Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
File: 352e3235322e3134332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Q1ofDP515DnTfsd0O8TCdi+e5dHISwuC35C4pjE4T4c=
Subject key identifier: 4C:1D:09:DD:18:2A:B0:49:F2:16:66:05:11:69:B0:C0:F2:9C:86:FB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 63D9C0FF9B79414D0531BD85B108F1C67C052831
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:25 +0000
ROA not before: Fri 20 Dec 2024 15:18:25 +0000
ROA not after: Fri 19 Dec 2025 15:23:25 +0000
asID: 136787
IP address blocks: 5.252.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d9:c0:ff:9b:79:41:4d:05:31:bd:85:b1:08:f1:c6:7c:05:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:25 2024 GMT
Not After : Dec 19 15:23:25 2025 GMT
Subject: CN=4C1D09DD182AB049F21666051169B0C0F29C86FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:18:d4:bd:65:fb:a3:a4:55:42:54:fd:32:
8e:8a:92:eb:66:cf:7d:74:25:6c:ca:39:1e:4f:1c:
bf:1f:24:d4:a0:3d:74:fd:cd:d8:02:42:1e:76:0b:
3b:e6:df:26:1d:59:d9:2b:fe:ee:6f:a1:b6:38:e7:
1a:3d:47:55:63:c4:ba:a4:6a:b0:f8:5c:b5:2d:19:
5e:54:e1:b2:ac:c8:f1:57:dd:5a:8e:67:16:10:ec:
26:2d:c9:0a:eb:6a:fb:bf:c8:82:50:98:57:91:01:
ef:a5:41:93:d3:bc:63:98:fc:c1:fc:0d:a8:25:5e:
61:7d:b1:7e:df:c1:21:c7:99:57:cd:42:8f:2b:db:
6b:21:27:8e:aa:44:04:65:81:31:a2:26:fa:c5:ad:
80:a4:01:1b:1b:eb:77:42:95:76:bd:f2:2a:33:a0:
66:3d:3d:cb:33:e4:65:0e:dd:9a:df:fb:78:cc:06:
57:85:c3:71:22:6b:ee:f0:1c:0a:2d:b2:c6:ce:40:
5a:27:09:a5:4c:52:98:7a:04:f2:b6:a6:4e:25:f6:
81:75:88:a8:ec:8a:40:7d:a0:88:7c:95:78:3f:16:
df:f4:90:9a:cd:e6:2e:7a:f9:49:31:47:8f:12:0e:
c5:77:ec:c2:45:97:34:d8:62:f4:87:ba:ea:9a:89:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:09:DD:18:2A:B0:49:F2:16:66:05:11:69:B0:C0:F2:9C:86:FB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.143.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8d:6a:88:8c:0c:c8:e7:e3:3a:c9:a8:a4:1d:c4:f7:f7:3c:
32:4f:f4:b1:75:da:24:93:a8:0f:48:d7:31:d1:70:d6:6a:24:
ef:2d:81:b7:49:78:88:8d:79:b9:5e:e6:5b:8f:7d:63:93:61:
7e:92:a8:3b:32:2f:c0:d7:70:b0:cc:12:7b:ae:cd:84:0c:5a:
5b:4b:27:be:1c:36:85:f2:59:f2:83:74:64:3f:43:bd:81:4b:
3e:50:ab:2a:b9:a5:f3:98:14:2a:96:96:12:60:7a:dd:0e:24:
42:37:7f:ea:ac:8a:45:51:6b:ea:5c:bf:b3:9c:00:fa:30:28:
e9:99:ca:1d:09:6a:bf:7a:2e:ea:dc:60:22:26:85:52:9a:8b:
3c:e0:e3:e2:0a:90:e1:64:e8:44:36:6f:de:16:fb:4b:e7:39:
55:e9:6c:60:4e:78:cd:45:ee:4c:41:66:76:3a:67:55:28:b4:
35:e8:a9:03:da:ae:6b:16:4c:3b:41:2c:f4:63:56:d1:c8:b4:
33:56:0b:98:e3:64:06:31:bb:86:4f:03:93:e9:41:8e:ba:93:
11:13:19:32:2f:39:67:74:8f:30:df:53:1e:f1:0b:b7:eb:be:
dd:4e:f7:b8:1b:21:c2:76:40:ae:2f:cf:47:00:84:d5:e2:cc:
87:ac:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:35:32 2025 by rpki-client