Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20323135323837.roa
File: 3231322e32332e3231392e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 083KzmRCKGBMnyuqHnsEe0S+6VUYTm3szB/7+QoFLJ8=
Subject key identifier: D4:8D:0A:E4:F3:1B:2B:76:76:2C:04:F6:E6:9C:55:97:34:FB:4C:95
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3BA09014A0F3FB031832FE4D3D5DF150DBED1A26
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 15 Feb 2025 14:41:18 +0000
ROA not before: Sat 15 Feb 2025 14:36:18 +0000
ROA not after: Sat 14 Feb 2026 14:41:18 +0000
asID: 215287
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a0:90:14:a0:f3:fb:03:18:32:fe:4d:3d:5d:f1:50:db:ed:1a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 15 14:36:18 2025 GMT
Not After : Feb 14 14:41:18 2026 GMT
Subject: CN=D48D0AE4F31B2B76762C04F6E69C559734FB4C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:18:44:4a:bf:ce:02:0c:00:dc:ea:c4:4f:
da:b3:15:03:6b:da:fe:bc:1b:c3:46:eb:bf:51:30:
4d:6e:0b:16:cc:27:14:bd:c2:94:db:ee:b3:1d:40:
97:a1:1e:fe:b8:d8:dd:62:34:09:6e:c4:ae:83:92:
12:5a:5a:ee:7b:68:c9:c5:14:b5:34:cf:38:e9:77:
b8:24:03:be:a7:e2:58:1b:d2:7e:40:1c:88:4c:b1:
12:e5:da:aa:5c:a1:c6:da:34:3a:de:0b:92:0b:92:
c7:ce:e4:69:5a:9d:8a:c1:7e:72:77:91:f2:28:3d:
2c:91:f5:c3:2e:31:22:39:a7:47:5d:4e:c3:3a:c6:
c6:e1:e5:17:6d:d6:d5:ca:dd:87:2e:e8:ae:4f:10:
ef:d8:c3:3f:02:32:79:36:14:38:65:da:cf:89:90:
ef:fa:5a:62:b1:87:fd:b2:ff:6e:88:aa:2d:84:c2:
95:f0:14:28:f1:92:1f:b8:9a:1f:4c:1e:2b:e6:0b:
ea:e8:93:15:97:56:b7:c6:87:15:bf:78:93:15:1c:
81:c3:79:bf:01:99:95:e1:c7:b3:cf:21:1b:2c:58:
04:8d:89:37:07:2d:5e:ef:14:a0:61:f8:5d:10:3d:
b3:fc:63:b0:ea:c5:d5:c3:a7:2a:a2:7b:5e:87:23:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:0A:E4:F3:1B:2B:76:76:2C:04:F6:E6:9C:55:97:34:FB:4C:95
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e8:5e:b3:79:3c:2e:96:22:a6:26:56:ee:f2:49:8a:c5:c2:
c0:71:c9:3c:2c:a5:04:04:9f:20:d4:ca:12:a7:b1:7e:5e:00:
a9:31:32:bf:64:3e:79:33:de:d7:72:de:6a:84:39:14:ec:37:
f0:3c:fd:12:46:ef:00:8a:a6:cc:42:e0:31:f5:ad:a0:2c:dd:
b2:fe:39:7c:7b:db:af:05:40:6b:5a:c1:76:92:f4:0d:b4:d4:
4f:1d:9e:de:2f:22:46:ff:36:c2:51:1e:f1:2f:0e:ff:93:4f:
c7:98:56:d4:11:7a:e9:1d:c8:ba:54:9c:fb:09:ca:ea:18:cf:
75:fd:cc:38:c6:74:c4:2e:dd:3f:de:c9:05:d5:d9:88:f1:95:
1e:52:49:c0:a1:8e:cc:cb:78:6d:e4:03:03:c8:db:e6:3f:23:
58:b5:81:99:fd:cf:7b:5a:a2:ca:51:a6:80:3e:ab:2f:28:38:
14:fd:f1:3f:9f:8e:df:f8:d6:35:75:3a:14:c6:ab:bf:79:2f:
ad:a6:d1:22:ab:b1:59:b4:b7:23:cd:2c:40:5d:2f:0c:1a:bb:
27:04:48:34:0f:48:b2:fe:13:03:ae:61:82:2e:da:90:41:51:
30:31:fa:f3:03:91:0d:a8:29:19:41:6b:9f:f4:19:a5:9b:70:
3e:82:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:04 2025 by rpki-client