Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e203432333636.roa
File: 352e3138332e33322e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: QJYDveHR5Uz0p8vk50CFIRkDKm7xbNSBFcFO497Ufes=
Subject key identifier: 10:FB:7B:75:59:53:20:51:5A:AD:CA:36:3A:CE:7F:6A:37:49:C6:92
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 6F06E925B50C42F25225D42487B1A04FE9686088
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:19:43 +0000
ROA not before: Fri 31 Mar 2023 12:14:43 +0000
ROA not after: Fri 29 Mar 2024 12:19:43 +0000
asID: 42366
IP address blocks: 5.183.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:06:e9:25:b5:0c:42:f2:52:25:d4:24:87:b1:a0:4f:e9:68:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:14:43 2023 GMT
Not After : Mar 29 12:19:43 2024 GMT
Subject: CN=10FB7B75595320515AADCA363ACE7F6A3749C692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:7c:cf:aa:9b:7d:42:05:51:9a:a6:30:44:
85:df:c5:9e:aa:df:83:3e:41:88:bd:d1:2b:e9:ec:
ab:e8:93:1f:e6:6d:8b:ac:c7:8c:8b:01:ff:b9:e9:
36:72:2c:9d:7b:79:fa:35:09:e3:e1:d7:35:84:e5:
da:4e:8e:8f:1f:81:40:54:20:d7:ec:72:d1:ec:a9:
37:2e:8c:dd:72:35:75:64:55:72:26:17:9c:1f:36:
8c:3d:6d:16:2f:1a:37:53:f4:c7:cb:ef:37:ba:b0:
b3:c7:84:2e:7c:81:68:1e:43:b5:b1:6d:27:67:c7:
2e:87:24:da:ba:d9:30:a1:36:c7:f7:60:2d:08:ea:
19:08:7d:87:a5:26:a6:0b:68:d3:90:05:2f:6f:bf:
9b:21:0d:a2:08:b0:ae:ab:44:0b:e5:83:8a:86:45:
6b:2c:9b:d5:7b:de:93:56:e8:84:e1:ff:91:ad:2c:
cd:40:9f:cb:a1:83:ae:d5:1b:24:ce:4b:12:78:86:
70:a4:ba:88:8a:24:fe:cc:23:c8:c4:a4:1c:77:7b:
f4:56:e0:e7:b4:80:02:c3:e8:4c:18:ca:fb:13:34:
a8:df:b5:5d:6c:22:14:bb:81:3c:7b:c0:34:a0:ca:
7d:82:23:77:5f:f4:e4:5e:5a:00:0a:91:7e:a0:83:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:7B:75:59:53:20:51:5A:AD:CA:36:3A:CE:7F:6A:37:49:C6:92
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:50:3f:75:7a:95:58:2c:d5:10:68:79:04:50:a6:a7:c7:c0:
5a:5d:b5:3c:7c:4d:40:ac:85:0b:da:e3:1f:a4:ae:cf:e4:38:
fe:cf:6b:15:c9:d5:11:91:12:13:5d:c3:bc:83:e5:67:19:49:
fe:d0:e2:f2:27:ce:c8:2a:c1:97:90:cd:a8:1f:9f:97:69:d4:
18:fd:38:cb:93:a0:9a:8a:65:53:b1:ae:6f:f8:e7:60:ec:ba:
64:49:77:fd:02:64:aa:bf:9c:a1:f7:2a:c2:ad:49:32:81:8b:
88:7b:43:bb:7d:d2:e2:88:b1:c7:b2:3a:4c:75:74:75:16:15:
62:58:23:54:4b:44:1a:84:50:74:4a:30:82:11:4e:28:69:f2:
08:e9:76:33:40:cb:d6:82:b6:ee:57:fe:75:3f:b8:e4:51:0f:
69:7e:6a:19:9c:73:e4:23:57:ec:0a:33:d5:ba:7a:23:2e:e5:
8c:74:8e:8f:e2:83:0a:f8:7e:01:cb:3c:3a:8f:16:0b:ff:36:
2e:84:e0:0e:dd:21:c2:78:ea:b9:f1:8a:26:e3:23:cc:87:0d:
37:97:60:7e:7c:54:09:fd:8d:2f:8b:e1:e5:e4:d0:0c:96:f8:
ef:8e:85:e2:7d:f2:d8:12:c8:8b:57:d6:e1:6b:3c:41:67:e4:
97:b2:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:50 2025 by rpki-client