Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa
File: 352e3235332e3233332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: uC1QzQYMMlsArDm000BYXscChPuRcrI3HxwwTOGGNAI=
Subject key identifier: A1:DB:DF:95:4E:BB:8A:00:59:A7:43:22:7B:6D:ED:27:E0:B5:9C:97
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1E57CD4F94FC1639538F51148D75ACB96F158692
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 136787
IP address blocks: 5.253.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:57:cd:4f:94:fc:16:39:53:8f:51:14:8d:75:ac:b9:6f:15:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=A1DBDF954EBB8A0059A743227B6DED27E0B59C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:35:b7:88:6b:a6:b4:3e:0e:84:ef:21:48:
60:20:ca:44:06:8c:8f:84:77:4b:72:23:dc:e0:a9:
a9:4e:9c:42:7c:79:20:4f:d2:ee:d7:04:ec:02:bb:
a5:d5:11:a7:cf:04:33:30:6f:d5:d8:34:50:93:4d:
43:46:5f:5e:07:29:a2:2a:2d:a1:b3:e2:19:c3:d7:
17:60:e4:34:1e:c7:55:e1:a6:70:7a:e2:4e:50:a6:
38:7e:9c:d1:55:e0:3f:14:ac:4c:24:96:bd:6d:18:
67:43:d5:ee:21:5f:19:f0:a2:9e:4d:37:ca:ce:f3:
85:9f:8f:82:24:41:d0:e3:66:ce:cc:41:9f:cb:1c:
2d:46:84:49:b3:58:4d:cc:1d:24:0d:bf:8f:11:13:
63:ae:4c:7a:98:1e:dc:8d:91:73:71:91:91:07:01:
13:dd:c8:16:af:d6:9d:cb:56:50:28:b2:68:0a:22:
78:1b:f2:63:e7:32:fb:8e:9b:3c:31:a3:a1:42:b3:
79:bc:6f:59:e6:49:d7:0d:25:6b:b9:5f:95:4b:e8:
f6:ea:b6:b5:88:b1:e0:e7:17:a2:b5:8f:73:06:0a:
ea:5a:00:81:e6:4e:e7:4f:25:7f:ad:5f:0f:db:15:
05:32:59:4a:2d:a1:76:00:fe:0d:ea:ad:cc:30:88:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:DF:95:4E:BB:8A:00:59:A7:43:22:7B:6D:ED:27:E0:B5:9C:97
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f4:7a:2f:1c:7e:3f:2a:76:aa:df:8f:fd:a7:f0:b0:9f:21:
aa:cb:6c:c0:02:70:8c:e6:ed:4f:91:cf:1c:64:da:d1:53:54:
72:f1:69:e6:89:bf:ee:91:88:f7:04:0f:4a:e8:c8:03:4f:59:
0f:44:d6:59:71:a9:2b:45:c1:90:07:2d:81:cd:3d:33:49:c7:
b7:52:4d:bc:21:c5:fc:46:18:e4:3b:d0:d3:79:0a:09:60:7f:
b2:6d:3e:5c:7b:5e:81:db:06:31:bd:ae:b6:23:dd:94:c0:50:
de:67:fb:04:dc:fa:ba:7b:60:d7:65:83:e4:7f:80:5b:04:c3:
36:ee:36:7d:9d:d6:b9:f5:2f:fe:bc:ed:c7:d3:50:e4:e6:3d:
26:81:31:bd:86:e1:7c:51:b8:f4:fd:7a:1f:8c:cb:a3:4b:19:
63:31:10:53:6b:91:57:3b:a3:ab:b0:af:66:cb:cf:2a:9e:ba:
72:bd:bb:b6:51:ec:38:79:9e:31:80:eb:f5:b8:a8:73:9d:5e:
9f:5f:fb:fb:92:30:88:1f:60:fe:46:31:b5:1f:98:da:d7:76:
00:0d:40:f2:d6:25:be:78:1c:e8:95:27:a8:6e:85:11:7a:4f:
d2:bd:b7:d2:e2:44:bc:d8:e4:bd:99:28:90:a2:a3:da:d8:79:
05:a0:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:23:40 2025 by rpki-client