Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/352e32382e3139322e302f31382d3138203d3e2031323733.roa
File: 352e32382e3139322e302f31382d3138203d3e2031323733.roa (raw, json)
Hash identifier: S2k86D1KFhgeye6Fj6mZnHYK5cDm4icKyO4IqL+XwSo=
Subject key identifier: E6:2C:7C:5F:D0:A5:73:79:16:0A:91:FF:7E:55:FC:51:ED:99:0E:62
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3AA40AE27EFEEE843AACAEE4D0AF3798757B14F8
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/352e32382e3139322e302f31382d3138203d3e2031323733.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 1273
IP address blocks: 5.28.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a4:0a:e2:7e:fe:ee:84:3a:ac:ae:e4:d0:af:37:98:75:7b:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=E62C7C5FD0A57379160A91FF7E55FC51ED990E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:87:59:85:20:ac:73:34:c9:cf:9b:ab:7a:
7b:88:52:87:bd:94:96:87:5b:70:7c:72:86:31:97:
ce:e7:89:3a:f6:81:bd:9a:c7:32:a0:a9:29:eb:7a:
8c:6d:05:da:bd:99:5d:1f:dc:e5:7a:c2:5e:24:28:
6b:15:aa:6b:37:00:d1:58:69:dc:46:cb:51:a3:46:
7d:14:25:f2:29:ab:45:6d:ad:89:90:0c:83:f4:f5:
45:e1:d1:f4:56:02:23:a9:16:81:41:f2:f1:e4:5c:
e3:ec:ce:4a:0e:70:e0:90:01:ca:01:7e:c4:9a:c5:
8e:27:df:14:1c:96:4c:0f:6f:ed:69:0e:3b:0f:50:
fa:aa:0f:e5:00:9a:b0:81:18:6e:df:3b:55:77:41:
9a:97:3e:8c:c3:7f:f0:10:aa:b6:ad:7d:90:40:e8:
ea:09:4b:3a:53:6e:b3:7d:7f:63:f4:25:bd:56:1f:
62:7e:74:47:aa:12:a0:af:d0:c1:21:4f:46:64:ff:
fb:26:e2:a6:0b:f1:5b:e0:20:0a:31:87:c1:d2:4e:
af:27:cb:22:f5:48:3b:e9:0b:10:22:47:0c:70:0c:
7d:bb:14:f7:de:be:5f:02:92:b3:cb:27:0f:fc:63:
80:0b:ef:16:4f:eb:dd:f2:9d:6a:2e:38:69:5c:01:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:7C:5F:D0:A5:73:79:16:0A:91:FF:7E:55:FC:51:ED:99:0E:62
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/352e32382e3139322e302f31382d3138203d3e2031323733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:dd:5a:36:3c:5d:e9:b3:48:39:cf:c2:ab:24:ec:d2:42:4e:
8b:c9:4b:6e:94:ce:61:ae:f3:01:ca:9c:29:00:44:45:f3:5b:
c6:30:55:c9:0a:45:36:d6:c7:ca:83:97:fb:a3:fc:01:aa:eb:
d7:77:0a:8e:48:5f:b0:d3:2f:6e:a1:c2:63:bb:0b:db:8e:a1:
d9:9e:4c:54:1a:1f:b4:18:ee:9d:a5:e9:4b:93:5f:b3:1b:52:
c2:5b:89:16:50:e2:ce:da:9d:23:67:28:48:43:08:ca:75:70:
be:e2:4e:a7:9e:4f:be:37:9d:df:2b:aa:e5:1c:68:8b:e7:93:
15:37:1d:18:10:db:2b:bf:17:4c:bd:ce:cc:a7:89:2e:fb:34:
48:8d:bf:88:a9:a3:4a:e7:ac:22:63:ee:59:b6:f1:ee:6b:66:
7d:61:ba:9e:a7:75:db:14:72:1a:b4:a3:46:a6:17:42:7b:1f:
4b:53:22:f1:7e:c7:00:59:2a:82:90:83:b0:36:3e:c0:ab:55:
d7:bc:05:32:94:83:db:b0:74:f7:86:f4:1d:20:ae:be:fd:dc:
e3:07:a9:b9:bc:12:ae:78:70:09:ce:58:b9:80:1b:20:89:76:
3e:0d:b3:5e:2d:56:82:d2:7e:15:7a:a3:b2:03:c4:a7:5d:6c:
1e:ce:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org