Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WiY+NeSsmjEnE/9EkhUlGS5dg2i5bo118+aXBBLFLZs=
Subject key identifier: AB:02:3B:0F:CA:50:2C:A5:CD:B1:BB:40:A1:99:D1:C2:0E:3E:D5:72
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 591061733DF67E9EA7D263AE7677E45009463491
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa
Signing time: Mon 06 Nov 2023 10:00:03 +0000
ROA not before: Mon 06 Nov 2023 09:55:03 +0000
ROA not after: Mon 04 Nov 2024 10:00:03 +0000
asID: 834
IP address blocks: 5.181.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:10:61:73:3d:f6:7e:9e:a7:d2:63:ae:76:77:e4:50:09:46:34:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Nov 6 09:55:03 2023 GMT
Not After : Nov 4 10:00:03 2024 GMT
Subject: CN=AB023B0FCA502CA5CDB1BB40A199D1C20E3ED572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:db:63:fd:da:45:37:59:2d:39:0e:f4:1d:
79:d6:b4:65:63:61:0a:f3:b6:8a:22:27:58:dc:00:
98:cd:38:c4:f2:21:f5:1b:cd:d8:f8:ff:94:c8:94:
49:3e:f4:76:48:40:c3:9e:e2:a2:67:d9:a9:e0:6b:
3a:19:81:47:a7:89:a7:b1:df:2f:0c:0e:e6:cb:76:
70:32:8f:8a:3e:b1:c0:76:66:54:04:76:2d:ed:3e:
fa:85:20:89:b0:7c:61:d0:66:f4:21:38:6c:9d:08:
43:48:6d:ad:48:76:78:0d:a1:a5:ce:c1:87:20:58:
48:d8:e7:e4:34:7c:0a:26:b3:cb:6c:c4:c0:70:9a:
09:b4:94:3d:0b:56:2d:36:d7:8a:12:53:0b:a7:32:
cf:25:9f:c6:2e:c6:66:e8:3e:df:2e:11:83:7c:ac:
ed:ed:28:e4:36:34:11:0f:22:50:bb:af:f0:9f:95:
b1:cd:33:19:da:0f:25:e6:5a:16:6e:1a:ec:fe:e6:
f0:53:ec:2b:f7:65:0f:80:24:44:61:2c:53:62:77:
42:22:6f:0e:c6:ca:e8:59:5f:a7:a9:f8:b3:57:df:
67:17:8a:1b:89:63:d8:61:67:d0:b6:cc:a0:15:39:
7a:80:04:d4:3d:7b:ec:15:34:f8:56:b0:73:55:8b:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:3B:0F:CA:50:2C:A5:CD:B1:BB:40:A1:99:D1:C2:0E:3E:D5:72
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cf:7f:41:ed:0b:27:fb:3d:47:e8:47:56:38:52:45:ca:99:
fc:1c:1f:f4:b8:bb:91:60:6e:c2:f0:5f:14:f3:24:16:e6:6e:
97:a8:57:63:c8:89:36:89:09:0e:76:41:19:07:c5:69:75:ab:
ea:d6:d9:4b:26:e3:e5:e7:38:c2:90:ea:e5:4b:93:47:87:66:
f6:1e:c2:c4:9c:e8:14:a4:40:e1:d9:5b:01:35:0f:df:f5:5e:
b3:76:60:06:f7:ad:4b:7c:f0:31:b9:b7:87:e8:43:de:21:8b:
d5:d1:bb:19:67:34:40:d3:6c:65:83:27:b4:15:be:b1:7f:e0:
06:3e:ab:79:d3:f2:41:00:0f:bc:ae:b2:7e:00:8d:31:01:eb:
54:02:21:03:b8:1d:bc:f6:d3:53:a4:dc:82:c1:f0:50:ef:86:
e4:3d:1b:b4:04:f5:a8:62:cd:45:2b:de:47:51:62:ff:4d:58:
c7:0b:b4:44:1e:61:6d:fe:ce:0f:02:fb:4e:73:6e:38:5e:70:
99:86:1f:73:13:6c:19:ac:33:30:de:ed:78:0c:0c:7f:aa:0b:
c5:ff:36:54:1a:2d:63:6c:2b:99:89:e1:c5:2e:33:2b:8d:04:
19:5d:44:f1:d0:cb:90:cf:c2:71:a1:ea:b1:43:5b:4f:13:e5:
bd:33:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org