Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa
File: 322e35382e38322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: t0SkwhK39TrPct9nzq7qWbGOemwcWRnrNgedWxo3daM=
Subject key identifier: AD:95:FE:CD:5C:AC:FB:A7:BF:A5:15:5A:9A:B0:2D:6B:AD:DA:94:0B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 49515F003A7EFFC61D837B7FF84B391B53785383
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:38 +0000
ROA not before: Fri 20 Dec 2024 15:18:38 +0000
ROA not after: Fri 19 Dec 2025 15:23:38 +0000
asID: 51167
IP address blocks: 2.58.82.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:51:5f:00:3a:7e:ff:c6:1d:83:7b:7f:f8:4b:39:1b:53:78:53:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:38 2024 GMT
Not After : Dec 19 15:23:38 2025 GMT
Subject: CN=AD95FECD5CACFBA7BFA5155A9AB02D6BADDA940B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:07:69:08:cf:e7:5a:44:7f:1f:b1:e1:4a:
31:07:b3:8a:95:e1:a8:94:dc:1d:70:83:28:49:66:
e9:80:c4:c2:f2:77:ad:3a:33:1a:f4:d6:81:20:25:
ab:b9:25:b8:1d:b7:60:39:60:11:09:e5:8c:1e:38:
20:a4:5c:83:d4:26:c2:8d:f5:cf:ef:30:88:3b:be:
fe:f4:9b:1f:88:20:6c:41:20:9f:db:46:3a:84:e4:
d3:61:f2:3e:4e:a3:43:dc:b1:a6:51:cc:b9:58:35:
81:10:bc:a3:98:f6:cc:79:4a:4a:bb:78:d5:05:f3:
2b:04:f8:2b:6d:fd:3f:24:ff:07:19:a9:7a:43:d1:
f9:82:8e:22:e9:dd:77:88:76:5d:33:43:00:77:60:
0c:0a:07:a6:6d:fa:13:39:25:7d:dd:9f:bf:4c:1d:
9f:7f:14:b0:94:5d:b8:93:9c:15:15:d9:1d:e0:63:
de:52:8a:2b:1f:80:d9:2e:d6:4e:b3:b4:52:d0:47:
0a:4d:5e:ef:e6:96:84:31:17:e2:b0:80:bb:3a:59:
49:c4:56:8f:a3:f9:0a:29:0d:0a:3c:e0:fb:40:f4:
3f:2f:87:57:c8:8c:67:64:91:7c:72:22:03:da:1e:
77:70:01:55:69:2a:44:95:70:4b:88:48:d4:2c:4f:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:FE:CD:5C:AC:FB:A7:BF:A5:15:5A:9A:B0:2D:6B:AD:DA:94:0B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e5:f7:a9:67:51:92:b6:5c:50:24:f0:da:c2:56:f0:42:cc:
44:d1:d2:ed:fe:51:a6:ee:8e:96:60:4c:1c:94:3b:f0:d3:cc:
51:1f:64:4e:fe:cf:e2:3d:b3:38:ec:ba:10:4d:03:65:17:d6:
83:f1:23:d4:ff:a4:4a:3e:5c:a4:df:f3:3d:00:49:14:41:bc:
65:15:22:77:6f:52:41:3c:a4:21:80:7f:ea:33:a1:13:90:cc:
0d:19:db:03:a4:05:81:7a:d6:21:26:3c:de:17:ce:fc:a9:8b:
89:20:2e:02:40:ea:d5:30:d4:c4:ed:d2:39:a5:64:f2:63:75:
11:5c:8e:99:09:0d:21:17:74:8c:54:40:4d:77:2a:27:82:57:
bd:88:2d:c7:9a:0f:0c:db:f5:03:11:8d:fa:3e:2d:57:e5:f4:
f7:75:70:d2:ef:d3:58:78:db:4e:1d:fa:6f:2d:72:85:5f:8d:
60:3c:ed:53:29:3f:8f:16:be:16:7a:57:e2:11:53:fb:23:79:
ec:24:3c:43:e7:0f:9f:b6:95:49:6f:d1:0e:2e:e2:e6:a8:32:
c3:81:f6:17:0d:2e:f6:b5:f0:e5:84:8a:68:da:c4:e5:ff:fd:
f3:05:69:75:2b:8a:b4:5c:51:9e:23:d2:0d:42:81:ee:ba:c3:
c8:85:87:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSVFfADp+/8Ydg3t/+Es5G1N4U4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzhaFw0yNTEyMTkxNTIzMzhaMDMxMTAvBgNV
BAMTKEFEOTVGRUNENUNBQ0ZCQTdCRkE1MTU1QTlBQjAyRDZCQUREQTk0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqQdpCM/nWkR/H7HhSjEHs4qV
4aiU3B1wgyhJZumAxMLyd606Mxr01oEgJau5Jbgdt2A5YBEJ5YweOCCkXIPUJsKN
9c/vMIg7vv70mx+IIGxBIJ/bRjqE5NNh8j5Oo0PcsaZRzLlYNYEQvKOY9sx5Skq7
eNUF8ysE+Ctt/T8k/wcZqXpD0fmCjiLp3XeIdl0zQwB3YAwKB6Zt+hM5JX3dn79M
HZ9/FLCUXbiTnBUV2R3gY95SiisfgNku1k6ztFLQRwpNXu/mloQxF+KwgLs6WUnE
Vo+j+QopDQo84PtA9D8vh1fIjGdkkXxyIgPaHndwAVVpKkSVcEuISNQsTzWPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrZX+zVys+6e/pRVamrAta63alAswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzgz
MjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAC
OlIwDQYJKoZIhvcNAQELBQADggEBABvl96lnUZK2XFAk8NrCVvBCzETR0u3+Uabu
jpZgTByUO/DTzFEfZE7+z+I9szjsuhBNA2UX1oPxI9T/pEo+XKTf8z0ASRRBvGUV
IndvUkE8pCGAf+ozoROQzA0Z2wOkBYF61iEmPN4Xzvypi4kgLgJA6tUw1MTt0jml
ZPJjdRFcjpkJDSEXdIxUQE13KieCV72ILceaDwzb9QMRjfo+LVfl9Pd1cNLv01h4
204d+m8tcoVfjWA87VMpP48WvhZ6V+IRU/sjeewkPEPnD5+2lUlv0Q4u4uaoMsOB
9hcNLva18OWEimjaxOX//fMFaXUrirRcUZ4j0g1Cge66w8iFh1s=
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:16:30 2025 by rpki-client