Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
File: 322e35382e38302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: j4PUBRooxAwRs1HIkqSzIKBsDhCe1623222MbA3wY1Y=
Subject key identifier: 41:56:75:26:1E:11:82:8D:1F:1B:E3:DD:00:3A:E5:75:56:DC:B4:96
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D5C8BD45DBC99042F9B9B80834044D4D175038D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:29 +0000
ROA not before: Fri 20 Dec 2024 15:18:29 +0000
ROA not after: Fri 19 Dec 2025 15:23:29 +0000
asID: 51167
IP address blocks: 2.58.80.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5c:8b:d4:5d:bc:99:04:2f:9b:9b:80:83:40:44:d4:d1:75:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:29 2024 GMT
Not After : Dec 19 15:23:29 2025 GMT
Subject: CN=415675261E11828D1F1BE3DD003AE57556DCB496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:c9:c7:dd:29:f4:c4:85:1f:69:a6:17:ec:
f7:99:8f:e2:2d:f7:6e:0c:ab:fe:c6:09:13:14:40:
2c:fb:39:33:c6:88:a6:35:0d:b0:3e:a6:1f:08:6c:
66:cb:d6:df:e2:38:dd:21:33:86:cc:23:97:5b:9d:
73:94:60:20:b5:32:54:21:2b:92:b3:bb:75:3f:0c:
e9:21:1d:85:70:9b:e6:6f:f5:d7:fb:9f:e5:77:40:
ba:48:21:34:3c:74:0e:49:dc:ef:b0:af:2d:05:4c:
da:14:4d:69:b6:03:0b:c9:9c:97:09:99:5b:84:a4:
ab:90:8b:b2:76:89:58:c4:0f:ef:df:ea:52:0f:bb:
1f:81:d5:1d:f0:1f:d5:46:f6:13:90:93:04:1e:02:
a6:20:a5:d6:69:43:1b:77:e1:0c:f1:f9:a7:2a:68:
b9:c8:d7:b5:39:51:72:52:c0:ba:16:67:2a:48:ae:
89:a8:4c:59:2e:ac:6f:e0:08:af:a0:bb:56:f4:53:
b4:9e:96:f3:55:8a:b4:91:f7:e5:f7:04:f3:a5:a8:
3e:81:17:b5:5e:a2:c9:4c:14:00:81:f6:f7:84:8b:
79:7a:56:dd:83:cf:7d:6a:5f:62:20:ad:6c:a5:3e:
a8:94:dc:84:93:4a:1b:30:ff:7d:d8:bb:b0:50:0c:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:56:75:26:1E:11:82:8D:1F:1B:E3:DD:00:3A:E5:75:56:DC:B4:96
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.80.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c0:6e:8d:af:1f:cb:89:e7:fc:8a:2d:12:34:d5:3f:40:0e:
41:61:6d:fa:9b:26:41:ba:31:89:d7:5e:96:79:a1:e4:a7:4a:
32:77:c8:a6:79:76:f6:6e:03:b8:82:e3:31:29:cc:86:58:a3:
38:35:68:8e:95:be:2b:8e:cb:61:1e:a1:8f:65:0b:42:0e:04:
7d:c2:32:78:21:b3:35:cc:cf:c9:c9:3b:8d:f2:41:99:60:28:
c8:7b:f9:e6:7d:4c:46:e0:8d:de:0c:ad:b9:67:56:80:1c:78:
0a:6f:2a:d2:1c:68:b4:cb:5b:e8:4b:22:a8:8e:bc:76:9e:c7:
e1:32:89:17:72:71:a9:47:f3:64:1c:48:52:a9:d9:89:44:e5:
80:7f:80:41:4b:a6:36:b8:c7:8d:29:51:d5:28:ec:05:b2:20:
d7:15:6e:23:11:3c:70:b7:0f:c5:4f:1c:31:83:30:6c:3b:ff:
df:d7:b7:a4:5a:d6:30:38:60:c5:36:0a:9f:72:15:27:4e:c9:
a4:de:b8:7d:04:b4:ac:1c:96:12:e0:1c:a1:61:fd:7c:77:b3:
ea:a0:79:4f:fb:f9:68:d0:f5:12:d9:73:3e:d6:b9:8a:16:16:
17:2a:c1:3a:8d:2e:31:50:e6:e3:5b:77:6e:9d:0d:22:79:f8:
d0:5f:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:09:13 2025 by rpki-client