Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32322d3232203d3e2039313235.roa
File: 352e3137322e33362e302f32322d3232203d3e2039313235.roa (raw, json)
Hash identifier: 6YaI/WCWeUEesud8F5PBd0n8ATYJ+mU7TOdhRzV8s/s=
Subject key identifier: 73:0F:3D:A4:F7:B6:D5:91:45:D3:9E:56:F7:57:E9:1D:AF:01:75:F5
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6CB7DA8BEB24C7DC868BCC1A4F567509D3A0E4A1
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32322d3232203d3e2039313235.roa
Signing time: Tue 06 Jun 2023 09:22:10 +0000
ROA not before: Tue 06 Jun 2023 09:17:10 +0000
ROA not after: Tue 04 Jun 2024 09:22:10 +0000
asID: 9125
IP address blocks: 5.172.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b7:da:8b:eb:24:c7:dc:86:8b:cc:1a:4f:56:75:09:d3:a0:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:17:10 2023 GMT
Not After : Jun 4 09:22:10 2024 GMT
Subject: CN=730F3DA4F7B6D59145D39E56F757E91DAF0175F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:32:15:73:bc:a7:5a:2f:9f:46:44:f7:a6:
d9:cb:58:a4:e0:d4:66:e3:cf:34:1f:3f:3a:55:f3:
bc:36:1f:26:09:1b:65:21:e9:f6:b6:6c:60:7a:99:
a7:c0:eb:e3:a2:a0:b7:78:14:de:d2:2e:7e:8d:e3:
84:12:ec:be:e0:7d:42:fa:fe:49:7f:86:53:8c:5f:
42:b4:0e:69:1d:a1:05:e4:39:9a:63:a2:9e:03:24:
e2:f2:c5:b2:cb:40:07:6c:5d:02:19:b3:9c:cf:0d:
b9:bc:35:cc:65:5b:31:56:83:18:1f:b1:2e:ef:58:
f6:fe:59:33:d3:23:2d:37:d5:9d:b2:2a:97:94:71:
eb:9a:7c:2a:50:85:c8:e5:aa:1a:11:e4:5f:29:a4:
98:4b:f2:bf:b0:d5:9c:c7:0b:23:15:12:38:1b:5c:
4b:3b:f3:0b:5b:5a:9c:89:84:02:4f:df:70:38:86:
ca:4c:63:f3:1c:5a:6c:ce:be:b5:de:70:56:fc:33:
29:50:17:57:0b:2b:5e:c1:b4:b7:dc:1c:f5:04:1c:
37:ae:12:d6:a9:33:7d:96:ee:84:da:fd:01:f6:9e:
1a:ed:2b:d3:c6:7e:ce:2a:85:12:48:f7:68:e5:f7:
ab:ea:1c:50:e6:0c:2a:45:5b:1d:a8:a2:84:d4:cf:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:3D:A4:F7:B6:D5:91:45:D3:9E:56:F7:57:E9:1D:AF:01:75:F5
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/352e3137322e33362e302f32322d3232203d3e2039313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:80:fd:09:a1:b0:20:1e:f5:5c:4c:fa:fb:49:c0:8a:25:78:
61:76:01:07:d6:2d:83:55:10:b6:92:b3:85:ae:f4:eb:f7:1e:
55:ea:c0:2b:1f:00:e4:4b:d9:6f:b7:de:b4:c2:36:be:8e:88:
58:88:84:0c:26:7c:e5:1f:75:fe:4e:41:30:bf:c1:be:22:9b:
27:8b:f4:3c:3b:89:91:9d:b0:13:53:24:d3:b6:e0:94:40:ab:
e0:57:da:82:84:bf:cf:82:42:0e:b0:73:53:87:25:91:d3:a3:
e7:62:ba:7f:3e:49:44:51:d6:a5:2a:9d:00:75:c4:69:44:c0:
08:95:fb:f7:d3:0f:a2:2f:ba:df:a9:65:6d:68:9b:39:f5:92:
7c:69:08:b4:67:21:96:b2:a8:f2:c7:ce:6b:38:dd:5f:fb:2a:
2f:b0:1c:b0:0d:ea:68:b6:83:87:e3:52:03:70:8d:ee:6c:53:
03:16:f7:bf:b0:a7:7e:c6:7e:2f:87:7b:b6:b0:87:6a:9f:ac:
d7:5b:75:c9:8b:da:04:96:db:8b:03:b4:f5:28:db:d1:1d:56:
76:ee:37:bd:f9:63:05:39:dd:1a:b1:14:12:5c:5f:32:2c:a8:
3a:0d:e1:2b:b9:05:d2:10:c2:b6:b5:01:c2:1d:19:fb:d9:5a:
9c:0f:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:00:36 2025 by rpki-client