Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/3231322e32332e3230342e302f32342d3234203d3e20323131353030.roa
File: 3231322e32332e3230342e302f32342d3234203d3e20323131353030.roa (raw, json)
Hash identifier: 31OWdH8fktM8+7xfsqHfhSZ7AzsSlku4ja7yQc8uHcQ=
Subject key identifier: EE:0E:98:E2:22:1E:A8:8E:2A:4D:10:97:C0:B1:3D:E3:62:F8:0D:7A
Certificate issuer: /CN=0ecba32edad039b946ada51080d478fb75da2cb5
Certificate serial: 499668EAD26C60AD09BD264C3135E51C60C4E6F2
Authority key identifier: 0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/3231322e32332e3230342e302f32342d3234203d3e20323131353030.roa
Signing time: Mon 18 Dec 2023 00:32:06 +0000
ROA not before: Mon 18 Dec 2023 00:27:06 +0000
ROA not after: Mon 16 Dec 2024 00:32:06 +0000
asID: 211500
IP address blocks: 212.23.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:96:68:ea:d2:6c:60:ad:09:bd:26:4c:31:35:e5:1c:60:c4:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecba32edad039b946ada51080d478fb75da2cb5
Validity
Not Before: Dec 18 00:27:06 2023 GMT
Not After : Dec 16 00:32:06 2024 GMT
Subject: CN=EE0E98E2221EA88E2A4D1097C0B13DE362F80D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:f2:47:f5:8e:05:6c:5a:25:06:3f:35:1f:
17:1c:49:9e:c7:b4:a6:ce:5c:79:db:41:d9:54:4c:
db:00:f7:28:a5:76:38:40:f3:c1:e8:46:b7:52:8f:
dc:8c:7d:38:80:85:8c:24:41:a9:43:da:c2:00:09:
e7:f2:be:53:c3:17:58:24:cb:d7:3a:f7:0f:3e:03:
88:1e:48:33:df:10:67:be:32:63:a8:5b:76:57:34:
cf:81:cf:13:29:37:df:80:8f:9d:d0:f6:5f:ed:3d:
0b:80:a1:f9:dc:d9:9c:c1:e3:8c:c1:91:91:77:f2:
7c:24:ba:45:d5:3f:03:69:23:2c:72:23:ea:b2:24:
6d:f8:a3:8d:7b:e8:c3:04:f3:15:8b:cc:5f:e2:df:
95:20:57:19:71:ce:1e:7d:2c:96:28:eb:30:2b:a1:
11:73:a6:60:92:7a:75:95:b0:b8:56:26:14:3e:82:
0a:5d:62:6b:34:9f:74:38:ae:3f:a8:db:80:d3:a0:
8f:e2:e9:37:cb:e0:dc:9a:3a:9a:9e:f0:40:0e:5f:
78:14:49:84:7b:c4:1f:be:42:35:b7:40:62:63:9a:
87:67:39:68:83:d4:bb:92:f2:d4:fe:f9:2f:cf:5d:
65:56:0e:50:a5:c4:f3:cf:bc:d6:85:5f:a1:d9:fb:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:98:E2:22:1E:A8:8E:2A:4D:10:97:C0:B1:3D:E3:62:F8:0D:7A
X509v3 Authority Key Identifier:
keyid:0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/3231322e32332e3230342e302f32342d3234203d3e20323131353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:db:03:34:e9:b6:4c:7b:61:bc:79:a5:c6:48:98:e8:a4:e3:
bb:74:66:c9:92:88:ec:c4:02:89:c3:e2:3b:8c:25:3c:eb:48:
e4:0f:46:4d:76:34:63:c4:3a:a9:26:4e:73:64:8d:23:46:13:
14:67:74:62:d7:99:f7:d5:09:4a:8a:15:8f:eb:be:93:74:5a:
4c:ae:59:ce:6c:1e:59:c3:48:77:da:ca:d2:ef:f3:c6:4e:47:
ac:34:e9:1c:45:39:fc:cd:1a:f7:9e:84:eb:ba:9d:1e:4f:ba:
df:5b:f5:1a:49:77:99:d1:60:a0:18:6e:22:74:b7:2d:49:c8:
90:db:f4:36:9e:6e:ff:cc:86:a9:dd:7a:59:a6:fa:ed:28:a3:
20:41:37:a4:d1:db:fd:ed:ed:9b:d9:55:ba:76:e0:a1:12:15:
e7:01:13:92:23:c2:9b:90:55:a5:01:94:16:97:da:ee:dd:01:
44:26:e6:49:96:04:c4:df:21:52:06:e8:c4:7b:e7:7e:c6:11:
8b:0c:02:66:c9:3f:90:3c:d7:63:c0:3b:27:10:c2:ac:e7:ab:
88:e4:e6:ac:7f:6a:80:d9:f4:cb:5f:3f:f9:6e:0d:bf:dc:87:
1e:96:7a:62:cc:f4:8e:d4:90:65:6e:75:10:a3:5b:ba:3d:79:
5d:ea:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:37 2025 by rpki-client