Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20323136343433.roa
File: 3231322e31382e3131342e302f32342d3234203d3e20323136343433.roa (raw, json)
Hash identifier: rvIUEqP3IgcgSFiV9f2Y1e15KYui+ePrlN4RgtxWky4=
Subject key identifier: 52:C4:2C:DE:51:14:23:89:6B:90:A2:28:85:6F:76:88:0B:F9:EE:B1
Certificate issuer: /CN=f6253299001f2d1a01a517056cd577f41c34eb71
Certificate serial: 68F1C1B9A31363F305CF8BA45364E790F8AC12CA
Authority key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20323136343433.roa
Signing time: Mon 18 Sep 2023 10:20:30 +0000
ROA not before: Mon 18 Sep 2023 10:15:30 +0000
ROA not after: Mon 16 Sep 2024 10:20:30 +0000
asID: 216443
IP address blocks: 212.18.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:c1:b9:a3:13:63:f3:05:cf:8b:a4:53:64:e7:90:f8:ac:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6253299001f2d1a01a517056cd577f41c34eb71
Validity
Not Before: Sep 18 10:15:30 2023 GMT
Not After : Sep 16 10:20:30 2024 GMT
Subject: CN=52C42CDE511423896B90A228856F76880BF9EEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:48:2c:c5:c0:d9:23:8d:50:91:1b:3d:f1:
9a:c8:11:95:04:40:fa:f3:4a:7e:24:31:1e:12:db:
0b:f4:f2:85:d8:48:5a:91:a2:92:3d:b8:3e:cc:e8:
3b:c7:ea:9b:67:ac:2e:d4:ca:c9:b9:b6:9d:62:40:
a9:5d:48:f0:e2:c7:e0:ee:b2:a4:93:aa:31:45:3e:
83:39:6f:41:4a:6c:a4:6c:f7:00:e2:fa:ea:c5:77:
08:38:1c:bb:97:c9:05:98:07:ed:57:6e:a7:74:a1:
4a:54:3b:2e:ca:a6:4e:84:8d:4d:2b:41:f4:d9:96:
32:6d:10:7f:43:1a:45:90:3c:c0:3a:98:13:f3:a2:
59:65:b7:d2:95:d8:f1:26:54:0d:70:1c:72:bc:3f:
fe:ac:30:4d:cd:45:5a:bc:6a:af:cd:36:fe:2f:cb:
33:ed:dc:e7:f3:3c:be:21:8d:66:cc:ea:73:f0:dc:
63:2b:78:a5:96:7d:97:e8:02:ef:63:3a:27:6a:05:
73:f6:14:d7:2f:90:55:73:40:ed:4c:83:df:11:87:
82:a7:c6:bd:6a:13:2b:8c:51:67:87:64:d2:33:18:
ca:5b:d6:0b:68:0f:80:d2:22:5e:65:5d:35:c2:97:
65:db:b4:b6:58:66:26:eb:65:f5:2f:50:ad:9b:04:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:2C:DE:51:14:23:89:6B:90:A2:28:85:6F:76:88:0B:F9:EE:B1
X509v3 Authority Key Identifier:
keyid:F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20323136343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:41:57:d8:06:97:c7:49:6b:35:57:73:be:2b:89:7c:07:d9:
6d:a2:98:7c:0d:4e:f4:41:ac:90:32:cd:fe:94:f3:30:c2:a4:
39:84:10:6b:6f:fd:2c:c5:74:91:52:a8:70:d6:5e:4b:46:c6:
3f:0d:e1:45:84:63:39:a2:84:7d:5a:71:d0:17:ad:af:3a:a0:
21:b2:41:44:d7:77:6c:4d:9f:ea:2c:8b:8a:fc:e2:be:5f:17:
fc:87:e7:f9:9a:d3:04:86:47:63:47:79:f3:c1:1c:58:ec:90:
a3:bb:ee:9a:35:b7:bd:b6:6c:e1:81:93:66:b0:75:02:73:ad:
70:7f:ef:34:12:17:4a:47:bd:ee:da:ac:11:8d:21:49:26:4d:
12:ac:a5:f6:f0:41:16:7b:52:c4:4a:9e:01:de:ad:ef:97:1e:
6d:2e:d4:7a:2a:35:d9:56:35:29:22:72:1d:0c:f9:f3:34:af:
d8:06:97:ce:95:3c:16:58:b0:d0:85:32:f2:6e:c5:d0:70:25:
dc:c0:d1:65:b4:40:91:eb:96:3b:65:f0:ed:f6:42:7c:c0:ec:
ea:5d:6b:17:66:4e:63:b1:bd:e8:b3:67:2d:5e:34:6e:64:04:
f8:4a:5a:22:f3:dc:50:6e:95:7b:c9:1b:99:b3:89:72:fd:89:
1d:27:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 14:41:26 2023 by rpki-client on console-ams.rpki-client.org