Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/3231322e32332e3230372e302f32342d3234203d3e20323130393132.roa
File: 3231322e32332e3230372e302f32342d3234203d3e20323130393132.roa (raw, json)
Hash identifier: mtrSbVyOpJ6qF28nOx+6ny58O+LOYd2RJOMfDcNv3zw=
Subject key identifier: BF:83:24:1D:09:A7:74:38:85:88:F4:1E:A4:80:EC:9C:09:09:43:13
Certificate issuer: /CN=764743587826154478cca22375d0f58a357db1f0
Certificate serial: 23341A7E04A81675C40CB52630E08A216E9283EA
Authority key identifier: 76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/3231322e32332e3230372e302f32342d3234203d3e20323130393132.roa
Signing time: Wed 03 Jan 2024 02:07:47 +0000
ROA not before: Wed 03 Jan 2024 02:02:47 +0000
ROA not after: Wed 01 Jan 2025 02:07:47 +0000
asID: 210912
IP address blocks: 212.23.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:34:1a:7e:04:a8:16:75:c4:0c:b5:26:30:e0:8a:21:6e:92:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764743587826154478cca22375d0f58a357db1f0
Validity
Not Before: Jan 3 02:02:47 2024 GMT
Not After : Jan 1 02:07:47 2025 GMT
Subject: CN=BF83241D09A774388588F41EA480EC9C09094313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:24:87:6d:e9:e2:05:5e:53:4f:1d:1a:52:
74:a7:15:0c:a0:73:23:76:d1:63:98:e8:ea:d8:b4:
a8:d7:81:fe:b8:6c:3f:b4:a2:ab:92:cd:ae:f8:85:
19:bd:74:01:35:ba:b6:c9:6c:2d:31:ee:95:7a:b2:
b1:5b:e7:b5:bc:e6:db:7a:0b:49:99:f0:0e:7d:40:
fe:04:3d:40:db:21:bb:79:25:46:4d:82:05:d0:ac:
5e:3b:0f:71:a4:a6:e3:af:2f:52:81:55:7d:12:a0:
f4:87:06:e2:56:f7:2c:b3:42:db:e1:6f:5e:1a:ee:
b1:16:fa:50:34:b8:28:8d:e3:0b:47:ca:04:1c:9b:
1e:3d:12:39:c0:a4:f4:f5:68:04:09:4e:20:ff:47:
74:13:e6:d6:63:0b:27:10:ac:29:71:46:60:0e:c6:
b7:9e:f6:d3:29:fa:6b:46:8e:81:47:de:fe:f5:af:
37:fc:64:a3:7a:6b:8e:24:3c:2a:84:ea:9b:62:b4:
03:e1:5a:97:91:2b:a9:98:c0:13:59:4d:4d:7f:f4:
ad:00:ba:4d:07:43:2d:6e:8d:ee:f5:41:6a:18:60:
32:1e:0c:3e:2d:af:cc:8f:71:83:dc:69:fb:7e:1d:
15:98:7e:ef:c5:3a:42:3e:f0:9c:7b:04:1b:5d:5b:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:24:1D:09:A7:74:38:85:88:F4:1E:A4:80:EC:9C:09:09:43:13
X509v3 Authority Key Identifier:
keyid:76:47:43:58:78:26:15:44:78:CC:A2:23:75:D0:F5:8A:35:7D:B1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/764743587826154478CCA22375D0F58A357DB1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkdDWHgmFUR4zKIjddD1ijV9sfA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/7/3231322e32332e3230372e302f32342d3234203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.207.0/24
Signature Algorithm: sha256WithRSAEncryption
