Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303234.roa
File: 3231322e3130332e34362e302f32342d3234203d3e20323134303234.roa (raw, json)
Hash identifier: +O7KmmeGOAiM/7s29OldzouDmAm6+0CBbCoI9maEmZo=
Subject key identifier: 1C:5F:8A:00:BD:22:1E:27:B1:00:BA:FE:43:7C:C2:63:C2:56:70:A8
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 5C481F9BDC255E2E2E7EB953FA879054559DB6CE
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303234.roa
Signing time: Tue 31 Dec 2024 13:22:15 +0000
ROA not before: Tue 31 Dec 2024 13:17:15 +0000
ROA not after: Tue 30 Dec 2025 13:22:15 +0000
asID: 214024
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:48:1f:9b:dc:25:5e:2e:2e:7e:b9:53:fa:87:90:54:55:9d:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Dec 31 13:17:15 2024 GMT
Not After : Dec 30 13:22:15 2025 GMT
Subject: CN=1C5F8A00BD221E27B100BAFE437CC263C25670A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:3f:9c:b3:88:77:78:d9:96:4e:dc:43:2a:
04:4b:3f:da:b7:35:9d:8c:d2:da:b5:e5:e9:f4:2e:
b4:f9:3f:74:89:56:1e:6f:99:ca:99:81:bc:97:ac:
af:95:cd:84:1e:b9:76:2b:86:25:d4:a3:a6:c2:c3:
77:7a:83:a7:4a:d6:a9:7f:f1:e4:48:9b:09:6f:13:
1f:8b:93:a6:7d:c9:e1:59:ed:4f:09:8a:e0:b6:a3:
1a:85:82:6e:11:f7:ea:16:e5:60:31:29:c2:1f:6c:
2d:f4:49:99:d7:a0:11:81:60:af:fc:fb:0f:49:55:
13:43:cd:0b:9d:46:08:4f:42:1e:99:0b:bf:34:77:
4c:bc:ba:c0:3f:68:1a:55:c4:6d:13:ad:18:f0:eb:
db:60:10:aa:b6:bb:19:44:1a:f0:9b:23:72:b2:e3:
dc:4a:2a:ad:e1:e6:2c:65:f2:19:33:b4:8e:c9:02:
71:a3:b1:57:09:51:73:b1:ea:c1:cd:aa:df:d8:99:
c5:d3:23:f0:46:57:b7:72:92:07:88:2e:40:5d:bd:
ac:74:72:80:31:a4:5d:ef:44:33:e3:14:9b:5e:cc:
b4:16:57:96:88:28:b8:e7:ed:04:5d:4b:84:8c:09:
1b:c6:ee:a5:52:0f:c9:bd:51:3c:83:60:c9:04:d7:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5F:8A:00:BD:22:1E:27:B1:00:BA:FE:43:7C:C2:63:C2:56:70:A8
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20323134303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
57:45:d0:3a:a2:0f:b1:32:f2:c3:31:92:79:9e:51:06:f0:77:
76:2a:d5:3b:14:2d:0f:79:73:3f:d8:56:80:e8:6c:fc:89:40:
c9:a5:ba:f6:cc:d7:fe:6a:c4:01:e3:f8:19:09:d3:d1:95:a9:
81:b6:1a:a5:5a:e8:d3:35:ef:10:48:c6:c4:02:aa:55:10:54:
4d:e3:fb:23:66:c2:09:89:e3:8a:55:3f:50:2a:8a:24:b1:0d:
d2:88:c8:49:05:fa:5c:04:5a:d4:d5:27:4a:e8:cc:82:63:7a:
18:73:7a:82:cc:b0:3c:3d:ae:fc:f8:16:9e:9e:78:0b:27:48:
2e:eb:66:91:3c:61:52:ec:42:3e:a4:43:4b:ce:7f:9b:0a:01:
32:ec:4e:b8:74:5a:6e:08:20:27:11:d5:34:87:07:bd:b1:10:
90:73:f0:d1:15:7c:d7:9f:b9:2d:a4:23:16:de:10:35:0f:c1:
55:21:3e:5f:8d:e0:49:d6:31:e9:8d:ae:c7:ea:c7:80:ed:25:
5f:c4:1d:24:40:b9:b6:d0:71:eb:07:2a:a1:bd:d5:44:a6:cb:
d5:6c:62:4a:eb:8f:e4:68:4f:ab:67:47:48:39:51:58:09:dc:
3e:2a:37:d9:5d:60:11:5a:9d:a2:c9:41:a0:ab:a7:e3:61:cb:
8a:1c:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:44 2025 by rpki-client