Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: u0vdNz2WuTTDKuFVzEfhLbFJhSY/E+uotzLkJnRYMK0=
Subject key identifier: 79:51:97:A7:43:F8:EA:8D:27:69:83:C3:9C:B7:71:85:E2:15:61:15
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 40F280DDBC2B27CBE16D6BFFE0A12F476FF9A091
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 136787
IP address blocks: 5.183.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f2:80:dd:bc:2b:27:cb:e1:6d:6b:ff:e0:a1:2f:47:6f:f9:a0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=795197A743F8EA8D276983C39CB77185E2156115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:0b:e6:08:44:12:5e:89:bd:0e:c5:41:30:
f1:31:66:cd:3b:8f:e1:94:51:97:bb:69:b8:a7:fb:
74:73:49:64:8e:9e:d9:5f:b9:2c:57:74:be:ed:d5:
01:59:18:21:50:60:47:c0:d9:14:e1:84:3d:50:0a:
f9:b2:dc:f3:dc:0e:41:e3:39:c9:f5:ae:05:40:51:
ba:6f:a2:cc:81:f3:94:36:dc:23:06:07:36:67:d4:
9f:fb:74:9c:42:c2:ba:91:76:07:8a:89:43:af:ee:
d5:6e:42:24:64:b0:25:c4:1c:c2:ee:d6:a0:4b:7d:
6c:65:1e:28:af:17:af:fc:12:4f:bd:23:a6:9e:49:
84:58:9d:0a:ea:2b:38:c8:11:5d:f9:e8:a6:44:aa:
e0:a9:88:3c:bc:d9:e2:ef:4d:60:3d:27:e2:37:27:
b0:a1:b1:d0:7d:88:0d:47:a8:b0:3d:a2:51:40:6b:
6a:f9:cd:ea:ae:92:b4:4e:b0:d5:28:4a:7f:03:a2:
7f:e3:aa:40:39:c1:ae:04:d1:bd:8b:93:4d:0d:f4:
72:6c:0b:48:d1:e0:b1:38:ff:a9:20:1c:3f:b9:a1:
1e:4e:c4:3e:ba:57:5c:88:72:1d:02:42:a2:c8:67:
9f:6d:56:ca:c8:42:72:fa:3d:45:17:cf:04:00:57:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:97:A7:43:F8:EA:8D:27:69:83:C3:9C:B7:71:85:E2:15:61:15
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.35.0/24
Signature Algorithm: sha256WithRSAEncryption
da:02:f6:84:e0:22:29:e2:60:f7:4d:2a:2f:6a:9e:88:4b:ba:
27:69:b9:11:c0:02:42:10:ec:3e:82:10:23:83:7e:e4:90:43:
9c:cf:8a:31:2d:50:8e:ba:84:7c:e9:81:2a:1e:53:94:cb:83:
96:61:c9:74:24:d4:83:98:15:6a:29:1b:c7:00:1d:15:c6:37:
77:79:2f:d5:0d:c2:5e:5c:a2:ee:ce:d0:af:66:c1:a3:96:0b:
c7:c4:ea:32:4a:31:6a:04:25:10:b8:45:3e:5b:38:0c:3b:79:
d8:96:aa:f4:29:9b:6e:b2:99:e8:6e:c8:ca:d5:cb:61:4c:72:
64:08:ca:67:c9:17:e2:b6:17:17:c0:86:dd:f0:0d:2a:15:21:
b5:0d:45:f8:6a:a3:99:bd:56:27:f1:83:59:ef:48:83:97:7b:
71:ea:5a:1b:66:1d:73:e3:86:f4:d0:9a:c8:66:76:e6:4c:4b:
27:c8:4e:e9:45:14:67:fe:8c:77:ae:db:1f:96:73:78:33:11:
2c:41:8e:f3:ed:d4:1d:85:ab:9f:b9:f9:3e:b1:0d:e1:96:ac:
8d:72:14:5f:67:a7:92:1b:46:58:9f:8a:1b:b8:72:00:37:93:
0e:a3:8a:94:de:17:80:ac:19:75:19:b3:e1:d3:18:b6:6e:ab:
96:c0:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:10 2025 by rpki-client