Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BOEv4ZH2fgyybuExfu8wCrcGL2TYJyGTC7JNFHrgd/w=
Subject key identifier: 40:34:29:DD:5D:64:57:27:46:30:D2:ED:46:32:40:D6:44:FC:97:52
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 7B2B73A5CF994810B4E6C23921E84220BF28C451
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Nov 2023 10:15:04 +0000
ROA not before: Tue 21 Nov 2023 10:10:04 +0000
ROA not after: Tue 19 Nov 2024 10:15:04 +0000
asID: 834
IP address blocks: 5.181.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2b:73:a5:cf:99:48:10:b4:e6:c2:39:21:e8:42:20:bf:28:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Nov 21 10:10:04 2023 GMT
Not After : Nov 19 10:15:04 2024 GMT
Subject: CN=403429DD5D6457274630D2ED463240D644FC9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:2b:41:9b:08:12:17:f8:94:49:72:df:17:
9f:c2:40:a1:37:eb:fb:1b:8f:89:43:b0:74:8a:eb:
44:00:e6:64:11:f2:fb:43:4f:1f:c7:67:0f:2c:87:
57:97:90:9a:6d:7a:99:5f:85:09:98:1a:05:2f:ac:
d5:1c:7e:23:3b:66:a0:ac:8d:4d:35:cc:62:fa:24:
c4:d4:9d:f3:ae:9f:51:e3:df:4d:a8:66:b6:c6:61:
b1:48:26:08:f5:ea:d6:2b:94:08:50:66:a5:a6:77:
a4:5a:80:6c:fc:02:46:ec:e5:ca:cf:10:6b:2c:29:
77:be:8b:f8:f1:24:f1:ec:c6:49:c3:92:d0:9a:be:
4f:43:d9:02:df:c8:e9:da:61:98:32:24:bd:35:65:
22:21:fa:47:98:43:9d:3f:0a:94:43:43:cc:7b:16:
8c:20:1e:35:e3:18:85:f0:b3:5f:fe:ee:6e:a9:5b:
db:7b:78:81:23:59:fd:ab:c6:10:a9:3c:e9:d7:ec:
fb:e1:fc:cc:1e:d7:18:a5:57:58:b3:37:9f:6a:af:
39:ce:d9:4a:3a:79:d8:8e:f0:d5:32:77:17:74:56:
56:c8:26:96:d1:5d:76:98:45:66:8f:f8:01:36:74:
b5:99:b8:1e:65:94:46:4f:3c:31:7e:9d:f9:38:94:
b0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:29:DD:5D:64:57:27:46:30:D2:ED:46:32:40:D6:44:FC:97:52
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ce:dc:d5:f9:bf:ac:21:2b:07:b8:fe:df:77:db:e0:02:58:
4f:f0:e1:fb:aa:e1:0d:b1:84:01:6e:72:5b:6e:6c:ce:d7:55:
2b:23:e0:3b:8c:7c:81:16:10:6d:7c:08:77:e8:4d:ee:76:fd:
1c:63:ec:f9:b5:50:b1:98:65:00:0e:ee:ff:e0:ef:b3:33:73:
b2:18:59:cb:3b:ea:2f:7a:66:46:df:44:fb:73:a8:2e:b1:2f:
74:87:a8:99:35:a1:d4:7d:2d:5a:30:4f:3e:5d:0d:33:ed:bb:
fc:67:2f:6a:bb:a8:93:81:ec:a2:61:a6:be:25:e6:ee:59:f9:
d0:fc:ea:52:84:30:9b:d4:8f:ff:91:71:9d:3f:54:f4:c3:b4:
cc:f2:2d:63:be:bd:26:a9:de:e3:e8:c3:3e:a1:36:4c:45:38:
21:5e:9c:fc:7e:6b:f6:0e:f4:51:20:89:d9:c9:0e:b9:55:cf:
c2:7a:a1:bd:2c:c8:65:4a:52:4b:38:ee:0e:3e:cc:dd:2e:56:
e6:4c:cd:1a:9a:a5:27:57:ad:8a:d6:47:30:e0:8d:b0:2e:bd:
79:ac:b6:99:92:5a:14:97:80:01:09:0b:9c:b3:02:13:a3:ca:
df:a2:f6:ab:2a:f3:1c:a0:e0:47:74:bc:f2:ef:c0:05:df:15:
f5:89:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org