Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
File: 352e3138302e36332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: XLw7dDuFpcAwngZj1IovrP5hkBOzuD6acConuP6Ws8I=
Subject key identifier: D1:2E:82:6D:42:C8:2E:E3:2E:5F:15:27:2E:51:96:F9:5C:2B:8B:28
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 687E3470E651A2EE666B6902552AD9A91354D802
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:44:47 +0000
ROA not before: Mon 27 Jan 2025 09:39:47 +0000
ROA not after: Mon 26 Jan 2026 09:44:47 +0000
asID: 136787
IP address blocks: 5.180.63.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7e:34:70:e6:51:a2:ee:66:6b:69:02:55:2a:d9:a9:13:54:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:47 2025 GMT
Not After : Jan 26 09:44:47 2026 GMT
Subject: CN=D12E826D42C82EE32E5F15272E5196F95C2B8B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:1c:20:89:00:3c:82:91:18:f2:d4:f9:32:
65:a9:9b:82:05:b8:ed:83:66:48:b6:fa:2b:da:5b:
76:5a:ee:24:b8:5a:ce:34:85:83:df:ac:7f:dd:c9:
c8:d3:3f:50:0a:26:63:86:7a:a1:d8:54:6b:2c:23:
28:8d:22:40:6e:c7:8c:e8:21:e1:a4:d0:f3:8b:1d:
b0:9a:a0:e7:6b:32:1c:27:58:19:0e:8c:06:bd:85:
58:2b:41:94:59:49:9a:6a:81:e8:3d:ad:8d:20:01:
5e:e3:60:b8:c9:6a:25:c7:15:dc:05:a0:94:2c:e0:
39:3e:84:90:42:0e:f3:36:7f:7f:79:c9:4f:ef:5c:
6f:be:24:33:0f:98:46:db:4b:b0:4f:4d:c1:9c:2c:
c6:d9:79:5d:ff:ec:5d:01:5d:5e:d6:60:ee:31:c2:
5b:c6:ec:3d:7b:ae:f4:06:54:5d:71:02:5d:7e:8b:
07:ae:e3:83:ef:dd:f0:7e:1f:8f:4e:32:50:cb:be:
5b:cc:3c:3b:0d:a8:e2:33:0d:e8:c4:bf:fa:70:c5:
cf:48:7b:ad:49:fa:c2:20:79:a5:2d:ef:9c:3e:10:
eb:7d:cf:a2:69:32:cd:35:08:e6:4c:5b:e1:27:03:
da:55:65:35:e9:d7:ac:0d:d5:17:ab:ef:3a:5e:9d:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:82:6D:42:C8:2E:E3:2E:5F:15:27:2E:51:96:F9:5C:2B:8B:28
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9f:b2:98:c2:3a:7c:17:13:0e:84:0a:c6:6b:f2:21:1d:58:
81:47:b6:b1:09:df:53:6c:81:d2:e5:f3:8d:f3:f4:8a:9c:6e:
dd:31:88:11:e3:16:e8:2f:42:7d:be:4e:d2:a0:3d:7e:f2:36:
8f:bb:21:6e:c0:b9:cb:a9:a2:05:3e:ff:1a:82:bb:90:cd:09:
39:59:88:f5:80:b0:db:36:c1:35:af:f4:d8:d3:95:e3:cd:2d:
99:bc:46:ea:03:6f:c6:b0:fd:e5:72:9c:fc:93:7f:d9:a9:b8:
9b:d2:d2:72:b3:86:b6:22:d3:73:1f:a0:23:eb:7c:f9:35:50:
0d:96:31:8a:07:50:82:e2:5c:bb:c3:4c:e3:68:50:49:e3:8b:
1e:09:55:ef:bb:95:89:05:88:e1:54:d8:26:d5:21:f9:1a:6b:
2f:b5:41:a1:de:cc:b0:b2:9e:0f:ef:57:71:bc:a6:c6:21:dd:
61:e6:ad:f7:84:f9:94:62:c8:15:e0:fa:2e:ed:fa:d3:d8:a8:
29:7d:0b:fe:09:b0:76:e1:bb:9c:7c:cc:ef:21:73:d7:a6:4b:
58:d8:59:aa:f7:11:4c:9f:54:7a:6d:5e:12:5f:6f:39:7a:5b:
c5:3a:00:d1:57:f0:76:fd:c8:83:93:c7:f8:38:45:2d:0b:25:
25:26:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:31 2025 by rpki-client