Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa
File: 352e3235332e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: dj4XK/X2owI2ApypvBgc3NPfuyqluFwvKlbtHThR4NM=
Subject key identifier: 47:A7:60:06:7F:62:31:16:F1:35:18:7B:E9:F4:53:59:49:5D:93:0D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 38C07E823C68164DFFB23AEC0B445E0A0866BCEB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:07 +0000
ROA not before: Fri 27 Dec 2024 11:42:07 +0000
ROA not after: Fri 26 Dec 2025 11:47:07 +0000
asID: 136787
IP address blocks: 5.253.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c0:7e:82:3c:68:16:4d:ff:b2:3a:ec:0b:44:5e:0a:08:66:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:07 2024 GMT
Not After : Dec 26 11:47:07 2025 GMT
Subject: CN=47A760067F623116F135187BE9F45359495D930D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:7c:87:2e:87:9b:3c:6b:61:91:eb:e4:05:
ef:f4:4c:c7:a7:f3:79:e4:24:92:5b:23:2b:3f:e2:
0b:99:80:38:5e:8b:95:05:fe:2c:86:f6:b2:3b:31:
ac:31:e2:ce:cf:a8:7a:ca:64:10:67:a1:1e:64:bb:
bd:b6:4e:47:d3:b7:23:47:ba:57:ef:24:2b:75:8b:
13:5b:6d:f8:3e:dd:d6:0d:b6:0c:cc:0c:8b:ff:73:
55:43:13:39:02:34:b5:29:25:bd:f7:ef:f8:f7:c5:
56:2e:00:76:59:fa:11:60:ea:57:f7:f3:64:9c:b9:
ec:1d:0d:28:86:40:a9:c8:6b:77:54:c7:e9:6a:01:
a7:20:0b:51:4e:41:2e:aa:e6:c5:58:a5:8d:cb:a3:
7e:23:46:40:d0:db:47:45:25:5e:d9:4b:9e:4e:bf:
d5:12:c3:1a:77:d0:88:95:cf:45:0a:f9:90:3c:eb:
37:c0:b7:4e:d1:d2:66:72:8d:eb:af:d7:16:47:21:
a9:9d:93:4c:02:0e:27:e0:93:7c:36:64:f1:74:99:
64:b0:27:1b:1f:41:bf:24:11:72:7d:06:80:d4:8d:
5e:de:a2:67:25:5f:b1:93:9f:5b:b5:96:c1:cc:1b:
f0:e9:40:5c:5f:5b:c7:72:44:02:5f:fe:36:55:9f:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:60:06:7F:62:31:16:F1:35:18:7B:E9:F4:53:59:49:5D:93:0D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fd:7c:ce:ed:fc:13:68:91:6f:e3:8c:2a:f7:1c:68:a3:df:
5a:27:fe:59:4c:a5:42:b6:da:f0:a8:74:ec:01:0e:9f:69:c6:
8b:77:ca:e0:b9:f6:ec:7c:82:19:b7:bb:c6:a6:f5:64:88:cd:
52:0e:fa:f1:e7:a6:c3:ea:87:f3:cb:1a:4c:e1:75:14:92:4b:
56:16:7e:ff:1d:5f:70:97:0d:44:5a:1b:e0:61:82:fa:3f:b3:
30:a4:25:72:99:07:e2:d7:9a:45:43:b8:f6:03:40:95:a9:17:
bf:ea:10:5e:eb:c9:cb:f3:3d:9b:ec:6e:3b:49:73:f7:26:f2:
ca:bf:66:f0:27:e3:b1:22:9a:88:7f:61:f3:23:37:f7:e9:af:
99:81:86:f0:77:c7:4d:22:91:d3:94:0a:2d:10:16:40:f5:3b:
3f:28:14:f7:66:77:33:f9:e7:49:dc:b6:a3:d2:dc:0a:de:cb:
b3:9c:de:9c:08:3a:1c:b6:b0:ae:74:ec:4c:b1:64:b9:54:0c:
c8:a1:bb:33:97:c7:9b:3b:05:72:63:29:b3:5c:a6:86:33:a3:
7d:94:1a:72:f0:da:76:56:a2:38:62:20:d0:4f:2c:5c:89:8c:
63:25:05:76:dc:68:dd:ac:0a:53:50:64:70:54:b2:ad:80:f7:
6a:39:9d:b5
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUOMB+gjxoFk3/sjrsC0ReCghmvOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMDdaFw0yNTEyMjYxMTQ3MDdaMDMxMTAvBgNV
BAMTKDQ3QTc2MDA2N0Y2MjMxMTZGMTM1MTg3QkU5RjQ1MzU5NDk1RDkzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZnyHLoebPGthkevkBe/0TMen
83nkJJJbIys/4guZgDhei5UF/iyG9rI7Mawx4s7PqHrKZBBnoR5ku722TkfTtyNH
ulfvJCt1ixNbbfg+3dYNtgzMDIv/c1VDEzkCNLUpJb337/j3xVYuAHZZ+hFg6lf3
82ScuewdDSiGQKnIa3dUx+lqAacgC1FOQS6q5sVYpY3Lo34jRkDQ20dFJV7ZS55O
v9USwxp30IiVz0UK+ZA86zfAt07R0mZyjeuv1xZHIamdk0wCDifgk3w2ZPF0mWSw
JxsfQb8kEXJ9BoDUjV7eomclX7GTn1u1lsHMG/DpQFxfW8dyRAJf/jZVn4QjAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUR6dgBn9iMRbxNRh76fRTWUldkw0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMzMmUz
MjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAF/eowDQYJKoZIhvcNAQELBQADggEBAIT9fM7t/BNokW/jjCr3HGij31on
/llMpUK22vCodOwBDp9pxot3yuC59ux8ghm3u8am9WSIzVIO+vHnpsPqh/PLGkzh
dRSSS1YWfv8dX3CXDURaG+Bhgvo/szCkJXKZB+LXmkVDuPYDQJWpF7/qEF7rycvz
PZvsbjtJc/cm8sq/ZvAn47Eimoh/YfMjN/fpr5mBhvB3x00ikdOUCi0QFkD1Oz8o
FPdmdzP550nctqPS3Arey7Oc3pwIOhy2sK507EyxZLlUDMihuzOXx5s7BXJjKbNc
poYzo32UGnLw2nZWojhiINBPLFyJjGMlBXbcaN2sClNQZHBUsq2A92o5nbU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:50 2025 by rpki-client