Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa
File: 352e3138322e31382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: PPJww0hRcOkjayLK4g7qKJTrhuHk+hPExoFUEAsJ0iE=
Subject key identifier: B6:98:E1:54:92:64:9D:2C:21:9B:BC:63:31:A9:79:C1:56:7C:AB:DC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 95809EAF20DF982F95FE9F4854156CA17E8779
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 47583
IP address blocks: 5.182.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
95:80:9e:af:20:df:98:2f:95:fe:9f:48:54:15:6c:a1:7e:87:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=B698E15492649D2C219BBC6331A979C1567CABDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:7f:a3:8c:6f:5f:93:35:3e:8d:b7:94:b3:
b0:64:b7:28:d1:22:df:3b:42:27:0a:37:fd:70:01:
a6:91:92:b8:b4:35:3d:1e:2e:43:e4:da:84:36:fa:
c6:54:f6:83:c3:43:a3:b4:26:3a:15:ea:84:4a:0b:
a8:57:18:f6:9a:03:a9:a8:0e:c9:cb:6e:8b:cd:6e:
19:8b:6d:b3:b1:69:af:5b:ef:bb:ff:7f:3d:5d:50:
18:96:67:36:c2:b7:f0:fc:6d:48:65:1c:9a:22:45:
ad:d1:72:26:7c:d3:3c:d6:48:b2:48:c0:af:fb:0c:
b9:e8:29:6e:13:a2:58:41:a2:a2:0f:9c:a7:96:bd:
2a:c2:77:04:c9:19:5a:7d:d5:3d:58:b0:3c:6a:08:
08:ba:94:e0:75:d1:64:9b:8a:1b:f5:90:0c:c5:6d:
4d:2a:62:f5:08:b1:f7:eb:99:5e:15:1b:b0:bf:f6:
24:e2:3b:c6:16:ff:84:99:0b:9b:df:15:f4:3e:5b:
a7:d4:19:6c:9e:2f:83:63:6d:c5:37:e4:8a:32:cb:
10:16:d0:3a:d1:63:6d:38:5c:8b:d9:f0:b6:1c:d4:
40:a2:5c:a0:4c:67:a2:75:89:f7:3f:d3:5f:ef:b4:
f5:65:6b:9b:82:94:48:b9:fa:29:a6:ef:70:f9:8e:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:E1:54:92:64:9D:2C:21:9B:BC:63:31:A9:79:C1:56:7C:AB:DC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.18.0/24
Signature Algorithm: sha256WithRSAEncryption
78:87:88:42:99:5d:4f:ab:a1:30:a0:7e:66:ad:12:35:b9:ac:
59:be:4b:90:fc:18:a9:1c:4a:55:04:91:f5:20:a9:fa:34:f2:
a0:15:66:87:d7:8c:c6:99:3d:be:de:26:a0:56:02:e1:2e:1f:
8b:87:88:9a:2d:11:0b:fc:ac:e6:c5:c7:20:4c:76:c6:8e:01:
f6:01:f4:9d:e1:bc:5e:88:bf:06:43:2f:a8:7a:2b:01:73:5f:
a6:fe:c5:bd:f0:39:d0:f6:58:e3:2c:12:16:71:e6:9b:59:a2:
d7:aa:dd:4b:33:0d:fa:0a:57:36:b2:ce:a1:0e:33:53:f9:a0:
6e:72:a6:0a:b1:ef:30:07:08:73:62:4d:cc:a0:7e:89:c2:b8:
f3:8d:17:90:b5:6a:83:e2:5e:34:32:b1:2c:2e:5c:f4:06:b8:
83:8a:8e:3a:4a:e6:e4:a6:ef:1f:ae:3a:dc:9d:13:57:50:78:
8f:4d:4d:0d:b1:66:5c:30:a7:3e:eb:95:60:84:9c:a0:c0:1f:
b7:2d:b1:ac:18:1c:8a:b2:da:8b:0b:54:c3:e0:d1:6f:3d:ad:
39:d8:26:8c:c7:4e:99:ce:c9:63:9d:56:37:a3:d0:01:88:75:
c2:d1:ed:ab:1e:27:6f:a2:e6:92:01:b9:91:5a:e2:96:ad:95:
94:d3:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:09 2025 by rpki-client