Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
File: 352e3130342e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ARer+0rKXqZDhOt50VrQUIBgKO4ULhEaOkTEs57BjHg=
Subject key identifier: 18:76:79:C9:94:05:EE:65:4A:1A:41:50:2D:C6:F1:EC:CA:44:45:9F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 18632A3E5F82B391EB63A885277C0D8D4389AFC9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 136787
IP address blocks: 5.104.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:63:2a:3e:5f:82:b3:91:eb:63:a8:85:27:7c:0d:8d:43:89:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=187679C99405EE654A1A41502DC6F1ECCA44459F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:95:98:dd:9a:d2:9e:2a:a0:27:f0:27:2d:
b1:ba:1f:00:93:e8:f8:93:ed:8e:81:21:03:6f:cb:
a8:be:b1:19:97:45:c6:8c:e4:7c:51:54:90:0d:2e:
bd:9c:d5:75:93:92:ef:18:cd:0b:99:d6:1d:0a:d3:
2e:26:e1:2d:f8:ca:e4:80:ec:8f:8a:78:fd:11:5c:
eb:b5:e4:2a:dd:5e:a3:1d:09:5d:4b:49:13:61:1e:
f1:2f:1f:df:f4:49:a3:e9:0c:22:d0:e8:03:f7:9d:
3f:91:de:9c:da:10:ca:1d:e9:b9:ab:18:51:9a:63:
f7:e0:c5:df:1c:52:27:57:a9:0d:d5:ad:01:b1:0a:
3f:4c:7a:3b:40:97:d9:71:31:c9:c7:df:b0:7b:9b:
23:d5:59:64:a1:f1:cb:95:ad:d7:17:71:0c:47:2b:
2d:49:26:f9:d4:2c:79:c9:c0:fc:35:57:89:80:96:
74:e1:1d:3e:c9:3d:10:e6:bf:ef:44:ca:37:b3:8e:
86:8d:75:0e:36:5f:c0:45:94:87:02:48:c3:64:14:
54:b3:ca:10:ba:6e:79:fa:29:b0:13:02:90:d9:a2:
50:20:1d:15:07:0a:f2:05:8d:c6:f9:af:03:0b:bb:
e0:0d:18:c2:93:b0:a0:2c:b0:bc:68:41:5b:c6:75:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:79:C9:94:05:EE:65:4A:1A:41:50:2D:C6:F1:EC:CA:44:45:9F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3c:10:cb:49:7c:87:be:22:0c:2d:66:aa:5f:73:e6:27:03:
7b:d2:c2:d9:ed:ee:80:48:fe:38:07:30:a7:5b:b1:70:70:76:
65:26:4c:0c:83:67:32:8f:bc:2e:d0:4c:82:1f:ee:04:da:3b:
b6:2a:0f:f4:5d:f6:1d:ad:7d:1b:b8:76:4c:bf:01:24:76:85:
34:9d:f8:d2:45:12:c6:c0:dc:83:d7:63:31:b2:59:93:fc:26:
7f:32:37:69:38:a6:6e:03:76:e6:1e:44:9b:38:36:85:1f:5c:
57:c2:5b:2a:95:54:b7:ff:08:b3:c9:c1:98:72:9c:77:c5:16:
0f:ca:9f:31:99:7f:fe:e3:41:e3:f8:c1:58:fb:86:c3:a5:4c:
1a:a4:dc:53:5a:f3:a6:99:3b:1c:05:6c:0b:d3:57:5d:d5:60:
cb:73:cb:ed:46:33:04:02:2c:46:8e:72:e7:3b:9b:e6:dc:77:
1d:d1:9e:6a:24:e9:1b:c2:0c:7a:af:bd:56:05:96:29:dc:20:
bb:a9:4f:ee:c1:42:45:5c:09:61:6d:c4:69:b9:d1:9c:54:05:
c4:6f:c1:3b:f2:fd:f3:8b:b7:f1:33:4d:0b:4f:1c:99:9c:56:
e7:51:d6:87:e0:eb:ec:6b:ef:89:9a:4f:f5:a5:b4:7f:0a:76:
be:d7:57:2d
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUGGMqPl+Cs5HrY6iFJ3wNjUOJr8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzZaFw0yNTEyMjYxMTQ3MzZaMDMxMTAvBgNV
BAMTKDE4NzY3OUM5OTQwNUVFNjU0QTFBNDE1MDJEQzZGMUVDQ0E0NDQ1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcZWY3ZrSniqgJ/AnLbG6HwCT
6PiT7Y6BIQNvy6i+sRmXRcaM5HxRVJANLr2c1XWTku8YzQuZ1h0K0y4m4S34yuSA
7I+KeP0RXOu15CrdXqMdCV1LSRNhHvEvH9/0SaPpDCLQ6AP3nT+R3pzaEMod6bmr
GFGaY/fgxd8cUidXqQ3VrQGxCj9MejtAl9lxMcnH37B7myPVWWSh8cuVrdcXcQxH
Ky1JJvnULHnJwPw1V4mAlnThHT7JPRDmv+9EyjezjoaNdQ42X8BFlIcCSMNkFFSz
yhC6bnn6KbATApDZolAgHRUHCvIFjcb5rwMLu+ANGMKTsKAssLxoQVvGdWMRAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUGHZ5yZQF7mVKGkFQLcbx7MpERZ8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMDM0MmUz
NzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQABWhNMA0GCSqGSIb3DQEBCwUAA4IBAQBfPBDLSXyHviIMLWaqX3PmJwN70sLZ
7e6ASP44BzCnW7FwcHZlJkwMg2cyj7wu0EyCH+4E2ju2Kg/0XfYdrX0buHZMvwEk
doU0nfjSRRLGwNyD12MxslmT/CZ/MjdpOKZuA3bmHkSbODaFH1xXwlsqlVS3/wiz
ycGYcpx3xRYPyp8xmX/+40Hj+MFY+4bDpUwapNxTWvOmmTscBWwL01dd1WDLc8vt
RjMEAixGjnLnO5vm3Hcd0Z5qJOkbwgx6r71WBZYp3CC7qU/uwUJFXAlhbcRpudGc
VAXEb8E78v3zi7fxM00LTxyZnFbnUdaH4Ovsa++Jmk/1pbR/Cna+11ct
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:54 2025 by rpki-client