Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20383334.roa
File: 352e3138312e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0PvcDt9ggCTPCMJUoeuK+QUCX9SvdguNjqWTCLQGe1s=
Subject key identifier: 7C:78:EE:BC:54:AD:E9:4E:6F:4A:58:E3:C9:CF:A4:43:55:DC:C8:25
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 35CC1BEF3EE3AB6E9ADAA9CBEC07B87458E58576
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Nov 2023 10:15:05 +0000
ROA not before: Tue 21 Nov 2023 10:10:05 +0000
ROA not after: Tue 19 Nov 2024 10:15:05 +0000
asID: 834
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cc:1b:ef:3e:e3:ab:6e:9a:da:a9:cb:ec:07:b8:74:58:e5:85:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Nov 21 10:10:05 2023 GMT
Not After : Nov 19 10:15:05 2024 GMT
Subject: CN=7C78EEBC54ADE94E6F4A58E3C9CFA44355DCC825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:bc:73:d1:48:6b:42:d2:8d:57:8a:ac:a8:
60:16:1f:2f:e9:f1:f4:66:58:05:91:27:0a:47:f7:
20:e9:98:f9:98:1a:35:7e:dc:27:8a:2a:15:78:12:
d9:64:0e:61:2f:83:8c:e5:3a:f1:61:97:2e:28:df:
77:81:21:32:50:43:4e:73:2b:3a:e6:62:4d:20:64:
8a:87:34:61:8d:eb:e6:8a:0f:1b:ef:aa:18:89:49:
66:f6:e6:28:42:83:fc:f9:29:2c:ac:1a:e3:bb:df:
62:87:90:fa:eb:2a:49:d9:6b:81:b2:c8:3a:4f:25:
86:85:fe:c3:13:0b:82:80:c0:bc:09:96:f2:3e:2b:
93:d0:b6:b1:a6:f2:3b:12:e2:d3:ef:85:08:3c:40:
57:36:55:fd:62:9d:e6:92:4e:7c:d1:27:0d:b5:34:
35:63:48:bb:ff:d8:88:47:9c:d2:41:65:2e:f1:47:
77:3d:d2:55:ec:ae:7e:42:62:78:88:d3:e6:ce:48:
59:db:c3:4c:fe:3d:55:e2:3b:fa:c1:96:b1:d9:e6:
c6:5a:92:28:6b:b5:d1:e3:b7:c1:9d:9c:17:ec:da:
ce:f4:43:34:68:08:d9:40:b0:ad:4c:ee:da:c3:80:
54:2f:41:8c:29:35:f5:a8:29:71:9a:38:59:b1:4a:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:EE:BC:54:AD:E9:4E:6F:4A:58:E3:C9:CF:A4:43:55:DC:C8:25
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/352e3138312e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fa:ff:af:36:60:d6:07:3c:56:ae:11:2c:bc:eb:0c:bd:0f:
0a:2e:2a:a9:da:23:4d:9a:57:5b:94:e6:23:85:2a:90:19:47:
ae:5e:b5:59:b9:b3:7b:41:32:f5:47:6b:0e:cf:a7:8f:6e:d1:
e4:ce:1c:42:b6:0a:d1:15:40:8a:84:c4:23:ab:e2:c8:31:7a:
38:ee:ee:2e:2b:9c:40:b8:7e:3f:ab:cd:02:56:b9:b3:ae:dd:
25:20:2b:83:5d:c1:9d:eb:ac:56:f1:fc:74:12:74:06:79:07:
15:7d:f5:65:c4:04:f2:70:7c:92:7b:09:4c:34:3a:ed:50:d7:
bd:45:c8:f3:96:6b:74:ef:3f:98:3b:a2:a2:4c:7b:e9:8d:df:
9a:19:0f:c9:79:d6:eb:37:47:c5:3f:c0:56:4b:ae:3e:15:a9:
4e:a7:e0:04:f9:17:7c:d0:88:49:a0:57:0c:05:8b:69:8a:17:
b5:df:59:50:46:81:32:14:17:4c:c4:d8:7d:b4:51:bb:67:43:
e9:10:57:98:d4:0a:05:b6:14:e4:9a:2d:64:8f:ff:85:58:1d:
55:38:c9:15:3c:ba:a9:e1:fe:54:79:fb:c6:32:cd:d1:26:42:
7e:6a:03:9c:8f:ab:2a:64:bb:e8:50:41:80:2a:8f:12:60:48:
a9:bc:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:49:02 2024 by rpki-client on console-fra.rpki-client.org