Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233372e302f32342d3234203d3e20323036343436.roa
File: 3231322e322e3233372e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: Ryytx+c99rK/LD+itmahuM3zsEW/HlCNQrao5mUuR1I=
Subject key identifier: D5:ED:42:8A:10:D2:18:E3:64:EA:32:1B:E6:90:77:37:0A:C0:F9:6B
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 1C434F0034F3AD382A3CE5621E287AEDDC1B50DD
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233372e302f32342d3234203d3e20323036343436.roa
Signing time: Sat 29 Apr 2023 09:39:17 +0000
ROA not before: Sat 29 Apr 2023 09:34:17 +0000
ROA not after: Sat 27 Apr 2024 09:39:17 +0000
asID: 206446
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:43:4f:00:34:f3:ad:38:2a:3c:e5:62:1e:28:7a:ed:dc:1b:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:34:17 2023 GMT
Not After : Apr 27 09:39:17 2024 GMT
Subject: CN=D5ED428A10D218E364EA321BE69077370AC0F96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:58:2d:54:02:e6:e1:b4:0f:22:6b:86:56:
66:4f:e1:77:f6:6b:eb:8d:9f:4e:bc:6a:e1:12:e2:
7e:f5:9d:48:1f:e7:8d:72:83:9c:02:84:56:e3:df:
66:41:25:2d:1e:d8:d4:26:81:3d:f0:70:c3:21:4a:
59:8f:dc:e7:88:28:d4:ad:77:60:dc:b3:4f:fd:c3:
b0:06:c2:3a:be:7e:6d:e5:aa:ad:10:72:11:5f:60:
50:e7:35:a9:e8:e7:eb:55:4f:cd:57:79:c7:8f:0b:
ec:78:59:35:eb:36:51:b6:01:7b:65:10:dc:9c:a1:
26:d9:a6:8f:d9:86:2d:93:14:ad:e4:d5:ad:cc:e7:
85:d4:72:3a:d7:38:76:c8:89:29:b6:6c:04:2e:ab:
d9:be:8c:37:a8:f6:f0:36:ef:3e:5d:49:53:a8:fd:
e6:78:c6:f0:ee:44:d7:63:81:f5:0f:d7:7d:c8:0d:
7e:4e:0f:24:58:8e:5e:34:7f:3a:ae:bb:fc:dc:3e:
03:a4:85:c3:0b:35:a1:1b:0d:7c:c7:77:cc:af:ca:
80:c1:bc:ee:1b:d8:cc:b2:6a:6f:e9:86:06:7e:85:
f4:bd:fc:ba:25:cd:f9:38:47:8b:5d:21:8f:66:85:
6c:45:65:ed:c9:17:e7:01:e4:74:e5:4a:4d:60:56:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:42:8A:10:D2:18:E3:64:EA:32:1B:E6:90:77:37:0A:C0:F9:6B
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233372e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ce:ba:ad:10:a8:af:39:f7:24:d0:7b:4a:da:87:bb:ed:28:
75:c8:ec:88:4e:4e:95:de:1a:bd:c0:b3:f9:d8:b0:70:b2:37:
0b:45:9a:b9:03:58:07:37:ff:d0:ac:7d:a3:1d:b8:a5:d5:ca:
fa:46:11:03:ce:e0:d0:2c:8c:12:33:01:31:5f:c8:9d:7b:d2:
0a:36:fc:45:d2:c0:66:c6:07:17:6f:b6:07:06:d5:ee:18:8c:
2d:45:28:07:c8:a6:07:64:93:9a:89:a1:71:1d:e0:bb:73:89:
fb:e5:43:15:56:ad:09:99:36:0e:24:34:89:16:55:ee:2e:ef:
18:83:b8:c2:b0:c1:34:eb:d6:f8:23:a4:c4:92:4d:51:cc:c3:
09:f3:52:24:eb:8d:34:58:d5:de:3f:4f:e6:49:a1:cd:29:ef:
4c:4f:bc:a4:3c:c8:91:99:2a:fd:bc:7c:26:b1:b2:90:ef:25:
8a:9e:73:c8:08:9a:d0:70:54:34:a7:80:41:49:29:ca:7c:20:
0f:3d:65:3a:78:48:93:df:1e:7f:c5:c3:7b:62:4b:b2:a4:3a:
44:91:1d:19:64:75:72:65:51:91:df:9b:b4:4c:ee:a6:1d:23:
70:17:fc:83:92:97:e1:bf:dd:07:a4:cd:df:2f:22:24:09:e9:
f6:c0:35:06
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHENPADTzrTgqPOViHih67dwbUN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTM0MTdaFw0yNDA0MjcwOTM5MTdaMDMxMTAvBgNV
BAMTKEQ1RUQ0MjhBMTBEMjE4RTM2NEVBMzIxQkU2OTA3NzM3MEFDMEY5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYVgtVALm4bQPImuGVmZP4Xf2
a+uNn068auES4n71nUgf541yg5wChFbj32ZBJS0e2NQmgT3wcMMhSlmP3OeIKNSt
d2Dcs0/9w7AGwjq+fm3lqq0QchFfYFDnNano5+tVT81XecePC+x4WTXrNlG2AXtl
ENycoSbZpo/Zhi2TFK3k1a3M54XUcjrXOHbIiSm2bAQuq9m+jDeo9vA27z5dSVOo
/eZ4xvDuRNdjgfUP133IDX5ODyRYjl40fzquu/zcPgOkhcMLNaEbDXzHd8yvyoDB
vO4b2Myyam/phgZ+hfS9/Lolzfk4R4tdIY9mhWxFZe3JF+cB5HTlSk1gVtulAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1e1CihDSGONk6jIb5pB3NwrA+WswHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzIzMTMyMmUzMjJlMzIzMzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzQzNDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1ALtMA0GCSqGSIb3DQEBCwUAA4IBAQBRzrqtEKivOfck0HtK2oe77Sh1yOyITk6V
3hq9wLP52LBwsjcLRZq5A1gHN//QrH2jHbil1cr6RhEDzuDQLIwSMwExX8ide9IK
NvxF0sBmxgcXb7YHBtXuGIwtRSgHyKYHZJOaiaFxHeC7c4n75UMVVq0JmTYOJDSJ
FlXuLu8Yg7jCsME069b4I6TEkk1RzMMJ81Ik6400WNXeP0/mSaHNKe9MT7ykPMiR
mSr9vHwmsbKQ7yWKnnPICJrQcFQ0p4BBSSnKfCAPPWU6eEiT3x5/xcN7YkuypDpE
kR0ZZHVyZVGR35u0TO6mHSNwF/yDkpfhv90HpM3fLyIkCen2wDUG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org