Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa
File: 352e3138312e36342e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: +t+A99NkNgC30SfMjOaCc4bNiDTEKpvThNLmQwwvdG0=
Subject key identifier: 0A:9B:DC:C2:6B:48:58:38:32:12:4C:B5:5B:7B:14:03:1F:73:14:42
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 01A90320D4B6AE45EF649154CDB9EC9399ECA3F9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 201341
IP address blocks: 5.181.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a9:03:20:d4:b6:ae:45:ef:64:91:54:cd:b9:ec:93:99:ec:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=0A9BDCC26B48583832124CB55B7B14031F731442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:fd:35:85:49:a6:47:01:27:ca:05:8d:3c:
3b:b7:d3:e1:4a:43:a5:eb:41:92:80:27:ed:59:c9:
e2:1a:34:2e:7d:5a:08:a8:ff:77:4a:45:af:df:18:
35:64:82:1f:2d:bd:e8:4f:69:e7:00:8d:f1:f7:0b:
e2:fe:5e:0a:fb:f9:93:0d:d4:7a:b1:97:ad:82:d6:
0f:56:d3:a2:eb:ae:af:85:1c:54:3a:0c:70:e5:ea:
2b:83:b9:cc:b5:ab:e9:74:ee:6f:e0:57:8d:da:3b:
11:93:e2:60:e6:6d:7b:aa:15:ad:af:8e:e4:0e:ee:
93:a6:ba:12:f9:77:5b:62:eb:50:54:22:4d:9b:ae:
db:f7:ab:97:09:b2:7a:49:85:c1:1b:c5:ce:bc:26:
3b:8c:81:f1:23:94:4a:cd:1d:35:98:b9:fa:00:a9:
6a:e7:e9:27:14:d8:93:fb:b1:0d:02:9f:2e:5f:13:
a7:43:c4:95:ed:42:24:a5:eb:eb:7f:35:6f:6c:80:
19:31:d4:75:aa:5b:0e:c7:84:6f:62:76:69:d5:2b:
04:e3:c8:86:8a:de:77:c5:0a:8c:04:fd:4f:c3:6c:
bc:4a:bb:34:ac:b7:78:fa:97:b4:f1:54:f7:a3:3a:
dd:54:00:a6:92:18:66:e5:67:ed:93:56:a2:e3:e7:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:DC:C2:6B:48:58:38:32:12:4C:B5:5B:7B:14:03:1F:73:14:42
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.64.0/22
Signature Algorithm: sha256WithRSAEncryption
80:4d:77:68:43:bf:47:f4:0f:e5:16:f9:4e:8f:f4:c4:7b:d5:
b4:68:96:5e:7d:96:e3:69:c0:73:f5:a4:0d:49:10:60:ee:71:
bc:a2:6c:87:a7:9a:2c:17:f3:10:f0:f4:2c:32:23:1f:36:e8:
1d:ae:d8:7f:55:52:f1:f6:3c:cf:22:bf:96:4d:be:eb:84:8c:
e3:af:35:a4:1d:67:95:0d:17:f6:b1:cc:74:5b:4c:97:d8:f4:
d3:4b:67:8d:87:bc:35:20:85:d0:03:6a:b8:c6:3f:c3:0f:d9:
15:66:b7:5e:3a:5d:5b:12:0c:f6:eb:84:82:84:49:11:0a:45:
a1:55:cd:4f:be:17:0b:6f:ba:7b:11:f1:b3:6e:c7:5b:37:03:
09:80:51:c4:15:2b:f4:23:b4:d7:54:83:d4:e9:bc:a2:33:08:
3f:f1:58:e9:43:a4:75:9f:25:3c:56:b8:18:26:1c:7d:4a:60:
29:fe:c4:dc:d4:93:14:a6:cb:24:2a:78:8f:cc:3d:76:4f:1f:
a8:2e:3c:c8:7f:1f:60:be:1b:31:59:b1:db:91:a8:d9:c6:82:
12:eb:57:41:dc:12:7c:5b:20:a7:d1:fa:c5:db:e5:c7:dc:0e:
5a:60:a1:f5:22:81:b0:8b:b0:5a:30:7b:2f:d5:9c:be:b9:f6:
90:f3:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:48 2025 by rpki-client