2b:5f:3e:1c:
4b:d2:01:26:52:13:88:32:30:63:44:83:ad:ba:95:
8f:1d:50:90:33:23:5b:9b:d6:aa:68:fc:47:9a:87:
2c:b9:35:f6:fd:47:17:38:23:7f:c5:d9:e6:ef:ee:
33:45:ed:61:c5:06:4c:eb:59:13:71:92:db:ba:39:
7c:d8:6e:4a:36:ee:fe:9b:af:89:ee:ae:54:03:59:
64:67:3d:33:f4:91:b3:d2:1b:2f:2f:dc:6b:6d:8d:
c7:ca:a1:96:ae:dd:ea:6c:81:64:32:39:da:c1:d8:
88:a2:d5:eb:5b:ea:81:ed:c9:cf:46:4d:eb:71:43:
f1:d8:1f:2e:22:f7:b1:05:3c:d4:ce:06:77:ad:3c:
27:3d:d9:11:61:4e:33:60:99:47:17:4a:0d:59:9f:
dd:4c:f3:3b:bb:1e:73:0a:6a:89:cb:57:05:d8:5b:
95:9b:ba:37:40:6a:18:9f:70:96:66:af:fc:7d:b2:
71:5d:37:5f:c4:d8:f7:05:40:22:b3:14:08:b6:06:
61:9c:16:e9:3f:02:de:11:f8:45:ed:10:56:86:70:
17:00:12:28:fc:c1:28:9f:5d:b0:39:ac:f3:ea:f6:
ae:5f:d7:e4:9d:bf:5c:12:53:17:fd:45:8c:1f:f2:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:83:93:F1:C2:D7:14:D6:F9:D9:27:10:C2:03:E5:0D:67:84:28
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139312e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.191.0/24
Signature Algorithm: sha256WithRSAEncryption
04:76:62:45:59:18:49:ce:de:7a:39:71:87:c4:e9:21:19:95:
56:f2:18:17:c5:fa:7c:69:2d:23:77:a8:64:d6:a1:d2:39:cd:
09:c8:63:61:bb:5a:5f:c0:ba:11:7f:0b:f3:56:c9:fa:dc:19:
dc:a6:80:78:00:c0:40:81:f5:9f:01:37:71:da:87:29:4f:d5:
04:20:6b:d7:7c:f6:3f:c1:bb:fd:ec:2c:50:f5:07:6b:71:29:
a8:27:ef:d3:e5:81:de:70:77:e3:2b:b1:18:0c:29:9a:cc:9c:
4c:79:fc:50:6d:89:81:9b:02:95:ec:d2:1f:c2:63:b2:f6:e9:
cc:d3:b9:29:fc:38:23:39:6d:7c:b2:bc:50:27:c8:4b:c9:55:
3c:06:07:dd:66:0f:dc:4e:e1:71:8e:d0:0e:1c:7e:15:ef:ed:
82:8a:96:f5:f7:db:3c:b4:26:d1:fd:0d:1a:88:f7:ae:4d:f4:
5c:67:8b:a0:29:1a:70:38:02:03:16:42:32:f8:fc:93:b6:d5:
bf:83:f7:f5:b9:d8:75:4f:25:62:24:d9:6b:8f:07:9c:38:b7:
27:77:0f:27:22:05:60:2a:69:68:a4:4f:e7:5e:17:e6:d8:e3:
09:51:7a:03:fb:a1:f9:83:db:95:df:09:87:50:8f:20:a3:4d:
95:41:fe:ef
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMXBfXzgeEAos9d7cD3hmwG2xq08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAyMjgxMzQwMjNaFw0yNjAyMjcxMzQ1MjNaMDMxMTAvBgNV
BAMTKERGMjQ4MzkzRjFDMkQ3MTRENkY5RDkyNzEwQzIwM0U1MEQ2Nzg0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkHtCmNUWN64AK18+HEvSASZS
E4gyMGNEg626lY8dUJAzI1ub1qpo/Eeahyy5Nfb9Rxc4I3/F2ebv7jNF7WHFBkzr
WRNxktu6OXzYbko27v6br4nurlQDWWRnPTP0kbPSGy8v3GttjcfKoZau3epsgWQy
OdrB2Iii1etb6oHtyc9GTetxQ/HYHy4i97EFPNTOBnetPCc92RFhTjNgmUcXSg1Z
n91M8zu7HnMKaonLVwXYW5WbujdAahifcJZmr/x9snFdN1/E2PcFQCKzFAi2BmGc
Fuk/At4R+EXtEFaGcBcAEij8wSifXbA5rPPq9q5f1+Sdv1wSUxf9RYwf8j/NAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU3ySDk/HC1xTW+dknEMID5Q1nhCgwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXi
vzANBgkqhkiG9w0BAQsFAAOCAQEABHZiRVkYSc7eejlxh8TpIRmVVvIYF8X6fGkt
I3eoZNah0jnNCchjYbtaX8C6EX8L81bJ+twZ3KaAeADAQIH1nwE3cdqHKU/VBCBr
13z2P8G7/ewsUPUHa3EpqCfv0+WB3nB34yuxGAwpmsycTHn8UG2JgZsClezSH8Jj
svbpzNO5Kfw4IzltfLK8UCfIS8lVPAYH3WYP3E7hcY7QDhx+Fe/tgoqW9ffbPLQm
0f0NGoj3rk30XGeLoCkacDgCAxZCMvj8k7bVv4P39bnYdU8lYiTZa48HnDi3J3cP
JyIFYCppaKRP514X5tjjCVF6A/uh+YPbld8Jh1CPIKNNlUH+7w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:24 2025 by rpki-client