Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gb7XTIoPWDe39WU2UjOnwQb0AWWG0BKU0Y0bCWlfwmQ=
Subject key identifier: B8:DB:33:B3:B7:86:CD:E3:3B:41:F8:7E:A4:D9:35:79:F5:1C:9D:E7
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0F2F9BDB5B6CB315D0685D19AC117A4130CEF16E
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Dec 2024 10:52:11 +0000
ROA not before: Thu 12 Dec 2024 10:47:11 +0000
ROA not after: Thu 11 Dec 2025 10:52:11 +0000
asID: 834
IP address blocks: 5.181.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2f:9b:db:5b:6c:b3:15:d0:68:5d:19:ac:11:7a:41:30:ce:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 12 10:47:11 2024 GMT
Not After : Dec 11 10:52:11 2025 GMT
Subject: CN=B8DB33B3B786CDE33B41F87EA4D93579F51C9DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:1a:90:bd:d1:c7:d1:59:cd:f4:aa:1a:08:
df:db:02:2b:72:63:87:f5:1b:4f:09:fa:e0:a2:6b:
03:3f:07:de:12:c3:58:cc:6c:89:f7:1a:8d:e2:a8:
64:1d:7e:e3:0b:2c:3f:6c:d6:f9:fa:6c:d9:09:25:
68:e0:ff:2b:83:20:bb:9c:15:f1:c7:e4:30:0c:42:
8b:49:d2:6c:cb:02:40:8e:fc:e6:84:c9:76:32:0d:
bc:e6:a3:6c:a2:1b:52:fb:b4:c3:fd:ee:f0:6b:d1:
44:2e:04:fa:87:f6:b1:af:91:0b:b5:f7:52:a1:ba:
ca:21:48:8a:74:41:77:37:07:f6:66:77:6e:c1:e4:
20:94:fd:ee:21:f7:9c:98:b9:81:6e:06:7c:14:d9:
6b:f9:f8:2a:e5:55:3b:c7:66:d4:1a:df:21:96:4e:
cf:b0:cd:50:c9:a8:b8:b1:59:5d:75:83:ab:9d:76:
32:de:36:9b:6a:dc:95:39:52:d2:fa:e0:7a:bb:70:
c7:02:8f:90:73:36:29:1c:5c:34:90:14:a3:cf:c7:
d1:01:1b:59:e4:36:7b:b2:48:4e:4d:70:54:28:10:
a2:61:55:66:1d:d9:79:98:67:ea:41:c8:05:b6:89:
06:ae:0a:1d:11:ad:f2:98:38:b3:56:49:de:da:d2:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:33:B3:B7:86:CD:E3:3B:41:F8:7E:A4:D9:35:79:F5:1C:9D:E7
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d8:3b:9c:1c:3e:ee:c2:89:77:91:eb:4e:83:ee:0e:9c:1f:
34:ad:f9:a2:8c:6d:2b:89:5f:ed:45:24:5a:d1:3b:4c:92:c9:
22:88:fe:31:e0:f6:d5:6d:6d:f7:c7:d8:e0:03:ca:36:0e:4d:
69:a8:dd:96:89:23:e1:21:61:0a:50:5a:b3:bb:e1:4d:00:0a:
ed:57:63:6c:3b:e6:c4:5e:b6:9e:d8:80:c0:37:aa:dd:40:f2:
0e:c3:de:2e:fa:3e:b2:57:e6:70:2e:a7:f9:75:31:1e:0e:ee:
5d:d1:97:7f:0f:37:cc:26:79:ba:8f:42:9e:3b:fb:d3:6d:5b:
ac:40:40:5b:4d:0e:f4:6a:b1:5f:7b:c1:c8:c9:8f:e3:dd:91:
28:04:b7:25:02:7b:f4:15:25:fd:f0:0c:2b:49:33:85:c3:8d:
ff:e9:08:64:3b:ca:2d:47:9a:ff:f5:f0:09:02:21:3a:69:9e:
a3:06:70:9b:ff:8b:fd:55:3c:59:54:3d:5b:19:26:8b:df:36:
38:3c:db:e1:5b:a2:86:19:2c:29:cb:f6:22:6f:93:40:06:1b:
4d:cb:ad:12:93:16:fa:9d:70:ab:5f:58:ff:bf:4d:83:9e:ef:
1d:04:40:f7:c8:ed:c6:62:46:bc:99:21:38:59:de:f1:ed:8d:
7b:1c:ec:a8
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUDy+b21tssxXQaF0ZrBF6QTDO8W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNDEyMTIxMDQ3MTFaFw0yNTEyMTExMDUyMTFaMDMxMTAvBgNV
BAMTKEI4REIzM0IzQjc4NkNERTMzQjQxRjg3RUE0RDkzNTc5RjUxQzlERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTuRqQvdHH0VnN9KoaCN/bAity
Y4f1G08J+uCiawM/B94Sw1jMbIn3Go3iqGQdfuMLLD9s1vn6bNkJJWjg/yuDILuc
FfHH5DAMQotJ0mzLAkCO/OaEyXYyDbzmo2yiG1L7tMP97vBr0UQuBPqH9rGvkQu1
91KhusohSIp0QXc3B/Zmd27B5CCU/e4h95yYuYFuBnwU2Wv5+CrlVTvHZtQa3yGW
Ts+wzVDJqLixWV11g6uddjLeNptq3JU5UtL64Hq7cMcCj5BzNikcXDSQFKPPx9EB
G1nkNnuySE5NcFQoEKJhVWYd2XmYZ+pByAW2iQauCh0RrfKYOLNWSd7a0idLAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUuNszs7eGzeM7Qfh+pNk1efUcnecwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzUyZTMxMzgzMTJlMzEzNzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWyMA0G
CSqGSIb3DQEBCwUAA4IBAQBc2DucHD7uwol3ketOg+4OnB80rfmijG0riV/tRSRa
0TtMkskiiP4x4PbVbW33x9jgA8o2Dk1pqN2WiSPhIWEKUFqzu+FNAArtV2NsO+bE
Xrae2IDAN6rdQPIOw94u+j6yV+ZwLqf5dTEeDu5d0Zd/DzfMJnm6j0KeO/vTbVus
QEBbTQ70arFfe8HIyY/j3ZEoBLclAnv0FSX98AwrSTOFw43/6QhkO8otR5r/9fAJ
AiE6aZ6jBnCb/4v9VTxZVD1bGSaL3zY4PNvhW6KGGSwpy/Yib5NABhtNy60Skxb6
nXCrX1j/v02Dnu8dBED3yO3GYka8mSE4Wd7x7Y17HOyo
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:57 2025 by rpki-client