68:91:a7:5e:ce:4f:72:5d:61:1c:57:95:a1:e5:b3:fc:69:69:
59:ca:b7:78:ae:ee:e9:80:f2:dd:5d:a4:fc:17:6b:fa:e7:73:
ab:ed:cc:b0:93:e8:05:2d:d1:38:64:b1:4f:37:60:23:2c:ff:
04:1f:d7:57:fd:bf:8d:b4:cc:75:d1:49:1c:2f:05:92:a5:b7:
c6:e8:ef:6d:30:81:ed:13:65:f1:37:65:71:61:14:7a:d1:cd:
33:a6:d9:70:69:79:ac:28:bc:98:66:91:e4:a7:3d:d0:52:a0:
25:4c:d7:46:ec:8a:8c:91:17:9a:47:6b:e5:87:9d:0e:30:17:
4c:32:75:13:2c:3e:d0:d4:70:8b:a7:69:be:4c:7a:15:17:c8:
03:a0:6d:2f:b8:49:3c:a0:c9:c3:8c:cf:0e:d8:25:ed:3a:8c:
66:34:e3:1c:f8:38:c3:53:f5:e6:0c:4b:7e:48:ec:3e:ce:ad:
b8:b3:74:ef:2f:0b:2b:04:80:41:09:a9:59:fe:03:02:51:f5:
22:36:d4:05:3e:da:4b:96:67:b5:e5:06:68:a4:5f:c5:1a:7b:
64:36:65:14:46:2c:37:05:6b:6f:87:c6:73:af:c6:ae:28:bf:
34:9e:b2:d7:01:d9:bd:e7:2e:a3:7d:34:ac:3b:3a:9d:fc:79:
49:a5:be:61
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIzQafgSoFnXEDLUmMOCKIW6Sg+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0NzQzNTg3ODI2MTU0NDc4Y2NhMjIzNzVkMGY1OGEz
NTdkYjFmMDAeFw0yNDAxMDMwMjAyNDdaFw0yNTAxMDEwMjA3NDdaMDMxMTAvBgNV
BAMTKEJGODMyNDFEMDlBNzc0Mzg4NTg4RjQxRUE0ODBFQzlDMDkwOTQzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XCSHbeniBV5TTx0aUnSnFQyg
cyN20WOY6OrYtKjXgf64bD+0oquSza74hRm9dAE1urbJbC0x7pV6srFb57W85tt6
C0mZ8A59QP4EPUDbIbt5JUZNggXQrF47D3GkpuOvL1KBVX0SoPSHBuJW9yyzQtvh
b14a7rEW+lA0uCiN4wtHygQcmx49EjnApPT1aAQJTiD/R3QT5tZjCycQrClxRmAO
xree9tMp+mtGjoFH3v71rzf8ZKN6a44kPCqE6ptitAPhWpeRK6mYwBNZTU1/9K0A
uk0HQy1uje71QWoYYDIeDD4tr8yPcYPcaft+HRWYfu/FOkI+8Jx7BBtdW4RTAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUv4MkHQmndDiFiPQepIDsnAkJQxMwHwYDVR0j
BBgwFoAUdkdDWHgmFUR4zKIjddD1ijV9sfAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzcvNzY0NzQzNTg3ODI2MTU0NDc4Q0NBMjIzNzVEMEY1OEEzNTdEQjFGMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RrZERXSGdtRlVSNHpLSWpkZEQxaWpW
OXNmQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUt
MTkwNC00NGI0LTk5OGItZmYxYzllMzExYzQ5LzcvMzIzMTMyMmUzMjMzMmUzMjMw
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzAzOTMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUF88wDQYJKoZIhvcNAQELBQADggEBAGiRp17OT3JdYRxXlaHls/xpaVnKt3iu
7umA8t1dpPwXa/rnc6vtzLCT6AUt0ThksU83YCMs/wQf11f9v420zHXRSRwvBZKl
t8bo720wge0TZfE3ZXFhFHrRzTOm2XBpeawovJhmkeSnPdBSoCVM10bsioyRF5pH
a+WHnQ4wF0wydRMsPtDUcIunab5MehUXyAOgbS+4STygycOMzw7YJe06jGY04xz4
OMNT9eYMS35I7D7OrbizdO8vCysEgEEJqVn+AwJR9SI21AU+2kuWZ7XlBmikX8Ua
e2Q2ZRRGLDcFa2+HxnOvxq4ovzSestcB2b3nLqN9NKw7Op38eUmlvmE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:56 2025 by rpki-client