Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32332d3233203d3e2039313235.roa
File: 352e3137322e33342e302f32332d3233203d3e2039313235.roa (raw, json)
Hash identifier: TARrfKOByJNJWDlWrYepbLaPfNk8sjbjGBOuJaeK78w=
Subject key identifier: 5D:D9:EC:81:40:37:00:A8:7D:76:F1:59:90:05:95:C3:3E:77:BA:5F
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 366F32E49C696AFCF4BCAE887635082C9170C415
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32332d3233203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:21:47 +0000
ROA not before: Tue 06 Jun 2023 09:16:47 +0000
ROA not after: Tue 04 Jun 2024 09:21:47 +0000
asID: 9125
IP address blocks: 5.172.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6f:32:e4:9c:69:6a:fc:f4:bc:ae:88:76:35:08:2c:91:70:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:16:47 2023 GMT
Not After : Jun 4 09:21:47 2024 GMT
Subject: CN=5DD9EC81403700A87D76F159900595C33E77BA5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:5a:33:bc:91:f7:24:66:57:7b:bd:84:38:
5c:36:87:dc:5a:f4:c5:4a:33:84:9d:6e:70:8e:48:
1f:09:22:bd:35:bf:09:29:00:57:c0:fc:51:01:a2:
8b:b9:ca:d6:3c:b5:3b:10:b2:72:cc:47:06:7e:00:
56:4e:36:4f:7a:42:98:e7:b3:81:86:49:55:5c:a1:
35:b5:b3:2f:7f:9e:04:b4:f7:6b:d9:04:f4:05:08:
45:44:df:2f:ef:38:f1:a6:bd:6f:9e:89:16:09:f0:
35:90:fa:1d:0f:10:6c:0b:59:4e:b7:d7:32:5a:c9:
8d:e8:dd:f1:4b:16:a8:2a:ef:ed:43:b2:44:83:b7:
df:6f:82:46:b4:80:8d:68:63:65:c7:91:33:41:dd:
3e:0e:b1:89:27:13:6e:1c:d3:cc:ab:c8:09:4c:bc:
58:8e:62:6c:c3:eb:ca:3b:b1:96:48:a8:15:d9:19:
3f:ff:97:43:00:08:f0:b4:c6:93:a1:fd:8c:79:27:
78:08:00:c8:9e:5b:5c:ba:a0:fa:bb:50:7e:05:e3:
42:73:b5:50:07:8d:83:e6:d3:e6:a4:3c:5b:7c:28:
48:48:e7:5b:cf:bf:07:f8:70:78:76:74:d9:b2:74:
75:b8:57:77:5b:d7:66:c0:ab:aa:00:7f:7b:f9:b5:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:EC:81:40:37:00:A8:7D:76:F1:59:90:05:95:C3:3E:77:BA:5F
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33342e302f32332d3233203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.34.0/23
Signature Algorithm: sha256WithRSAEncryption
87:72:8c:47:34:fd:21:30:70:79:94:82:46:75:c3:31:ec:fe:
ac:a7:15:50:54:1c:27:bc:51:b5:56:88:36:c1:3f:3b:bd:f3:
66:1a:0a:b2:35:d5:20:f1:81:ef:77:42:ad:3f:f2:2f:85:8e:
24:ea:f1:bb:d6:e0:50:af:4a:23:7b:b9:52:7d:5e:9b:94:9c:
2d:98:41:e6:9c:d5:7a:cd:3d:ad:62:a3:53:cf:cb:d2:65:1c:
b9:da:29:92:47:91:85:76:e0:6c:2d:0b:50:fe:54:3a:50:12:
4d:bd:19:c3:03:dc:24:44:fc:b9:5d:02:95:40:aa:77:3c:69:
b8:f6:52:ed:6e:8e:3e:1b:0e:d7:8f:3f:f5:37:31:62:57:51:
1a:d5:9c:ac:08:b0:bb:15:e5:d2:2c:19:f5:e5:df:8f:c9:fb:
f5:3f:ac:36:9c:c1:c9:af:d8:06:63:5d:9f:9e:bf:22:dd:90:
27:54:94:35:16:9c:d7:9b:53:64:42:83:8e:23:82:75:c2:11:
75:a2:8d:f7:17:4e:36:a1:18:fe:24:54:98:d5:17:e7:cc:c8:
9b:4d:54:35:11:9f:ae:37:43:bd:9d:2a:11:2a:0c:8e:2e:ab:
d1:69:1f:f0:d3:dc:1f:bc:a3:6c:d3:01:a3:67:96:a5:60:2c:
b9:62:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:54:52 2025 by rpki-client