Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
File: 352e3130342e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: UnVTpe1FFZptHRqMMywY+iTE/L9VzufVZxrmvlM10Ps=
Subject key identifier: 2A:1B:07:5D:84:58:8D:B0:F6:A7:56:60:89:C5:F1:87:8F:10:FC:68
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 588262C026CD869B3A30B3CCA2A25E78B5677CD1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 136787
IP address blocks: 5.104.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:82:62:c0:26:cd:86:9b:3a:30:b3:cc:a2:a2:5e:78:b5:67:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=2A1B075D84588DB0F6A7566089C5F1878F10FC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:1d:6e:12:67:c0:01:a9:23:b2:e6:a6:b2:
b8:13:1b:1f:00:b9:78:2b:48:82:b8:14:c2:d3:eb:
42:ee:61:0f:5d:64:da:1b:e9:8a:ab:f0:5d:95:a1:
dd:58:49:3e:a9:a1:0b:91:b1:d2:5f:d3:70:e6:9c:
ab:6a:3c:7f:d0:25:9e:9b:a0:f5:df:f7:ab:0d:9a:
7c:86:f5:d6:01:b7:f7:dc:3c:2e:a5:ac:de:22:51:
7f:0e:04:2c:f6:0a:8f:fd:04:80:ae:50:e7:bb:f9:
c6:a0:47:e1:53:bf:a9:df:5e:1c:26:3c:79:f0:6d:
9d:63:01:15:93:8b:45:35:d7:20:99:fd:fe:b0:08:
14:24:89:99:96:ba:88:60:a2:5d:6f:ff:a2:c6:1f:
f5:d9:a3:40:50:d7:04:41:41:1a:4f:d3:0a:61:4b:
a8:da:62:2e:00:f7:db:78:98:d7:36:68:00:4c:1c:
1c:6b:68:b7:e0:cb:5d:15:44:59:e6:a3:5c:42:f9:
c2:22:d8:01:fa:f2:55:55:56:31:2c:ba:8d:9c:5a:
9b:eb:d1:93:ea:c3:15:ee:1b:4e:24:ae:c1:64:80:
30:85:12:09:9e:82:90:a6:d3:3d:00:f8:cd:42:cf:
d5:6e:1a:fa:4e:eb:82:17:ae:a5:c5:ef:ec:b0:af:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1B:07:5D:84:58:8D:B0:F6:A7:56:60:89:C5:F1:87:8F:10:FC:68
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:df:9d:b2:49:e6:dd:09:d4:3a:16:ec:b7:dd:b6:86:4f:93:
83:6f:15:66:c3:31:28:a1:d1:51:45:f7:df:91:a1:22:ee:f1:
2d:b9:bd:95:15:e9:00:18:13:60:cb:53:2b:18:35:8a:f6:d1:
7e:9d:09:9a:9a:cb:8e:0a:95:04:e5:9f:b6:fd:29:d7:af:87:
07:42:20:cd:01:43:69:96:20:9c:69:b6:24:ea:7f:d7:ea:17:
ff:53:88:73:4b:88:af:f5:a1:a1:ef:f1:8f:80:b9:97:81:e7:
2e:b9:45:eb:8b:9e:37:fe:9a:aa:aa:3d:9c:75:5d:39:e4:e1:
85:14:5b:38:76:30:ba:73:ae:e5:db:c9:f6:33:9a:f1:b5:4c:
40:09:ec:ca:61:e3:e2:e9:16:00:d8:9b:74:e4:95:48:2e:29:
53:c5:4d:8f:c7:04:24:eb:71:98:52:7c:9b:54:30:ce:22:ec:
28:c1:57:5f:5c:7a:85:72:4e:c2:ae:e4:bb:87:3c:f3:2f:67:
8e:09:4a:c0:ec:f7:6b:a0:73:c4:ab:ae:0c:c1:17:e9:af:2b:
aa:14:4d:ad:24:76:f9:71:ff:e2:2f:f1:99:b9:fd:a0:6e:d6:
9e:43:05:bf:f7:36:25:d3:81:a2:3f:e7:10:65:02:b8:80:12:
00:da:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:27 2025 by rpki-client