Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: pU2umaTnvbyEf48q8VcIDiU6vwTk/eyV0Itd/sTyV54=
Subject key identifier: AB:3D:6E:AA:47:66:B2:A1:AB:9B:FB:7B:AC:A8:F7:35:D3:E2:B5:51
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 442D1F9FF7D226CE133BB46B0DDB6A72F636BBEA
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212669.roa
Signing time: Tue 06 Jun 2023 09:26:01 +0000
ROA not before: Tue 06 Jun 2023 09:21:01 +0000
ROA not after: Tue 04 Jun 2024 09:26:01 +0000
asID: 212669
IP address blocks: 89.23.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2d:1f:9f:f7:d2:26:ce:13:3b:b4:6b:0d:db:6a:72:f6:36:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:01 2023 GMT
Not After : Jun 4 09:26:01 2024 GMT
Subject: CN=AB3D6EAA4766B2A1AB9BFB7BACA8F735D3E2B551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:02:77:13:75:db:2d:f4:2c:33:67:fb:cf:
b7:e5:d4:28:63:a9:16:a5:b3:c7:14:db:a9:a8:48:
51:9c:7f:5d:2d:e8:8e:66:6d:5c:b6:21:f4:48:1f:
60:9c:7a:d6:22:b7:3f:95:5a:d2:70:0f:9d:af:6d:
71:17:e6:e9:09:f1:de:bf:b1:51:45:94:26:9f:64:
1f:a7:d2:96:f9:4c:cb:40:d2:bc:09:6a:62:9e:d6:
a7:64:54:59:82:c3:b0:a0:57:5d:cf:01:5e:1d:84:
81:ce:34:6a:06:c1:31:fb:05:e1:fd:4d:d4:a7:84:
3d:f4:83:64:34:8d:57:72:fe:fa:e0:14:0a:d1:c0:
e3:8a:7f:22:7c:fa:e1:b7:70:ac:95:3a:d4:4d:f6:
35:2b:08:a0:a4:18:96:f8:ec:a3:27:71:6e:20:94:
8f:a6:28:ef:ce:cf:aa:e7:b0:9c:85:fa:77:39:15:
02:11:3d:81:c4:52:0b:30:10:03:9b:ea:bb:2d:0c:
61:56:ff:91:0d:4c:df:7d:ee:0a:f2:0a:5d:5c:b7:
a8:4e:cb:f7:c6:63:51:57:7b:cb:85:c2:c8:f1:fd:
12:62:0a:27:d4:ff:47:92:63:ab:49:93:29:3a:b3:
01:a1:73:47:e8:7d:1b:c4:6f:a3:61:5d:e5:23:0c:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3D:6E:AA:47:66:B2:A1:AB:9B:FB:7B:AC:A8:F7:35:D3:E2:B5:51
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9d:ef:12:84:16:bf:cb:75:f8:6e:f3:d9:32:30:90:fd:4e:
61:df:ae:48:43:9c:61:c8:a3:9d:e4:2d:96:f0:1c:19:07:16:
b9:31:d9:6a:c1:70:03:8b:6d:d8:70:4c:12:e2:db:b0:0b:48:
80:90:70:a3:cc:91:c4:e3:cc:95:62:b7:7c:b9:ca:4a:52:7e:
30:cf:00:7b:63:60:ac:ce:75:d2:41:fa:f6:a3:11:89:8f:2c:
6c:a5:1a:5a:2a:1c:89:6e:6f:7e:e1:d1:3e:80:6e:5a:f4:1b:
23:0a:13:25:0f:a3:b7:88:d4:41:bc:80:25:ea:b1:eb:50:15:
c6:ad:64:e7:48:f8:46:a0:5f:9a:a0:c7:e4:a2:2c:d7:20:76:
31:69:9f:2c:38:36:c6:21:c1:c8:4d:7f:29:22:e9:90:7a:bb:
98:d9:bb:35:78:f2:a3:42:5d:c9:9f:3b:35:b7:be:b2:0b:97:
cb:7c:f6:f0:15:98:39:92:cd:45:45:32:0b:4f:07:40:6f:8d:
6b:d7:36:c6:20:65:81:5f:e2:f9:ca:a1:d2:50:07:61:8c:b6:
0e:b1:a2:46:f7:fe:38:50:85:b8:06:c7:18:b8:d4:fc:e0:82:
8a:23:82:a7:aa:e3:fc:d9:7b:3b:a4:8f:d7:00:34:27:93:e1:
47:3c:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org