Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20383334.roa
File: 352e3138312e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ya8SKLX2rGoHnRreaolQqWtEICYipAcpDIiv+UA04sw=
Subject key identifier: 42:F6:AB:3B:32:E1:C3:60:C9:00:53:A4:FA:7E:DB:73:45:7B:02:E5
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 73796AD2FDF94E52C5E8198DCA3FDA4E8D6F60C3
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20383334.roa
Signing time: Thu 01 Aug 2024 13:55:16 +0000
ROA not before: Thu 01 Aug 2024 13:50:16 +0000
ROA not after: Thu 31 Jul 2025 13:55:16 +0000
asID: 834
IP address blocks: 5.181.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:79:6a:d2:fd:f9:4e:52:c5:e8:19:8d:ca:3f:da:4e:8d:6f:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 1 13:50:16 2024 GMT
Not After : Jul 31 13:55:16 2025 GMT
Subject: CN=42F6AB3B32E1C360C90053A4FA7EDB73457B02E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:bc:b8:25:32:77:f3:4f:fd:9d:3c:21:39:
b5:84:09:e2:e7:55:cb:c4:b6:15:e0:f3:6c:75:47:
1a:c9:0f:3e:18:ca:66:78:48:3b:72:40:25:f5:c9:
8a:e5:e4:d2:b2:fd:15:67:62:20:ab:4d:0f:13:92:
f2:ba:dd:61:71:19:a3:13:86:8c:87:27:1e:73:1a:
43:6a:64:52:4a:ca:63:7a:dd:6c:9b:cf:4e:d5:a5:
15:48:15:7a:91:50:10:92:df:75:1f:71:7b:df:b1:
68:e0:cd:c0:01:46:04:db:3c:a1:27:27:0d:76:58:
ce:67:c9:fe:93:7b:1e:1a:22:48:9e:29:8d:1b:f1:
9b:b5:d8:31:46:a5:cc:d4:2c:10:e6:ba:b7:d6:68:
13:85:15:cf:bd:a8:e4:4c:6c:a9:a0:07:7c:6f:c9:
e0:db:75:bc:82:a4:a7:a1:ab:64:6c:49:82:6d:38:
c0:68:9d:ea:0c:1e:7a:11:0b:ac:a5:dd:5f:12:81:
c8:3b:85:6f:9c:82:d1:d9:c6:fd:53:80:33:17:b0:
e5:2b:8e:11:59:18:ac:15:e9:fb:b8:66:5d:c5:a3:
44:93:d8:80:a5:1f:05:b2:51:00:43:ee:d4:fd:35:
fb:23:36:30:ba:57:3b:cc:ac:84:65:3d:ff:c9:0d:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:AB:3B:32:E1:C3:60:C9:00:53:A4:FA:7E:DB:73:45:7B:02:E5
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5d:ca:42:cb:b0:7a:f8:38:b9:12:6a:ec:dd:5c:d6:27:b4:
24:84:24:0d:7b:84:26:0f:45:f0:21:a3:9f:ea:30:88:38:ac:
5a:16:a3:d8:bd:0b:3d:d3:af:3a:d5:70:9b:6e:f8:8c:29:f2:
97:ca:c6:8e:8f:af:15:06:f2:17:dc:51:d2:29:f6:0b:e2:16:
ae:d4:1f:37:bd:d7:f8:d8:f1:22:41:ea:08:d4:fa:a2:2b:0d:
06:cf:18:3b:65:45:4e:f8:59:58:ef:c4:68:13:b8:3f:43:12:
a5:e4:76:ed:85:b0:48:bf:ad:b4:b3:a9:70:7b:88:86:1d:a1:
13:6b:27:94:f0:0c:3f:de:25:7b:4c:d1:be:f2:95:4f:a9:16:
e4:31:20:c9:00:ed:68:3f:d6:36:bf:ca:f1:a1:d4:1c:e2:e4:
50:64:4c:df:2d:78:51:56:b4:fa:45:68:d9:30:10:c6:86:82:
5d:86:ad:5f:46:89:2b:d8:0e:01:43:0a:e9:e4:8e:21:76:57:
f5:7e:a6:78:4c:bc:73:2a:99:99:67:7f:af:0b:66:be:a0:92:
c5:b8:c6:70:ed:c2:7c:36:58:74:21:d5:c9:a2:31:3f:e3:8d:
3e:23:42:0d:24:75:76:4e:15:3b:cf:2f:f9:24:35:d6:f7:9c:
f7:f2:73:2c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUc3lq0v35TlLF6BmNyj/aTo1vYMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNDA4MDExMzUwMTZaFw0yNTA3MzExMzU1MTZaMDMxMTAvBgNV
BAMTKDQyRjZBQjNCMzJFMUMzNjBDOTAwNTNBNEZBN0VEQjczNDU3QjAyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjby4JTJ380/9nTwhObWECeLn
VcvEthXg82x1RxrJDz4YymZ4SDtyQCX1yYrl5NKy/RVnYiCrTQ8TkvK63WFxGaMT
hoyHJx5zGkNqZFJKymN63Wybz07VpRVIFXqRUBCS33UfcXvfsWjgzcABRgTbPKEn
Jw12WM5nyf6Tex4aIkieKY0b8Zu12DFGpczULBDmurfWaBOFFc+9qORMbKmgB3xv
yeDbdbyCpKehq2RsSYJtOMBoneoMHnoRC6yl3V8Sgcg7hW+cgtHZxv1TgDMXsOUr
jhFZGKwV6fu4Zl3Fo0ST2IClHwWyUQBD7tT9NfsjNjC6VzvMrIRlPf/JDbrPAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUQvarOzLhw2DJAFOk+n7bc0V7AuUwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzUyZTMxMzgzMTJlMzEzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWxMA0G
CSqGSIb3DQEBCwUAA4IBAQC/XcpCy7B6+Di5Emrs3VzWJ7QkhCQNe4QmD0XwIaOf
6jCIOKxaFqPYvQs906861XCbbviMKfKXysaOj68VBvIX3FHSKfYL4hau1B83vdf4
2PEiQeoI1PqiKw0Gzxg7ZUVO+FlY78RoE7g/QxKl5HbthbBIv620s6lwe4iGHaET
ayeU8Aw/3iV7TNG+8pVPqRbkMSDJAO1oP9Y2v8rxodQc4uRQZEzfLXhRVrT6RWjZ
MBDGhoJdhq1fRokr2A4BQwrp5I4hdlf1fqZ4TLxzKpmZZ3+vC2a+oJLFuMZw7cJ8
Nlh0IdXJojE/440+I0INJHV2ThU7zy/5JDXW95z38nMs
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:24:41 2024 by rpki-client on console.sobornost.net