Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20383334.roa
File: 3231322e32332e3231392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: u7zkcrM7Ks+hyhwq0+tMSzd0ts7DX82+MACQvFc2wHw=
Subject key identifier: 6C:C3:EB:3B:C5:A3:23:EB:97:24:DA:D9:98:CA:93:09:58:24:5A:8D
Certificate issuer: /CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Certificate serial: 67238DDF17295F234B2D3218FBD46F492A021F3F
Authority key identifier: EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20383334.roa
Signing time: Tue 09 May 2023 00:00:08 +0000
ROA not before: Mon 08 May 2023 23:55:08 +0000
ROA not after: Tue 07 May 2024 00:00:08 +0000
asID: 834
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:23:8d:df:17:29:5f:23:4b:2d:32:18:fb:d4:6f:49:2a:02:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Validity
Not Before: May 8 23:55:08 2023 GMT
Not After : May 7 00:00:08 2024 GMT
Subject: CN=6CC3EB3BC5A323EB9724DAD998CA930958245A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:98:d1:1a:af:e9:71:47:19:5e:fe:2b:f3:
de:41:8a:45:d9:ce:42:e7:a8:58:8d:8a:43:58:61:
98:4a:33:3e:fb:9a:d4:84:2e:24:c9:82:41:a0:06:
68:77:6e:8b:e8:6f:2f:1e:b3:14:2e:86:63:d4:81:
7e:28:6b:29:f7:60:b8:7e:65:96:04:b0:c6:a2:25:
64:36:e2:54:17:e8:c4:fa:b8:b2:c2:85:49:b6:03:
54:35:9e:de:fa:8e:ba:61:d6:cf:a5:25:75:cc:ab:
43:77:25:12:6e:ac:99:32:a7:12:d6:c3:95:aa:a4:
2c:73:85:1b:13:1a:8b:bd:94:4c:d9:9a:a0:ab:98:
4c:64:7d:11:5f:75:f4:98:61:ab:74:72:78:ae:30:
b8:53:27:71:ea:3a:fe:09:ae:09:29:a0:43:e0:21:
81:e0:9f:b0:0b:bc:ba:2b:82:00:55:36:f6:fa:e8:
41:5f:86:1b:b1:2c:db:ba:2f:a7:ac:ef:ff:61:6b:
f7:f7:18:ea:bd:9c:56:c6:71:3c:a4:aa:11:02:07:
7f:eb:71:ad:a6:93:41:06:2b:0c:ec:e6:c1:d9:53:
f0:ce:44:cf:07:7d:5b:3d:72:58:8e:da:08:35:3a:
42:7f:09:f3:cd:1e:d7:08:04:e5:75:7b:3a:19:a3:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:EB:3B:C5:A3:23:EB:97:24:DA:D9:98:CA:93:09:58:24:5A:8D
X509v3 Authority Key Identifier:
keyid:EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/3231322e32332e3231392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d2:d1:84:a3:b5:4d:24:c8:a1:74:02:dc:92:b7:07:0e:fa:
28:28:ad:e0:e5:1b:9f:d2:36:47:6b:0b:1e:37:42:af:52:1d:
a1:f3:f1:b8:76:4f:8a:a6:28:0f:4b:b2:8e:83:0b:a2:5e:c6:
eb:d9:e5:75:9c:5b:39:8f:7a:44:6c:19:52:dd:7c:4c:af:73:
f5:e4:8e:b0:40:8b:84:6b:0e:ca:f4:c7:b0:ce:49:0b:fa:ce:
f4:22:fc:c0:34:60:c9:d4:3c:d6:70:f4:f2:47:bb:1f:dc:0d:
48:cb:50:79:7b:7a:e9:a6:7c:9a:9e:22:6f:31:5e:bf:7b:77:
84:b1:5c:07:f8:6c:b4:16:97:34:91:ea:ab:21:d3:6b:d1:25:
d7:b8:08:d0:3f:4a:25:91:04:bb:6c:f3:41:33:8f:c1:b0:f5:
08:c8:8d:fa:e7:1e:f8:6c:b0:38:b5:52:ce:2d:e1:cc:01:99:
02:ce:f1:f1:d4:0d:5e:00:23:1a:ba:84:5d:1c:4c:22:49:ab:
69:a8:df:53:46:4c:5f:8f:38:99:cf:64:73:d4:77:b5:02:48:
0d:42:30:15:7d:cf:b9:e8:b2:2e:45:e0:8d:75:39:d7:13:46:
db:88:0e:a5:b0:52:18:72:7f:a0:f7:2c:e5:ea:1d:60:35:fd:
3b:a4:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org