Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
File: 3231322e32332e3231392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: TooHw1s64/pEeT6ufKcCsjP/Sjk3uJ3LjjvTj5vPmpI=
Subject key identifier: 4E:0D:81:96:F6:F9:E9:25:10:5A:FE:64:21:D4:85:EC:5E:CB:C9:01
Certificate issuer: /CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Certificate serial: 79C60839DCD5178C5329FE6F8C5D940122A4281C
Authority key identifier: EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
Signing time: Wed 10 May 2023 06:34:07 +0000
ROA not before: Wed 10 May 2023 06:29:07 +0000
ROA not after: Wed 08 May 2024 06:34:07 +0000
asID: 61317
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c6:08:39:dc:d5:17:8c:53:29:fe:6f:8c:5d:94:01:22:a4:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Validity
Not Before: May 10 06:29:07 2023 GMT
Not After : May 8 06:34:07 2024 GMT
Subject: CN=4E0D8196F6F9E925105AFE6421D485EC5ECBC901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:ec:9f:18:f8:71:bf:76:d0:e6:f3:fd:70:
cf:3b:53:bf:d4:8d:d9:e2:3d:ef:fa:fd:9b:cb:59:
c9:47:fc:a8:2b:1c:c9:7b:8b:f9:8f:0c:0b:76:3b:
e9:87:ec:63:64:9c:cc:82:9a:88:a4:bf:b9:61:82:
23:93:90:81:56:ca:d4:c3:1e:1b:8c:d3:0e:0d:f3:
11:61:44:fd:5b:4d:86:30:4f:bc:15:38:c8:9e:86:
26:30:03:89:89:f4:95:cb:1e:dd:c9:bf:3b:53:52:
85:71:b4:56:1d:cd:13:1c:d6:c9:d5:0d:20:0e:c7:
ac:70:ba:49:f9:6f:62:73:1c:6a:0f:d3:d3:cb:fc:
d5:d8:06:53:54:37:75:52:e3:d5:09:e6:8f:9e:65:
9c:76:a0:6b:3c:a7:d2:ad:00:dd:fe:97:7d:95:82:
10:da:f2:23:1e:a6:80:72:f7:15:b1:73:12:91:73:
8c:69:6e:62:56:81:d0:9b:8a:fe:3c:22:b9:30:2e:
d9:fa:14:53:68:21:f6:d4:23:22:2a:ff:02:e4:f0:
50:94:9e:bc:c5:85:ac:fc:82:69:a2:93:d6:ea:04:
d0:a5:29:cc:2c:5d:ef:44:a0:45:0a:4a:89:21:12:
9b:9d:5f:c9:59:dc:84:eb:36:17:b2:6d:33:fc:a8:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:81:96:F6:F9:E9:25:10:5A:FE:64:21:D4:85:EC:5E:CB:C9:01
X509v3 Authority Key Identifier:
keyid:EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:91:d1:41:27:23:c0:8a:69:93:4c:d6:f3:19:df:5a:be:3a:
ec:7e:bb:ab:24:43:ce:8c:ed:ad:48:de:d7:7b:2e:dc:44:51:
fb:d0:16:ed:e6:3a:15:f9:7f:77:1e:82:7b:ec:bc:2a:e9:ba:
cb:d2:fc:85:4b:2f:5f:57:59:30:a5:3f:a9:c5:13:7d:25:47:
c0:e6:38:72:38:1a:de:d9:de:34:63:72:74:e7:6e:71:e0:a9:
c5:67:20:12:2c:ad:d3:ea:b5:25:61:d5:4f:ae:b1:10:46:08:
17:d1:1c:75:61:9e:92:6a:6b:d2:5e:61:c4:0d:2c:a8:2a:b0:
37:17:0a:5c:eb:fb:a9:c9:ea:f9:3b:ee:ae:9b:92:42:61:e5:
82:61:fa:54:86:11:e2:9c:71:4e:3e:f4:71:ac:c8:77:04:0f:
d3:7c:39:9c:bf:6a:55:ad:d3:c8:63:cf:77:9a:16:3a:40:45:
3c:bc:b4:8c:a0:0b:22:b4:e3:b1:8a:c6:36:14:fb:13:c1:d4:
8f:e3:66:cf:08:4e:5c:1d:fa:0d:d2:e4:b6:c6:cc:ee:ed:e1:
5a:1d:e6:49:eb:23:c1:f5:5e:1b:ee:f7:e3:63:7f:80:07:9f:
c6:a9:d8:f3:af:f7:ec:39:26:17:9b:f0:06:19:9a:78:e8:e7:
89:18:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 10:55:27 2023 by rpki-client on console-fra.rpki-client.org