Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
File: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Sn6E0/LEMJElRRcaa2I0QZmbsmReaUnRn1FdfglwCp0=
Subject key identifier: 67:11:C4:98:D2:CC:25:DC:47:AE:A2:35:CB:68:EA:EF:18:FC:10:7A
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 0A9BCD11CE573A7A5C82F851B5D66F2E52BA345D
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Mar 2025 00:04:50 +0000
ROA not before: Wed 26 Mar 2025 23:59:50 +0000
ROA not after: Thu 26 Mar 2026 00:04:50 +0000
asID: 834
IP address blocks: 212.103.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9b:cd:11:ce:57:3a:7a:5c:82:f8:51:b5:d6:6f:2e:52:ba:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Mar 26 23:59:50 2025 GMT
Not After : Mar 26 00:04:50 2026 GMT
Subject: CN=6711C498D2CC25DC47AEA235CB68EAEF18FC107A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:60:d6:96:08:61:a6:d2:5c:07:76:b3:b5:
a7:11:6e:8f:25:87:a6:3d:ab:ff:ab:76:0b:f1:bf:
46:66:8e:83:d1:43:0d:0f:45:61:d4:53:38:1a:8a:
ae:7b:6f:59:bf:b4:f2:2b:a7:42:a8:88:40:44:c7:
09:92:50:a5:06:1d:01:59:88:84:b9:92:0d:72:09:
fd:c7:81:17:21:5d:b8:b5:54:10:5e:fa:9b:14:13:
e9:2b:d8:f2:dd:25:a9:f1:2d:90:a8:5e:a7:6e:5c:
09:70:6a:ef:68:1f:f9:0a:b0:ee:4e:28:36:75:8a:
e1:f3:67:60:ed:14:fd:55:eb:6b:14:e2:1b:d5:ba:
da:e0:97:1b:2a:9b:24:6b:21:9f:f9:7e:18:d3:3f:
89:d3:cb:11:13:e6:22:9e:f4:38:96:7f:9a:7b:5e:
44:62:d6:31:25:19:91:28:61:7e:60:82:86:53:30:
fa:8a:31:09:e3:e0:1c:ac:3f:c1:8e:80:37:6e:c4:
05:be:73:f4:bd:4f:c9:68:31:96:a9:6e:fc:37:3f:
c5:fe:3b:98:15:e2:47:b5:b4:44:2f:fe:53:fc:6d:
52:a3:a8:b0:6d:ba:0f:e7:39:e4:d9:30:a8:bf:49:
e2:34:5b:13:76:36:0c:c4:0c:e8:1c:1e:33:0d:ac:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:C4:98:D2:CC:25:DC:47:AE:A2:35:CB:68:EA:EF:18:FC:10:7A
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:06:8b:20:78:21:fe:22:8b:f1:77:20:3d:0a:c1:a5:46:46:
5d:d0:d5:9e:6c:a7:71:78:cb:e3:86:9e:88:99:63:5c:4c:74:
c2:da:da:50:42:be:f3:d1:a6:65:e0:8b:eb:c1:d4:70:0e:91:
96:3e:55:29:bc:c0:04:18:44:f7:c2:e8:75:de:57:f1:b6:71:
a3:6a:45:eb:cc:28:46:b2:18:d8:61:ee:9e:5a:39:8f:ef:7d:
e0:4a:09:b5:04:6f:3b:90:92:67:b3:fe:6d:ce:90:04:35:60:
37:c7:d1:04:79:d8:97:d5:44:e1:9f:bb:9f:3b:f9:bc:a0:a6:
38:64:6f:b9:81:88:3a:a4:4b:12:61:55:e0:34:06:7f:ae:fd:
69:4a:95:d9:da:5d:91:25:09:ab:a6:d5:77:9f:b6:c6:86:a7:
e3:28:ec:69:8c:7f:62:9b:7b:39:a0:ed:09:cd:0e:bd:fc:95:
ff:36:a8:90:fd:b5:85:2b:88:15:0a:71:95:50:bc:3c:d9:18:
7f:8e:30:37:b2:02:c7:bb:e6:79:53:59:fe:2e:21:81:80:b7:
98:0a:ba:5a:d2:4b:d8:ac:ca:95:d2:0b:86:88:57:2e:2f:79:
d9:d3:a9:56:a7:9f:24:96:f8:06:57:c9:32:85:f7:94:cc:55:
e5:ac:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:29 2025 by rpki-client