Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203333333837.roa
File: 352e3138322e31392e302f32342d3234203d3e203333333837.roa (raw, json)
Hash identifier: bm0tRoGYBoA1owxad/iDw9QX+Esslf23NIF5o4Z9WuQ=
Subject key identifier: 47:4E:AA:C4:70:0A:2C:D4:05:43:13:71:55:96:50:3C:EE:28:60:A8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4F97E693D77CFD2B19113422C3992FA94AC7469F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203333333837.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 33387
IP address blocks: 5.182.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:97:e6:93:d7:7c:fd:2b:19:11:34:22:c3:99:2f:a9:4a:c7:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=474EAAC4700A2CD4054313715596503CEE2860A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:bd:8c:c3:b8:a1:ed:9e:3b:90:02:2f:e8:
fd:b0:c3:50:d6:62:6d:1f:2d:64:75:6b:5b:d6:df:
93:9c:ab:93:8b:ef:ca:bb:76:68:61:9d:cd:a6:05:
ea:ca:e9:ac:3e:6a:89:0f:3a:35:82:ce:bd:ac:e3:
cf:5e:51:d9:92:ad:89:62:f2:eb:c0:f1:66:b5:c2:
1a:93:8e:b7:0d:78:5d:b2:82:a5:55:65:34:15:e5:
be:cd:f9:9c:44:aa:f7:e2:e2:f6:08:69:87:0f:71:
33:fb:fe:2a:dd:1a:a6:de:a0:c8:3d:ec:9f:d3:a3:
1f:e7:c4:76:0d:84:69:c2:c4:3c:7d:88:05:39:50:
af:00:c6:83:67:64:54:c0:c0:d1:82:67:ee:e3:de:
cc:a7:e5:ac:57:36:60:45:86:7f:99:f3:ec:d9:14:
de:c8:fb:e7:f2:48:ad:5d:9c:b6:b3:73:7e:97:1d:
e8:d6:54:03:ff:d1:e6:a8:37:e7:65:3e:7a:01:96:
ee:44:f9:9c:44:41:8e:f5:74:fc:08:6c:3f:27:de:
24:97:78:27:9b:25:55:06:ce:97:21:6a:f0:52:1d:
4f:cb:6e:7e:a3:33:51:34:cf:53:45:08:a5:92:15:
2b:1c:86:d1:4b:2a:67:c1:79:71:5c:6a:49:39:07:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:AA:C4:70:0A:2C:D4:05:43:13:71:55:96:50:3C:EE:28:60:A8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203333333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.19.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3c:b9:31:d4:23:da:8f:aa:e5:3a:fa:b0:87:73:fb:72:7d:
23:de:b3:f2:68:1f:08:de:48:1a:3a:43:c7:84:2e:c0:82:e3:
7d:2f:c2:64:57:dd:3e:93:d7:ef:33:80:ff:3f:9c:57:9d:24:
fa:0c:e5:03:62:50:0c:a8:e8:bb:e3:29:0f:e0:82:e7:5a:79:
17:d5:da:05:ef:71:f1:6d:0c:38:7f:f2:3b:b2:85:e7:6c:54:
fc:02:52:2d:aa:48:3f:fe:b2:8e:79:19:80:88:42:54:be:bb:
8b:59:2c:4a:81:c7:88:55:e8:c6:ba:d8:e6:88:42:53:0d:25:
3c:17:b4:9f:8a:2d:ff:aa:a7:8a:55:c6:87:2b:4a:66:36:f3:
9a:51:4b:63:72:1d:b7:3d:f4:f3:68:e7:5d:fb:28:fa:67:06:
77:38:8a:9d:b8:f0:b1:5a:19:18:fe:e6:d0:82:13:57:27:99:
07:85:e7:5b:b8:f2:86:0f:aa:67:b6:7a:c9:a3:8d:e5:5c:c8:
d8:b7:a6:f8:9d:d0:30:ec:9b:b0:54:e8:80:c1:e7:2b:b4:71:
af:fb:e3:10:de:66:9f:eb:e8:1c:1c:f1:c7:8c:5f:51:95:7e:
d4:34:42:e0:61:c3:06:9e:0a:a0:b3:8d:75:2f:32:9c:ce:69:
fa:c2:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:14 2025 by rpki-client