Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
File: 3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: PeAPSu2Jaz+novxE7KZ0PSGg9aItfmKRZCiNun0/+9A=
Subject key identifier: A1:5E:63:CC:52:6C:62:96:00:2F:BE:DC:40:D4:87:59:2A:1A:67:FF
Certificate issuer: /CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
Certificate serial: 0DC1A589ADFB1F8C783AD441D88D639C002CB2EC
Authority key identifier: EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
Signing time: Thu 23 Mar 2023 16:26:32 +0000
ROA not before: Thu 23 Mar 2023 16:21:32 +0000
ROA not after: Thu 21 Mar 2024 16:26:32 +0000
asID: 209242
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c1:a5:89:ad:fb:1f:8c:78:3a:d4:41:d8:8d:63:9c:00:2c:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
Validity
Not Before: Mar 23 16:21:32 2023 GMT
Not After : Mar 21 16:26:32 2024 GMT
Subject: CN=A15E63CC526C6296002FBEDC40D487592A1A67FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:4e:c4:50:09:a0:5d:dd:7a:e3:20:a2:1f:
12:89:ad:03:1b:8a:a6:fe:cf:e6:fe:cc:31:01:fa:
45:9c:4e:a1:04:9b:d8:f9:d1:af:c9:04:a3:e8:22:
a3:95:6a:70:84:86:b6:78:80:be:0c:a4:26:78:0c:
ce:2e:38:25:53:e3:0e:69:25:f1:e8:04:e5:82:04:
69:31:6b:bd:17:bb:4f:93:1a:c8:6b:b2:5c:3b:47:
3d:5c:c0:a2:aa:81:8f:44:30:9e:6b:7f:b6:ec:10:
af:91:84:f7:bf:f5:f9:49:44:64:e3:1e:94:de:ce:
6f:0c:e1:42:eb:d8:d6:60:34:eb:38:a9:39:aa:24:
2f:93:0d:3e:fb:b0:b3:12:a7:2b:88:21:40:e1:21:
f7:c8:d2:c3:c6:82:52:61:9a:24:d8:0c:67:11:5a:
64:95:0f:83:a9:3c:31:6f:f1:80:5b:00:5e:55:5c:
62:08:86:5e:ef:fe:60:46:a9:fa:ef:60:4e:5d:d1:
e3:9d:85:87:6d:66:ce:51:8e:a3:b3:5f:eb:78:2a:
bd:74:a2:c1:3b:d5:17:3e:7e:a8:84:4b:f5:e8:6e:
de:82:4d:88:0d:b4:94:ca:e1:64:44:6c:a4:70:67:
36:55:a5:87:46:10:cb:a0:05:6a:e3:ec:95:e7:f4:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:63:CC:52:6C:62:96:00:2F:BE:DC:40:D4:87:59:2A:1A:67:FF
X509v3 Authority Key Identifier:
keyid:EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:36:cb:85:52:34:ff:ea:30:8c:25:18:1d:48:ed:31:45:4b:
da:a7:b8:ce:28:57:76:fe:dd:bb:cc:96:93:e1:d2:78:5b:2c:
4d:ac:23:9a:92:74:e5:b7:98:16:c7:ba:06:c4:25:a7:53:1d:
84:e6:3f:33:33:2c:f0:d8:7b:d5:e3:7d:80:10:84:c3:51:f0:
8d:6d:e1:a0:81:50:d1:f0:dc:16:1d:e6:ae:6e:84:a2:db:24:
89:88:cb:21:ff:2a:eb:a2:b4:18:9c:5e:9f:77:47:55:b7:73:
72:32:dd:98:d0:d7:04:7d:38:62:b0:d3:6a:8d:a8:13:ce:bb:
07:28:68:48:89:3d:63:88:3d:0d:d1:7f:b3:0c:1f:df:b4:c8:
00:47:3b:77:3a:97:5a:ef:01:7b:67:d3:a3:bb:e9:14:92:cb:
b4:03:3a:87:47:fe:eb:af:6d:de:ac:9a:8b:59:ce:c6:02:81:
f7:a3:38:ca:55:fe:3b:ad:49:16:2d:fc:40:c4:ee:0f:5f:0e:
8c:16:2b:55:e8:87:84:7b:31:e4:d6:ce:01:be:d2:3d:4d:22:
6a:f7:9d:0c:a5:7a:31:82:da:ca:12:f3:67:a3:82:a7:de:02:
c8:69:be:d8:30:82:09:78:07:8c:cf:da:20:d8:d6:6d:04:2f:
04:ca:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 09:02:05 2023 by rpki-client on console-ams.rpki-client.org