Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: LuVtC3pxAHJumXnpr9uppCe3VRTQKb+i7jygjhbegKo=
Subject key identifier: 3B:A8:7E:51:5C:EC:C4:9B:AC:49:DE:FC:0C:ED:50:9D:21:1E:B9:1C
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0BCA0B54BDDFC09CA1941140FEDE10D5B72208EB
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212238.roa
Signing time: Tue 06 Jun 2023 09:26:01 +0000
ROA not before: Tue 06 Jun 2023 09:21:01 +0000
ROA not after: Tue 04 Jun 2024 09:26:01 +0000
asID: 212238
IP address blocks: 89.23.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ca:0b:54:bd:df:c0:9c:a1:94:11:40:fe:de:10:d5:b7:22:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:01 2023 GMT
Not After : Jun 4 09:26:01 2024 GMT
Subject: CN=3BA87E515CECC49BAC49DEFC0CED509D211EB91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:b3:3d:72:6e:53:0a:51:eb:61:44:ec:4f:
04:74:92:6b:a1:6c:71:72:0d:07:ba:7d:81:b4:df:
6b:e7:b7:15:43:a9:65:61:22:ba:47:6e:f1:a4:74:
10:02:8a:23:2a:bb:a3:63:28:f3:52:04:f9:f3:aa:
43:0f:bb:76:e2:75:fc:01:a8:fd:05:8a:f5:b5:1c:
8d:6a:5e:5a:02:df:54:b1:7b:42:f3:5b:d4:16:ea:
3f:21:51:6c:7f:d2:26:c1:89:d8:97:18:47:87:15:
0c:4b:ff:12:5e:40:79:0f:1c:bc:cc:8a:38:55:37:
03:69:7a:81:57:21:4a:c7:81:09:5b:04:89:88:f3:
ca:d3:b8:52:27:15:2c:30:79:61:12:62:8b:e8:e3:
23:23:9b:ac:db:81:f8:e5:46:09:96:64:22:12:55:
6d:51:50:d1:ea:a5:fd:bd:8c:ce:d7:6c:c5:28:13:
0a:a7:dc:79:aa:c1:a5:06:2c:51:6d:b0:7c:be:97:
d7:19:2c:b4:5d:34:79:1c:f5:61:35:a9:31:cd:44:
42:0e:d1:e1:af:7d:4f:59:23:ca:03:34:dc:d5:d0:
50:45:e9:ca:d2:9f:5a:ff:24:ff:aa:d4:7b:1b:66:
3c:f4:a0:14:13:0e:03:c3:fa:9f:6f:48:69:f6:f9:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:7E:51:5C:EC:C4:9B:AC:49:DE:FC:0C:ED:50:9D:21:1E:B9:1C
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.83.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8d:4b:78:69:1e:87:78:ad:d3:14:d9:9d:a4:06:e5:7e:18:
1f:b2:62:50:12:16:78:3a:af:6b:8e:12:7d:b0:37:e8:50:33:
3d:d3:56:bb:99:0d:12:1e:02:d9:90:eb:65:f4:97:84:33:0d:
fb:45:da:00:e5:80:c3:84:62:0e:26:29:3e:60:9e:12:b4:8c:
98:5d:3c:1c:3f:4d:12:9f:99:8f:c0:ce:95:3e:ea:e2:de:73:
87:18:41:7c:45:29:87:2c:08:93:4e:22:ea:4d:2c:8e:58:a9:
74:c7:d8:c6:4f:8d:8f:2c:c3:bb:f6:77:89:8d:0b:94:49:12:
52:6d:65:82:d7:19:2a:17:a8:90:a9:2a:62:df:4b:5d:b9:33:
87:eb:15:85:c9:57:fc:d2:f1:b7:4d:6b:4b:75:c1:23:1f:56:
58:6d:51:2c:f3:37:5c:e8:3e:c3:15:a3:2f:72:1e:08:63:52:
e9:15:5e:f7:3f:07:79:ad:e3:ef:94:a6:51:0b:8f:c6:ed:a4:
a9:b4:3b:6e:9a:8d:4b:ac:3b:42:78:7d:92:33:9d:36:f0:3a:
c7:d2:8e:6a:53:96:25:07:28:87:b4:52:c8:cb:b4:74:15:23:
57:d0:53:ba:f3:93:c0:ac:43:b7:62:ec:4a:ef:6c:17:20:db:
a9:84:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org