Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233362e302f32342d3234203d3e203632313634.roa
File: 3231322e322e3233362e302f32342d3234203d3e203632313634.roa (raw, json)
Hash identifier: gmHQJqkh/44I1UAB6m4Ih3HP++YDcLDGsVa3iFzALB0=
Subject key identifier: B7:F3:CB:F1:AB:FE:03:AD:34:EC:A5:5B:59:26:96:5C:41:F8:6E:60
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 60C9F4914AC9B4F842312F7E92F9302CBB815940
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233362e302f32342d3234203d3e203632313634.roa
Signing time: Sat 29 Apr 2023 09:39:07 +0000
ROA not before: Sat 29 Apr 2023 09:34:07 +0000
ROA not after: Sat 27 Apr 2024 09:39:07 +0000
asID: 62164
IP address blocks: 212.2.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c9:f4:91:4a:c9:b4:f8:42:31:2f:7e:92:f9:30:2c:bb:81:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:34:07 2023 GMT
Not After : Apr 27 09:39:07 2024 GMT
Subject: CN=B7F3CBF1ABFE03AD34ECA55B5926965C41F86E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:a6:d0:dc:bf:46:fc:11:ed:e5:2a:6b:40:
55:6a:09:1b:5d:8d:6c:ae:18:d5:01:e1:a7:40:44:
fe:fd:7e:81:80:37:72:67:5f:3f:b3:8b:ef:2a:17:
1e:de:6b:8e:86:d1:66:d7:64:94:e0:45:28:dd:1a:
46:cb:91:8b:7a:67:42:a7:90:27:57:a6:3b:02:1f:
24:fe:b1:44:8b:9e:f4:82:86:7d:2c:84:24:fb:8a:
28:c8:93:4b:eb:5b:1b:80:e6:6f:96:ad:2c:db:0b:
b4:30:72:7f:fe:60:6a:0a:23:26:91:6f:c6:46:95:
ab:47:14:e8:de:be:fb:1e:3c:6c:59:c9:0b:82:df:
c7:d5:f2:ed:94:89:e0:70:fa:5d:43:31:d8:4b:bd:
ce:8b:5b:e9:52:40:11:5f:fa:5a:ec:1f:fa:d1:25:
0f:28:bd:2a:2d:ec:19:18:ad:26:13:c6:a7:a1:d6:
b7:1f:54:c5:d8:86:b8:02:04:6d:27:ff:48:f0:2a:
4d:8d:79:bc:c9:f1:7c:55:42:65:62:da:db:00:9a:
af:96:6a:64:5a:6e:b4:a2:e5:bc:bf:58:bd:84:46:
d6:75:0b:d1:30:e5:c1:62:a9:d7:9e:77:5c:9b:29:
c2:5d:79:5b:73:d3:91:1e:43:7a:b7:07:93:cd:fb:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:CB:F1:AB:FE:03:AD:34:EC:A5:5B:59:26:96:5C:41:F8:6E:60
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233362e302f32342d3234203d3e203632313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0b:d6:2e:db:8e:5f:c4:cd:dc:b1:a4:e5:8c:45:e0:59:a9:
c9:08:51:50:3d:39:08:a9:d9:35:60:6b:67:5c:b9:6b:0c:83:
f6:cd:8d:6e:be:86:e8:bc:22:37:da:c2:de:7c:08:cd:b7:e2:
e5:df:fe:63:1c:a9:1e:64:80:2c:38:73:a4:da:99:34:0e:32:
68:85:8f:62:79:97:94:f3:81:42:a8:04:3e:99:55:bd:2e:34:
a7:06:f6:cf:78:41:98:d7:04:78:0d:11:c3:13:d5:28:cf:f1:
b2:cd:f7:72:66:99:0c:99:b4:c2:3b:d7:3f:62:52:bf:9d:3c:
2b:1e:02:54:15:b5:e6:a7:ba:36:e6:bc:33:0a:2c:73:4b:be:
f5:5a:1f:bd:05:1f:3a:a4:58:b4:27:b1:08:c1:51:51:9d:c8:
10:7a:28:f0:70:82:18:89:20:4f:d1:cf:1e:e6:2c:42:87:a1:
c1:1e:3b:70:88:74:3c:b7:53:72:bc:92:a2:fb:29:42:3c:4f:
5b:59:1d:30:b0:07:70:5c:ea:23:1e:a6:c3:3a:33:6a:32:26:
a5:c9:dd:5a:86:a5:be:80:1b:51:d7:d6:35:85:6b:7f:21:33:
f5:1b:59:e7:73:3d:be:14:51:44:ca:97:10:10:63:1d:67:35:
7d:c1:f4:3e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYMn0kUrJtPhCMS9+kvkwLLuBWUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTM0MDdaFw0yNDA0MjcwOTM5MDdaMDMxMTAvBgNV
BAMTKEI3RjNDQkYxQUJGRTAzQUQzNEVDQTU1QjU5MjY5NjVDNDFGODZFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYKbQ3L9G/BHt5SprQFVqCRtd
jWyuGNUB4adARP79foGAN3JnXz+zi+8qFx7ea46G0WbXZJTgRSjdGkbLkYt6Z0Kn
kCdXpjsCHyT+sUSLnvSChn0shCT7iijIk0vrWxuA5m+WrSzbC7Qwcn/+YGoKIyaR
b8ZGlatHFOjevvsePGxZyQuC38fV8u2UieBw+l1DMdhLvc6LW+lSQBFf+lrsH/rR
JQ8ovSot7BkYrSYTxqeh1rcfVMXYhrgCBG0n/0jwKk2NebzJ8XxVQmVi2tsAmq+W
amRabrSi5by/WL2ERtZ1C9Ew5cFiqdeed1ybKcJdeVtz05EeQ3q3B5PN+8qlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUt/PL8av+A6007KVbWSaWXEH4bmAwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzIzMTMyMmUzMjJlMzIzMzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMxMzYzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQC
7DANBgkqhkiG9w0BAQsFAAOCAQEACwvWLtuOX8TN3LGk5YxF4FmpyQhRUD05CKnZ
NWBrZ1y5awyD9s2Nbr6G6LwiN9rC3nwIzbfi5d/+YxypHmSALDhzpNqZNA4yaIWP
YnmXlPOBQqgEPplVvS40pwb2z3hBmNcEeA0RwxPVKM/xss33cmaZDJm0wjvXP2JS
v508Kx4CVBW15qe6Nua8Mwosc0u+9VofvQUfOqRYtCexCMFRUZ3IEHoo8HCCGIkg
T9HPHuYsQoehwR47cIh0PLdTcrySovspQjxPW1kdMLAHcFzqIx6mwzozajImpcnd
WoalvoAbUdfWNYVrfyEz9RtZ53M9vhRRRMqXEBBjHWc1fcH0Pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org