Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
File: 352e3130342e38342e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: GeqiBBxmjt/5VMsyoST4OmFvUQFb5Rcvm5vEYBGogaw=
Subject key identifier: A3:CA:93:4D:DF:21:51:4A:34:BB:F8:AD:33:4A:FD:D3:46:70:3F:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1ED776D8AF50C9EDB2AE671B5D4EF53FBEE493F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 31 Jan 2025 09:45:33 +0000
ROA not before: Fri 31 Jan 2025 09:40:33 +0000
ROA not after: Fri 30 Jan 2026 09:45:33 +0000
asID: 141995
IP address blocks: 5.104.84.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d7:76:d8:af:50:c9:ed:b2:ae:67:1b:5d:4e:f5:3f:be:e4:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 31 09:40:33 2025 GMT
Not After : Jan 30 09:45:33 2026 GMT
Subject: CN=A3CA934DDF21514A34BBF8AD334AFDD346703FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:7a:03:ec:a1:8e:8b:ba:eb:1b:27:be:1e:
78:10:fd:62:ef:2f:cb:cb:74:b8:c1:92:b8:e6:3b:
6b:83:31:a2:95:2e:3f:40:cb:a2:40:f7:26:e8:b2:
ee:08:49:cd:47:90:1c:9f:ae:b9:86:97:d3:a2:da:
8b:3b:c1:f2:e8:f9:f6:0a:78:7d:9b:18:35:26:f1:
d7:50:aa:8f:33:72:4e:9d:22:49:b3:e3:3c:98:a4:
18:e5:c6:01:2f:c9:2c:a5:aa:55:b8:d3:0a:f3:99:
d1:45:4c:75:2f:18:6a:0d:51:98:bd:f3:68:95:6a:
57:c8:8f:71:13:87:75:7e:fa:dc:06:1c:73:25:64:
57:3f:d0:45:14:cc:e6:fd:e8:c4:de:01:ce:d3:46:
44:02:b7:ea:30:75:6a:50:ee:0b:17:db:fe:8f:c3:
be:53:c3:85:d6:0e:ac:ce:52:c4:9a:8b:83:b9:3d:
df:4b:39:d1:c9:60:da:0d:68:39:34:6f:08:07:3e:
69:c4:f5:ab:0f:d8:72:19:29:8b:3b:99:fc:46:d6:
ff:d4:30:8e:a4:c1:5e:61:6a:e5:72:09:ce:25:91:
79:4a:a4:d6:c5:f8:f2:29:5b:92:c3:c5:61:01:81:
d8:0f:b8:e0:de:df:8c:a6:13:e0:dc:a0:9c:27:7e:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:93:4D:DF:21:51:4A:34:BB:F8:AD:33:4A:FD:D3:46:70:3F:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.84.0/22
Signature Algorithm: sha256WithRSAEncryption
53:77:97:12:03:96:c9:e7:e2:f1:a4:b5:e6:9a:38:c7:e2:a7:
58:e5:c5:ca:cf:32:70:16:81:a4:15:a0:60:c8:41:fe:35:5d:
67:61:65:7c:20:04:dd:95:23:6b:17:b2:6a:c7:8e:65:aa:49:
a4:ce:d9:5f:d7:c7:dd:7d:20:b8:c9:c0:53:fb:b3:4d:5b:cb:
9e:4c:36:b6:58:dc:d8:e2:51:ff:c8:d4:9a:92:fb:02:fd:ad:
9b:8c:fd:50:7e:ad:05:2c:25:77:30:d4:29:8d:bf:00:85:67:
76:00:6d:48:f7:1b:a0:18:9c:37:76:37:ca:31:e6:82:88:48:
1a:d1:a3:53:b4:2d:6c:d6:ba:f2:4d:c4:fc:56:bc:e6:82:27:
69:d2:eb:c1:35:cd:1e:e9:24:6d:82:a7:57:91:1c:78:dc:9f:
d8:bb:df:67:c3:e2:bc:6b:ef:8a:ce:98:12:ef:2a:b9:8e:b2:
7f:82:56:9e:81:87:e6:83:55:ba:e2:6a:4e:f9:32:58:a6:2c:
fc:26:d6:93:a7:36:6b:c0:0e:2a:46:15:89:82:9f:4f:e9:12:
af:e0:4f:96:95:ce:62:dc:11:10:67:2a:a9:ea:ee:5a:fe:97:
5d:d0:c8:4e:c0:b5:8e:fa:2a:2c:ee:fb:4a:e8:b2:43:f7:7b:
01:80:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:29:58 2025 by rpki-client