Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
File: 352e3138312e3231362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: CXyez8LiTsy7u7TxJTD6FSMpKg6W2mp+qvSdz8h/B10=
Subject key identifier: BF:59:39:7E:39:82:D7:A8:E6:C3:34:0E:E5:33:41:60:CC:03:1A:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 176E6A4C5213D3EE9B27499141B31F6281C1B86C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:57 +0000
ROA not before: Mon 27 Jan 2025 09:39:57 +0000
ROA not after: Mon 26 Jan 2026 09:44:57 +0000
asID: 47583
IP address blocks: 5.181.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6e:6a:4c:52:13:d3:ee:9b:27:49:91:41:b3:1f:62:81:c1:b8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:57 2025 GMT
Not After : Jan 26 09:44:57 2026 GMT
Subject: CN=BF59397E3982D7A8E6C3340EE5334160CC031A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:e5:80:b5:55:8d:bd:ca:1c:96:49:62:23:
80:d9:1e:d0:ad:a0:91:36:97:e6:81:8b:4a:0f:4a:
73:f6:48:c5:1b:82:1c:b5:98:30:01:e2:ae:7a:ca:
4a:77:b5:17:15:ad:30:99:ed:d7:bc:10:2e:05:cb:
1c:07:02:b5:be:1f:18:59:97:3a:97:f5:11:57:f0:
3c:4e:cb:64:61:31:31:f9:6d:ec:e5:88:8f:7f:92:
01:d2:63:a7:7a:75:f0:92:e5:de:96:30:6d:cb:e2:
fe:34:08:5d:f2:b8:06:0d:a3:30:12:e1:71:f6:1b:
2b:65:f6:6c:ef:17:c2:7c:14:4d:f3:4c:ac:29:d1:
eb:0c:00:f0:c6:ab:c0:59:ea:9b:ed:47:3a:a0:21:
40:1a:d5:50:20:d7:12:81:b0:ab:1d:82:2e:af:1f:
d5:0c:2b:f9:d2:91:f9:b8:b4:ed:c1:1a:60:01:02:
36:8b:a9:9c:c4:35:a6:c4:8a:a0:02:bf:c6:a3:c0:
a8:35:ca:a7:2b:bd:f6:83:94:fe:4c:e1:9d:b8:05:
0c:2a:09:ed:53:ed:e8:f1:a3:06:80:5b:69:c5:f0:
55:fe:83:f6:df:b0:50:7a:e3:a5:ed:c6:97:67:13:
d0:b3:8c:16:35:ec:54:49:89:11:52:1a:04:89:94:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:59:39:7E:39:82:D7:A8:E6:C3:34:0E:E5:33:41:60:CC:03:1A:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.216.0/23
Signature Algorithm: sha256WithRSAEncryption
50:3b:fb:86:45:f0:cb:c9:b5:7a:f3:a9:93:fc:96:31:27:92:
98:0c:f8:48:3b:6d:0e:2f:99:35:d4:ed:84:24:57:28:b4:c1:
15:ed:a8:90:22:99:4f:f7:e2:c2:05:77:4b:00:d5:77:d4:c6:
64:1c:3e:a5:40:ff:9f:09:04:24:b0:1e:25:30:75:2f:ca:f5:
9c:51:f4:d1:bc:b3:3d:2d:75:ba:d6:5c:91:2a:7b:35:cc:28:
41:08:b7:6f:6d:9d:71:33:ea:76:f4:48:be:13:0a:e2:cc:f9:
ee:5b:22:b6:90:7e:cb:92:34:c8:af:0b:1c:bd:3f:54:f7:e8:
04:62:cc:b0:65:e4:b1:55:36:c3:cf:c4:74:c4:85:7b:95:ca:
9a:33:01:1c:81:d3:e4:a6:30:e7:7f:51:c6:75:b9:b3:df:8a:
36:01:5d:d2:70:49:b1:c7:ef:78:68:4a:62:e1:6e:94:79:4a:
11:b1:04:09:21:92:bc:a8:e9:3b:7f:73:6e:46:29:35:9c:ae:
da:c0:80:21:09:df:a6:74:fe:5c:21:c5:66:b8:c1:e3:c1:02:
06:2c:31:32:ae:2b:2c:86:0f:d2:a4:fd:d4:32:3f:43:95:7f:
4e:92:6e:0d:65:46:99:af:68:72:d2:94:20:f8:4d:dc:1a:9f:
28:37:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:43 2025 by rpki-client