Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
File: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: 6QTw4pga0OhIcRKM6nmz+hpVohAJM7p0bskWg79JJXk=
Subject key identifier: BD:7C:DA:57:83:B0:8E:97:86:84:AC:BA:7B:4B:9F:B9:C1:8B:44:9D
Certificate issuer: /CN=83e701c2fce97b5672b4aba6211b90f97e197b6d
Certificate serial: 47629679C9590775CF34FF8275F802EAECBD05C4
Authority key identifier: 83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
Signing time: Thu 23 Mar 2023 16:21:35 +0000
ROA not before: Thu 23 Mar 2023 16:16:35 +0000
ROA not after: Thu 21 Mar 2024 16:21:35 +0000
asID: 19437
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:62:96:79:c9:59:07:75:cf:34:ff:82:75:f8:02:ea:ec:bd:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e701c2fce97b5672b4aba6211b90f97e197b6d
Validity
Not Before: Mar 23 16:16:35 2023 GMT
Not After : Mar 21 16:21:35 2024 GMT
Subject: CN=BD7CDA5783B08E978684ACBA7B4B9FB9C18B449D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:80:8f:85:6d:b3:cc:28:11:3c:ed:b3:55:
29:ff:47:88:f2:63:a3:ac:f9:cb:d8:8d:d9:f0:8d:
d5:e8:50:7a:44:b5:88:c1:8f:be:92:45:be:36:b9:
81:2d:d1:99:52:bc:9b:8b:78:49:eb:b3:31:8c:27:
bd:94:1e:6a:cf:20:72:e2:db:c9:66:74:46:56:cd:
f6:90:7b:97:06:c4:e1:49:b6:2e:44:48:16:84:09:
ed:91:0b:43:a7:c9:e2:77:4f:bd:5e:ad:55:9a:9c:
36:b9:1e:c7:cd:61:32:3e:f7:64:83:72:64:5e:02:
11:e6:2b:a4:c7:7e:d7:fa:d6:14:e1:98:25:bf:e5:
7d:b7:d1:1e:15:ae:04:d9:73:d2:42:f2:e4:cd:d0:
7d:e7:02:be:8d:07:c9:3a:f2:ac:15:fe:eb:cb:cd:
2d:4e:49:35:46:80:e2:24:f5:73:c9:0f:43:2c:ac:
78:71:ef:47:a5:26:c7:2e:72:6c:7a:38:8c:61:d7:
30:fa:db:ac:b5:b5:6d:7f:32:98:13:01:28:06:05:
72:e5:bf:85:08:43:35:71:c2:b1:e1:22:54:f1:f8:
a5:fb:1e:11:75:dc:a6:71:26:c7:02:43:8f:dc:81:
ee:b5:af:20:2b:32:b3:ba:29:04:ef:c9:c4:2c:50:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:DA:57:83:B0:8E:97:86:84:AC:BA:7B:4B:9F:B9:C1:8B:44:9D
X509v3 Authority Key Identifier:
keyid:83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a8:f8:63:71:84:c9:9a:24:69:9e:41:20:dd:58:4c:c2:da:
e6:a9:02:8d:fa:98:19:1a:51:93:eb:61:fb:32:f1:96:e9:df:
20:ea:92:cf:f1:80:4d:a8:38:fa:9f:a3:36:f1:c9:c0:ca:3d:
3a:54:10:7b:4c:12:4c:7f:0f:72:c7:35:08:0d:d1:50:a6:82:
71:ff:83:18:84:28:54:90:24:f4:97:88:80:7d:35:61:b4:12:
78:35:7f:3b:e2:e4:92:a2:63:78:d0:8c:be:cd:c9:dc:45:42:
4d:dc:1d:88:82:75:ee:a7:3b:43:84:0c:5a:4d:fe:98:4a:13:
5e:a9:07:98:86:71:ad:14:ad:76:57:c8:42:05:62:4b:92:52:
86:e1:df:f4:fd:a5:00:0a:ef:8b:50:e0:64:15:c2:ad:83:6a:
51:6c:dc:c7:12:e1:25:b3:35:53:62:ee:7f:12:bd:7b:d1:7f:
45:20:b1:4e:3c:c7:e7:75:5a:fb:5a:ce:4d:c4:3f:f5:b4:f2:
da:6d:91:94:8c:84:64:de:0c:69:eb:04:8f:67:3f:e8:a8:4e:
f4:a2:5a:a7:0f:d8:bb:14:ad:c7:38:a0:cd:48:72:fe:b6:5d:
d8:fb:70:7b:1c:e6:d7:ca:65:ad:78:f5:fd:6d:66:2c:19:3e:
17:2a:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org