Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
File: 352e3130342e38302e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: JGkvucifhXus6mcxh20OIsgP2rHDtcSLDtX7N9ROauk=
Subject key identifier: F9:C5:F1:EC:C1:62:83:C3:DB:B8:D7:60:1F:BE:70:42:E3:1D:C4:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2504F4BD788AAD2A291696CD227C9731CEBB42D7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 31 Jan 2025 09:45:33 +0000
ROA not before: Fri 31 Jan 2025 09:40:33 +0000
ROA not after: Fri 30 Jan 2026 09:45:33 +0000
asID: 141995
IP address blocks: 5.104.80.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:04:f4:bd:78:8a:ad:2a:29:16:96:cd:22:7c:97:31:ce:bb:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 31 09:40:33 2025 GMT
Not After : Jan 30 09:45:33 2026 GMT
Subject: CN=F9C5F1ECC16283C3DBB8D7601FBE7042E31DC4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:8c:b7:8d:5c:eb:5d:9c:45:91:e2:e7:29:
13:ea:03:50:31:cf:fb:53:bd:59:b9:50:e5:6e:13:
02:1b:c0:7a:8d:82:3c:72:1b:e0:ee:d7:86:af:33:
bf:5e:22:3b:33:b5:26:1d:85:97:ff:da:05:24:50:
bd:69:e1:f8:fd:6a:ec:2d:a4:aa:b0:f7:9f:57:5e:
e4:a7:73:69:54:4a:9a:b2:dc:1c:fe:71:50:9a:ce:
eb:e9:71:86:21:4b:5a:b5:bf:1d:bc:7d:9d:88:9d:
07:fd:10:4e:da:96:46:79:8f:e0:fd:7a:ee:79:6f:
fc:6b:9b:1a:66:ca:59:3f:50:4d:61:d8:fd:37:02:
d1:fa:dd:ef:74:13:12:f6:45:7f:ca:4f:2f:f9:d1:
8b:07:ff:3e:be:5a:6d:6f:b8:36:34:98:b2:0b:c4:
bc:2e:da:7e:33:72:ad:74:58:fc:f0:d9:df:f1:46:
18:e1:4f:f4:db:2f:35:2d:bb:0f:98:5b:c2:54:b5:
c9:57:03:18:8a:12:14:4e:ac:dd:0e:dd:be:cc:db:
24:d4:68:65:be:ac:eb:90:7f:ee:50:ce:db:3e:44:
81:82:f3:e9:42:5c:c5:a3:c7:7a:9c:e7:c9:11:22:
0d:16:d0:40:84:86:3e:ee:07:59:bb:06:39:fc:48:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:F1:EC:C1:62:83:C3:DB:B8:D7:60:1F:BE:70:42:E3:1D:C4:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.80.0/22
Signature Algorithm: sha256WithRSAEncryption
50:00:d7:1f:92:b7:51:4f:e1:3b:e0:88:f0:fd:79:d3:51:75:
ac:cc:91:7f:e9:65:7c:af:95:b2:a3:61:22:74:22:c9:00:2f:
d7:3c:07:31:97:97:34:e5:3d:b2:4d:61:62:0d:58:c2:1d:a1:
9d:da:e6:42:74:2d:c4:7f:9c:49:2e:b5:68:6c:31:fb:29:4a:
11:72:79:2f:77:21:fe:c9:56:33:e5:4f:f9:a3:00:ce:09:e1:
8c:de:03:03:82:a9:33:36:b3:28:85:03:d9:4b:48:de:86:2f:
8c:da:36:85:96:89:88:c0:39:9c:b5:18:1c:4e:9a:02:06:64:
b0:01:a7:ca:7b:5b:16:b9:53:82:03:c5:32:8e:cd:8d:f6:f6:
04:15:05:d2:fa:cc:f9:b7:9f:49:a1:d2:eb:66:ec:24:b6:84:
3c:90:63:30:31:af:69:6a:0e:f1:0d:01:4a:f5:76:51:c3:9d:
e7:ad:25:85:43:09:cd:af:0b:af:69:33:ca:f8:4d:8e:fc:57:
c2:1c:68:0a:77:b2:90:3e:9c:1c:50:44:9d:a2:a6:99:e3:2a:
01:da:d7:34:59:be:33:e1:1e:23:07:2f:b8:59:9a:dc:a0:aa:
50:f5:7a:b2:fc:1d:2a:45:c3:23:d1:85:c9:2e:c2:fb:ef:78:
f4:59:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:30:49 2025 by rpki-client