Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa
File: 352e3133332e3131392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: y3B5eIsENdVzq+LW6G00WW2RxhNlaSl5ebcs4Rnn2LI=
Subject key identifier: B4:B6:A8:D2:F2:2A:4F:73:D7:EF:63:15:9C:44:3A:99:45:05:0E:39
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4949AA2027AA2942665270EEBF38F3CFA2E1CFFE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 136787
IP address blocks: 5.133.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:49:aa:20:27:aa:29:42:66:52:70:ee:bf:38:f3:cf:a2:e1:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=B4B6A8D2F22A4F73D7EF63159C443A9945050E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:60:e1:81:c2:31:99:a1:c9:ac:9e:0f:b1:
79:a8:a3:73:8e:3c:c3:00:7a:55:65:1a:0c:65:28:
e7:41:82:c6:5c:d4:f0:65:7e:da:92:1b:90:02:9e:
2f:43:28:1d:33:a0:dd:8c:17:09:3f:ea:63:37:d4:
28:e5:93:f4:44:44:2e:a0:b0:25:f5:49:ac:bc:bd:
66:7e:77:f3:b5:52:4a:10:b1:19:74:38:ad:d9:7b:
39:17:74:0d:cc:46:74:ef:b3:9c:39:1e:c1:f8:da:
3e:bd:59:87:44:9b:0d:a9:8c:08:dd:09:cb:84:c5:
de:86:bd:f6:92:10:67:23:c9:6f:e0:e0:8c:66:8e:
a4:13:57:8e:b1:4f:71:a4:44:83:2c:a5:98:44:b7:
45:a5:18:d5:17:68:66:8f:f0:ae:97:ea:0f:be:a9:
3c:3c:e0:f8:c0:48:4d:58:04:ce:cb:8e:8f:6e:80:
8c:32:20:9c:79:c4:4c:49:21:b4:6a:e9:51:ee:59:
50:d2:8b:6f:5d:39:fa:cb:ba:8b:b6:ff:b9:3c:e9:
46:f7:5f:b0:8f:73:8a:5e:32:ec:01:64:90:83:d2:
95:c2:e2:48:f6:ca:9b:1a:53:6b:12:a6:49:c6:5b:
3b:cd:1e:d2:bd:c2:60:d9:0f:cb:dd:fc:9a:2b:cf:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:A8:D2:F2:2A:4F:73:D7:EF:63:15:9C:44:3A:99:45:05:0E:39
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:3f:b9:2d:bd:14:36:26:91:d0:08:b8:f0:dc:a1:32:e1:47:
c4:f7:30:38:cb:ea:11:97:94:21:9e:da:7a:0d:89:a3:ce:f2:
50:e3:75:39:41:10:d9:48:7d:ad:1c:96:a1:8b:b0:04:ea:11:
6e:8d:c0:d7:14:21:d9:27:d0:27:4c:da:85:a0:87:18:3d:22:
20:48:2f:c9:4d:54:f7:a2:8a:ae:e1:c7:64:8d:67:2a:89:da:
31:13:ba:93:cd:0e:8f:0a:b3:bd:c4:6b:6b:5c:85:d0:2f:ba:
60:46:8b:91:1c:7e:c5:09:af:8f:97:17:68:d6:63:00:61:1c:
cf:bb:9a:9e:49:d4:4e:69:d0:ad:8d:71:49:ce:14:0b:09:1a:
da:06:7b:e4:45:a8:89:6c:e3:5f:c7:a0:35:7c:87:f6:a8:2b:
b5:f2:7c:c9:4c:71:af:a1:53:98:e8:ce:45:15:44:91:f6:a4:
80:ba:3f:08:03:55:c5:cb:5c:2f:60:ba:6b:b4:82:ea:a9:47:
ab:2a:9b:35:f4:10:3f:12:19:75:2d:46:c4:68:a9:0d:60:d1:
7a:d8:62:ca:a6:9c:af:8e:0a:71:cc:42:f7:25:2e:a1:1c:97:
93:b8:26:6d:60:56:fc:b9:c1:18:97:b0:5c:00:1c:4f:03:ac:
4e:25:74:98
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUSUmqICeqKUJmUnDuvzjzz6Lhz/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTNaFw0yNTEyMjYxMTQ3MTNaMDMxMTAvBgNV
BAMTKEI0QjZBOEQyRjIyQTRGNzNEN0VGNjMxNTlDNDQzQTk5NDUwNTBFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7mDhgcIxmaHJrJ4PsXmoo3OO
PMMAelVlGgxlKOdBgsZc1PBlftqSG5ACni9DKB0zoN2MFwk/6mM31Cjlk/RERC6g
sCX1Say8vWZ+d/O1UkoQsRl0OK3ZezkXdA3MRnTvs5w5HsH42j69WYdEmw2pjAjd
CcuExd6GvfaSEGcjyW/g4IxmjqQTV46xT3GkRIMspZhEt0WlGNUXaGaP8K6X6g++
qTw84PjASE1YBM7Ljo9ugIwyIJx5xExJIbRq6VHuWVDSi29dOfrLuou2/7k86Ub3
X7CPc4peMuwBZJCD0pXC4kj2ypsaU2sSpknGWzvNHtK9wmDZD8vd/Jorz4unAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUtLao0vIqT3PX72MVnEQ6mUUFDjkwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMzMzMmUz
MTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAFhXcwDQYJKoZIhvcNAQELBQADggEBALI/uS29FDYmkdAIuPDcoTLhR8T3
MDjL6hGXlCGe2noNiaPO8lDjdTlBENlIfa0clqGLsATqEW6NwNcUIdkn0CdM2oWg
hxg9IiBIL8lNVPeiiq7hx2SNZyqJ2jETupPNDo8Ks73Ea2tchdAvumBGi5EcfsUJ
r4+XF2jWYwBhHM+7mp5J1E5p0K2NcUnOFAsJGtoGe+RFqIls41/HoDV8h/aoK7Xy
fMlMca+hU5jozkUVRJH2pIC6PwgDVcXLXC9gumu0guqpR6sqmzX0ED8SGXUtRsRo
qQ1g0XrYYsqmnK+OCnHMQvclLqEcl5O4Jm1gVvy5wRiXsFwAHE8DrE4ldJg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:22:22 2025 by rpki-client