Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vAK7X26tgNPr4TFBILVRzd7h/odx7RcHVF4LMF1rw6o=
Subject key identifier: F0:62:82:C4:75:8D:EF:BC:4F:4B:7C:88:69:BE:E0:28:8F:0B:0B:D9
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4BF7D55C5B4976F724594000F1FCADE91BB5307C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
Signing time: Thu 09 Jan 2025 10:53:47 +0000
ROA not before: Thu 09 Jan 2025 10:48:47 +0000
ROA not after: Thu 08 Jan 2026 10:53:47 +0000
asID: 834
IP address blocks: 5.181.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f7:d5:5c:5b:49:76:f7:24:59:40:00:f1:fc:ad:e9:1b:b5:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 9 10:48:47 2025 GMT
Not After : Jan 8 10:53:47 2026 GMT
Subject: CN=F06282C4758DEFBC4F4B7C8869BEE0288F0B0BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:7e:93:8e:e3:df:2a:4d:58:7e:fa:dd:1b:
cf:df:59:28:92:5b:5c:7c:3e:e7:b3:8f:7c:43:ee:
48:b7:59:c0:2e:5c:ba:64:25:84:f1:47:31:be:5c:
98:8c:8e:d5:f1:4f:15:bc:74:7d:45:81:db:ec:c3:
09:3c:50:fe:01:ab:5f:7a:bd:76:66:7a:bc:7c:95:
b8:93:20:0b:b7:32:08:1b:4f:75:74:2b:8b:52:52:
ef:6a:27:b5:d1:a8:a6:3b:1c:0a:f6:73:5b:5b:1f:
f8:3c:5f:82:a3:ce:e9:19:57:85:35:6d:37:7e:e0:
8d:e9:32:d6:eb:97:51:fe:95:5c:90:5b:17:e3:03:
d0:0a:24:4e:ab:42:70:36:fe:38:dc:21:ee:90:70:
96:2c:87:5a:3d:5b:a3:e1:b0:48:7a:95:3a:3f:f8:
6a:a4:3f:8f:b6:08:91:63:c7:56:c0:d3:ee:b3:e2:
94:09:f8:e8:66:4d:46:28:cd:9a:c5:fc:a4:28:d5:
dc:b5:36:bd:88:83:54:46:72:18:d0:53:ad:31:3a:
51:26:b4:6d:63:db:92:13:a7:e1:5e:52:44:a0:a9:
6d:e7:2e:e9:31:ad:75:d0:fa:64:29:52:e2:07:e8:
e5:aa:1d:c2:1e:bb:4e:1a:ce:e1:11:fe:89:80:aa:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:82:C4:75:8D:EF:BC:4F:4B:7C:88:69:BE:E0:28:8F:0B:0B:D9
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5e:fe:7c:a9:da:60:3d:fd:00:84:79:2a:e4:d8:e5:42:f9:
4c:87:97:19:23:e7:e6:96:14:5d:df:b2:89:5b:54:37:f7:66:
01:fa:61:2f:35:cf:6c:6b:77:7b:cc:9c:0f:fe:e4:24:dd:89:
8d:85:99:7e:0d:9e:fc:9b:1e:c2:57:5a:1b:93:c6:c9:55:f6:
5c:6f:62:33:ff:64:a6:2d:da:62:d1:42:86:88:f1:e9:44:65:
f5:2b:83:46:d4:3e:34:b2:59:cd:00:97:63:42:47:34:d2:ec:
c5:8c:69:1e:ec:02:8e:d2:49:71:be:e1:aa:e9:c7:b0:5e:95:
61:b9:c3:a6:7b:66:66:ca:48:4f:22:5b:b2:1f:ca:b6:30:c8:
5c:06:3d:26:3c:75:47:7c:1c:88:d9:37:e6:c4:78:f2:e8:b0:
c4:ec:ad:47:9c:9e:69:b5:46:c6:89:08:0b:c7:0d:59:f8:bd:
b1:ba:38:50:3b:70:b7:e3:9f:35:7e:62:84:73:b5:49:48:b7:
c2:47:32:9e:bf:d1:ba:3e:43:3f:3c:10:ad:41:b0:d7:84:39:
d0:ef:a1:72:e5:d9:e6:e7:0a:d2:93:58:1a:e6:89:f3:ce:cc:
21:b2:fc:a5:3f:ac:03:af:be:5b:bf:32:ee:58:63:7b:f9:ea:
8a:b7:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:51 2025 by rpki-client