Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323031333634.roa
File: 352e3138312e3138362e302f32342d3234203d3e20323031333634.roa (raw, json)
Hash identifier: uiQz55CeCIjDgu62yr8/UJkvJUAhuzFNbxD4bv7IqLY=
Subject key identifier: 3A:C3:93:BF:95:C5:61:41:10:CA:49:1C:17:F3:9B:3D:5B:D4:5A:53
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7CCFEB53E23EBC9741C4922C70A8A956B938E1B8
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323031333634.roa
Signing time: Fri 20 Jan 2023 07:44:31 +0000
ROA not before: Fri 20 Jan 2023 07:39:31 +0000
ROA not after: Fri 19 Jan 2024 07:44:31 +0000
asID: 201364
IP address blocks: 5.181.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cf:eb:53:e2:3e:bc:97:41:c4:92:2c:70:a8:a9:56:b9:38:e1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 20 07:39:31 2023 GMT
Not After : Jan 19 07:44:31 2024 GMT
Subject: CN=3AC393BF95C5614110CA491C17F39B3D5BD45A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:51:d2:8b:94:ef:98:c0:57:ce:51:d4:6f:
f0:3b:c4:63:27:6d:b2:4d:3e:80:bd:4f:56:b3:7a:
c7:c1:b4:24:be:1c:4d:32:b0:92:c4:c4:a5:9b:de:
98:bd:d2:a1:62:01:18:bc:be:f1:03:b2:39:9e:f5:
cd:5f:f7:21:14:8e:0d:f3:70:63:2d:c0:a4:58:48:
e1:1d:a4:22:d2:6d:9c:48:6f:dd:c8:08:b1:e4:e1:
e3:df:06:b7:0d:0b:1b:bc:23:47:b9:5e:42:1c:b5:
10:10:13:c5:e3:69:c3:46:97:0d:e4:be:65:de:c4:
46:ed:26:ff:12:ea:3a:83:3a:12:8b:7e:07:74:3e:
97:ed:b2:9d:39:78:b1:ea:10:f4:7a:6c:93:cd:b2:
bc:27:a2:81:97:ef:72:f7:2f:26:a1:57:06:5f:dc:
bd:6b:37:24:5c:c6:97:b7:f7:b0:a3:01:15:dd:dc:
b4:b2:96:92:b7:2e:db:cf:0a:9b:db:55:61:cc:16:
bc:2e:f4:89:24:c7:16:bb:f5:e9:4d:3c:ef:ec:9c:
43:81:71:33:19:2b:44:c0:16:de:84:37:1b:18:c7:
91:46:8e:b8:58:84:9a:8d:bc:2d:86:42:21:40:b9:
03:5c:40:59:62:7c:82:f8:3d:4e:fb:07:a5:55:72:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:93:BF:95:C5:61:41:10:CA:49:1C:17:F3:9B:3D:5B:D4:5A:53
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323031333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f0:d3:6f:06:df:04:9c:91:90:64:3b:88:35:b3:52:79:7b:
ba:32:84:9c:ec:3a:f5:45:00:ac:8b:cf:82:e7:0f:60:94:1a:
66:49:d5:bc:8e:f5:61:1f:2b:06:c5:45:1d:30:49:1a:4d:4e:
ce:07:62:36:e7:36:f8:26:87:45:f2:cd:6d:ae:3c:e0:7b:61:
db:44:71:5a:1a:56:18:50:ca:92:ef:c0:af:22:b6:3b:bb:39:
45:fc:9d:71:b0:5e:1d:54:f3:3b:7c:52:30:8d:c8:0f:69:98:
00:f7:4f:58:2e:70:43:82:24:3e:6d:2a:35:6f:69:31:c5:60:
3b:a1:f5:cd:40:1c:7e:ae:70:84:77:38:4b:5c:b6:c6:d2:b9:
64:55:d1:12:03:98:cc:fe:7c:70:10:0d:53:55:bb:dd:60:cc:
47:28:64:ff:6c:d8:6f:ec:60:c0:e7:2a:4a:93:11:56:18:20:
cb:f5:fb:7d:be:a6:df:4d:ee:38:41:7e:2a:4a:e5:b7:30:f7:
29:7f:e2:d2:65:25:2d:13:ee:c6:18:b6:43:54:cd:60:6c:aa:
5b:c7:12:00:4b:63:f5:e1:cd:e5:1d:89:62:41:d4:54:28:2e:
fe:a6:ff:14:bb:99:c9:d0:9c:7e:cf:0e:55:81:2e:40:bd:2a:
c1:5c:9a:8f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfM/rU+I+vJdBxJIscKipVrk44bgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yMzAxMjAwNzM5MzFaFw0yNDAxMTkwNzQ0MzFaMDMxMTAvBgNV
BAMTKDNBQzM5M0JGOTVDNTYxNDExMENBNDkxQzE3RjM5QjNENUJENDVBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nlHSi5TvmMBXzlHUb/A7xGMn
bbJNPoC9T1azesfBtCS+HE0ysJLExKWb3pi90qFiARi8vvEDsjme9c1f9yEUjg3z
cGMtwKRYSOEdpCLSbZxIb93ICLHk4ePfBrcNCxu8I0e5XkIctRAQE8XjacNGlw3k
vmXexEbtJv8S6jqDOhKLfgd0Ppftsp05eLHqEPR6bJPNsrwnooGX73L3LyahVwZf
3L1rNyRcxpe397CjARXd3LSylpK3LtvPCpvbVWHMFrwu9Ikkxxa79elNPO/snEOB
cTMZK0TAFt6ENxsYx5FGjrhYhJqNvC2GQiFAuQNcQFlifIL4PU77B6VVcoYZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOsOTv5XFYUEQykkcF/ObPVvUWlMwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BbW6MA0GCSqGSIb3DQEBCwUAA4IBAQCp8NNvBt8EnJGQZDuINbNSeXu6MoSc7Dr1
RQCsi8+C5w9glBpmSdW8jvVhHysGxUUdMEkaTU7OB2I25zb4JodF8s1trjzge2Hb
RHFaGlYYUMqS78CvIrY7uzlF/J1xsF4dVPM7fFIwjcgPaZgA909YLnBDgiQ+bSo1
b2kxxWA7ofXNQBx+rnCEdzhLXLbG0rlkVdESA5jM/nxwEA1TVbvdYMxHKGT/bNhv
7GDA5ypKkxFWGCDL9ft9vqbfTe44QX4qSuW3MPcpf+LSZSUtE+7GGLZDVM1gbKpb
xxIAS2P14c3lHYliQdRUKC7+pv8Uu5nJ0Jx+zw5VgS5AvSrBXJqP
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:55 2025 by rpki-client