Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
File: 32372e302e3233352e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: IPIYhPOwPSV8EmyKu7ahAdsreN4Ne9f98AplJjQnFjw=
Subject key identifier: 94:48:32:6E:3C:D4:7E:4C:AA:C3:2B:88:CD:BA:0A:1E:A5:8B:5A:7D
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 12C0C715153389257DACC40B936CB8F7AD733A97
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 138995
IP address blocks: 27.0.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c0:c7:15:15:33:89:25:7d:ac:c4:0b:93:6c:b8:f7:ad:73:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=9448326E3CD47E4CAAC32B88CDBA0A1EA58B5A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:7d:97:33:08:e1:24:d8:0a:cb:63:75:9e:
03:3d:3f:d0:ca:71:36:38:1a:d0:1b:7a:8a:85:90:
8c:0f:f6:3e:94:4d:16:55:06:bc:8a:96:95:09:7a:
84:02:b9:27:e7:d6:f6:59:f5:08:5c:70:02:61:f5:
81:ba:89:5c:04:37:7b:be:c3:99:cf:09:1d:89:5e:
50:f4:80:37:3b:f9:34:a0:0d:75:7a:4e:b8:47:01:
86:7d:ad:f2:1b:22:aa:41:2d:99:5e:6a:59:90:ee:
62:72:0c:74:30:2a:57:28:97:1f:e5:23:72:50:32:
f6:5b:85:6c:c8:79:21:eb:51:09:dd:de:39:b9:3a:
a9:08:74:e3:9a:e8:2e:85:68:6f:db:6a:82:30:39:
1c:27:a0:90:35:87:0f:5a:b2:ac:9a:3b:4d:53:10:
a0:78:75:8e:b8:c2:ca:f1:ac:8d:29:09:d0:57:15:
5d:68:24:00:ce:44:6f:5f:09:8e:ff:98:50:82:be:
f9:ca:27:4e:2c:cb:1b:b1:e1:11:7b:34:01:47:6e:
98:3f:99:b3:d8:74:f3:3d:48:f6:6b:fc:b1:22:be:
f2:b4:14:8c:21:32:99:71:b3:3a:b6:7a:26:1b:74:
ad:56:9d:23:fe:31:cf:fe:83:56:a5:6f:cc:58:84:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:32:6E:3C:D4:7E:4C:AA:C3:2B:88:CD:BA:0A:1E:A5:8B:5A:7D
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233352e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b2:24:76:24:82:b5:5e:fa:3b:fa:13:92:f4:e9:fb:ea:50:
fc:78:bc:27:61:85:87:2c:86:1f:f5:8e:e3:3b:a2:80:05:62:
68:55:ae:6e:36:c4:39:ab:7b:5b:ad:fb:d9:b8:64:3b:b0:8f:
76:1f:48:11:68:d5:0d:ee:25:88:79:bb:58:f7:3c:8c:4e:4e:
b4:52:8a:63:2e:68:4a:f0:10:b2:f7:ee:08:a4:7a:6e:4f:4b:
dc:d3:11:40:b7:c2:66:e1:95:d4:67:ee:70:82:65:ea:77:46:
e6:d1:ee:2f:69:11:34:b7:08:9f:4f:8e:2c:fc:f2:ba:fa:e1:
26:e2:12:c7:ee:80:c0:86:4f:f1:1f:10:f9:8a:70:de:ac:a4:
bf:82:23:53:99:57:10:33:3b:79:45:62:4f:d3:0c:a3:59:c2:
23:d2:75:4f:a5:56:d2:5e:dc:04:e5:b4:91:01:47:ad:8e:79:
24:f6:7c:1d:c3:3e:91:df:d8:e2:48:62:9a:ab:4a:31:a2:f2:
60:52:d3:94:3f:78:b3:7f:9a:39:d1:a1:35:0a:6e:15:f2:82:
f1:41:cb:01:5e:91:e4:ad:01:3d:73:0d:49:84:bf:5a:fa:48:
f7:50:2d:88:91:40:fb:8f:cb:bd:b0:d1:d7:82:c6:2e:80:1c:
01:f3:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org