Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa
File: 352e3138312e3138322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: iIowBagrNHtgN0Z0Rx8AJCCwz3k7O5C4LWtb+Fpj1JM=
Subject key identifier: C7:90:42:F7:4F:EE:D0:E4:99:77:FD:C1:6C:C3:D4:BD:85:8D:A7:BC
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 21371EA115505E765BE9A2E5C0FC8864CA3FAD76
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 06:45:35 +0000
ROA not before: Wed 07 Jun 2023 06:40:35 +0000
ROA not after: Wed 05 Jun 2024 06:45:35 +0000
asID: 834
IP address blocks: 5.181.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:37:1e:a1:15:50:5e:76:5b:e9:a2:e5:c0:fc:88:64:ca:3f:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:35 2023 GMT
Not After : Jun 5 06:45:35 2024 GMT
Subject: CN=C79042F74FEED0E49977FDC16CC3D4BD858DA7BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:34:a4:f5:18:51:88:2f:88:f0:8a:aa:a3:
a3:5f:9b:25:1e:a4:89:84:c3:73:c5:0b:25:96:8b:
37:98:3b:9c:38:70:1c:54:16:0b:8c:85:f8:68:81:
3c:fd:9f:88:b4:67:60:44:b2:84:3f:53:64:44:87:
c9:9d:3b:b5:ce:52:a3:d8:d6:20:bd:de:71:03:1b:
ff:f1:88:29:5f:4d:3c:56:62:bb:fd:21:e2:93:3b:
be:e7:e5:78:02:9c:d0:c3:25:aa:9c:71:c3:86:c4:
a3:b1:57:4d:34:0f:d3:03:15:d3:fc:c0:f3:f9:18:
12:d7:7b:88:97:80:de:a5:76:fa:94:6d:7c:3d:82:
e5:f5:0b:fb:d7:35:ef:51:49:29:ac:a6:6c:b1:9c:
33:22:b3:ee:3a:d1:2c:87:db:25:0f:f4:db:3d:4f:
a5:e5:21:05:d7:07:87:11:10:8d:86:e5:38:ff:d6:
17:61:3b:68:e7:f5:d3:0d:44:69:53:81:34:56:d1:
90:e2:02:b1:ef:6b:37:b4:53:a3:58:d8:3f:b3:30:
75:06:97:b0:5d:cc:bb:6f:d0:1c:91:cd:52:0c:4c:
30:af:94:c9:e1:fb:bf:30:7f:57:19:f2:7f:ea:2a:
ca:5a:26:f2:74:61:f8:fc:94:8a:fd:40:7a:f3:57:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:42:F7:4F:EE:D0:E4:99:77:FD:C1:6C:C3:D4:BD:85:8D:A7:BC
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:d8:f4:b8:15:82:52:3f:07:ca:4b:6d:5d:82:52:6e:e3:5a:
dd:f5:f1:42:30:5b:90:c5:69:c7:c0:0d:2d:6d:f4:39:3b:92:
d5:6d:e2:04:d4:45:5b:ac:31:3b:16:34:d7:d0:28:c8:86:83:
05:f1:af:bc:03:e8:e6:95:31:54:1c:93:54:69:56:f3:70:95:
d1:09:6e:c9:a9:c0:68:d2:33:bd:69:5c:b9:85:3c:e3:29:78:
8d:09:14:b3:db:7f:d5:b4:e2:0c:5e:bd:20:40:8e:eb:bd:96:
01:2c:1f:2f:86:00:75:20:95:b9:59:93:11:8c:79:f0:14:36:
7c:32:92:dd:b2:13:f2:63:ec:4a:51:d4:8d:c2:89:e7:6d:5b:
8f:23:aa:f5:e8:39:fd:2b:31:12:57:8f:f8:6f:95:7a:a4:25:
38:9b:ee:d7:49:e2:74:ad:82:ed:1d:78:a3:9a:6d:85:36:9b:
82:45:f0:97:7c:e8:85:73:77:5e:0f:9f:42:e6:b6:62:77:5a:
f0:19:d9:56:b3:01:32:e3:1c:11:56:f6:74:98:61:21:1e:86:
cb:61:da:9b:4d:ce:12:85:a0:2b:52:83:f5:01:b0:74:fd:65:
73:90:5e:6f:e5:69:7e:34:d0:96:97:14:15:1b:d6:a4:68:4f:
09:c3:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:49:02 2024 by rpki-client on console-fra.rpki-client.org