Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20323039323630.roa
File: 3231322e32332e3231392e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: JFOjXMhZ7XgVRDy0rutbkJf7rVb5fSWbzgwPy9whvyU=
Subject key identifier: 18:82:93:1F:00:D2:C5:3B:76:A4:88:07:69:36:4F:ED:15:7D:88:A4
Certificate issuer: /CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Certificate serial: 4AB7C658DA745965BA7BC042BA44DE4C69E076AC
Authority key identifier: EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20323039323630.roa
Signing time: Wed 22 Mar 2023 06:24:54 +0000
ROA not before: Wed 22 Mar 2023 06:19:54 +0000
ROA not after: Wed 20 Mar 2024 06:24:54 +0000
asID: 209260
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b7:c6:58:da:74:59:65:ba:7b:c0:42:ba:44:de:4c:69:e0:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Validity
Not Before: Mar 22 06:19:54 2023 GMT
Not After : Mar 20 06:24:54 2024 GMT
Subject: CN=1882931F00D2C53B76A4880769364FED157D88A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:2b:cc:09:ce:e5:06:1d:c2:81:df:ac:aa:
87:b4:f9:43:b5:fd:82:2b:c3:02:e6:04:45:df:bb:
40:f5:7b:52:72:44:48:39:a6:e2:c3:d9:30:a9:0c:
6e:64:48:28:4d:c5:d3:cb:27:b1:5d:fa:a7:f8:13:
34:14:09:f8:05:09:61:25:ce:16:7d:25:f1:e6:4c:
31:28:9c:96:c5:d3:c6:f6:81:4c:5d:53:4c:b1:e5:
eb:d7:d4:d5:d5:bc:53:f4:27:ff:e3:2b:f0:d1:af:
7b:bf:e1:c8:45:2f:55:11:88:33:aa:de:0c:32:af:
41:6a:3a:6b:ff:dd:71:a1:c3:87:96:24:65:19:dc:
0b:5a:76:97:44:57:74:09:60:c6:6e:7f:59:78:dd:
83:cb:38:fc:cf:6a:4f:b1:9b:b0:da:37:33:e3:97:
52:24:5c:ae:bb:04:6b:60:fc:82:a3:7f:ad:ca:d8:
59:11:f6:8c:77:fd:1b:b9:b0:79:3d:c0:37:27:e1:
4b:6c:fc:d9:37:ac:87:de:aa:69:b9:42:8f:d9:b6:
3c:a6:8b:d5:f2:e9:cb:8e:3d:27:6c:f9:5c:2a:df:
ec:44:c3:64:99:a3:2f:d4:eb:d3:03:15:ec:e1:44:
3a:09:d9:88:7d:a1:cf:24:cc:2a:ba:49:eb:b4:92:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:93:1F:00:D2:C5:3B:76:A4:88:07:69:36:4F:ED:15:7D:88:A4
X509v3 Authority Key Identifier:
keyid:EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2f:60:89:b1:51:71:06:4d:61:37:81:3c:1b:7b:d4:52:a9:
e5:21:ce:70:52:e6:72:b5:ac:03:19:da:5c:8b:d1:1f:6a:22:
51:37:4e:e4:27:97:0a:3b:95:88:60:44:b2:0c:15:90:63:d3:
b5:0b:2a:c4:89:c6:cf:39:77:49:c9:47:4a:33:4e:4b:da:d9:
95:59:61:18:b6:c6:d4:12:89:2d:63:a2:49:6b:03:e1:9e:64:
7d:4e:2e:0f:d4:ac:2c:00:30:c0:9d:35:0e:4b:13:09:de:15:
2c:63:80:fa:4e:31:1d:9a:a0:89:dc:3e:9c:38:5f:97:14:02:
84:2f:6c:0e:70:3f:7c:45:a2:ae:65:a7:76:a9:d6:0b:16:40:
28:60:98:8d:f7:cc:67:75:62:d8:6e:61:d6:d1:6a:5c:83:3b:
35:68:c5:12:e7:f6:ef:4b:d9:e1:e6:d7:d3:4a:52:8b:1e:87:
48:a2:a4:ac:45:2b:7d:3c:1b:4f:18:b2:4b:a8:b8:fc:b1:f6:
d6:e4:ee:2a:66:1c:eb:f0:b9:54:d7:ba:b4:ec:9f:b9:84:4e:
96:c2:af:8c:f0:04:26:b5:52:dd:41:50:a7:71:5d:99:07:6e:
62:c0:35:09:cb:15:21:f3:ba:a6:d6:27:b7:5e:d6:a6:03:b7:
48:86:4f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org