Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233392e302f32342d3234203d3e203631333137.roa
File: 3231322e322e3233392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1PD0kqEWHQ/P8yMK6nj+vnD0GXmRS3N6n1Ct4YkVGRo=
Subject key identifier: 57:48:1B:72:FC:E2:E8:A9:D2:54:B4:86:FC:CF:43:86:94:BA:8E:A3
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 4BADD78C0A7DE1626DEC8DF1EFFDF9BE77B4E92A
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233392e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:39:42 +0000
ROA not before: Sat 29 Apr 2023 09:34:42 +0000
ROA not after: Sat 27 Apr 2024 09:39:42 +0000
asID: 61317
IP address blocks: 212.2.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ad:d7:8c:0a:7d:e1:62:6d:ec:8d:f1:ef:fd:f9:be:77:b4:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:34:42 2023 GMT
Not After : Apr 27 09:39:42 2024 GMT
Subject: CN=57481B72FCE2E8A9D254B486FCCF438694BA8EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:df:ff:a8:4b:4c:f9:9d:e8:81:b1:e6:b6:
b1:56:a7:30:26:10:13:80:1d:cd:48:a1:03:a9:54:
08:bf:ee:4c:6a:ae:5b:c7:39:e0:09:d1:5c:06:d0:
8c:8b:89:a0:14:97:74:87:07:35:cd:d5:42:3d:a8:
99:ea:cd:b2:5b:80:77:ff:5f:4a:a3:39:dc:e4:67:
20:0f:3a:29:6a:b2:ed:af:11:37:de:aa:0a:c9:c9:
ee:84:bd:5a:9f:8d:3f:43:34:e8:e2:76:8a:d2:69:
48:2b:8d:31:7e:ed:c2:a1:4c:a8:a1:87:e2:78:e9:
be:e3:30:fa:1c:71:e1:09:0d:01:7f:c4:11:95:70:
17:01:45:4b:92:ba:04:9a:30:65:ed:5a:f6:97:d1:
29:c3:fa:c0:f9:01:53:39:2f:a9:d3:d2:03:fc:08:
44:c0:aa:b0:9d:4c:65:9d:5e:d1:c7:95:e5:90:65:
da:9d:9c:d3:21:3f:fe:11:5f:bc:5c:a9:7a:ce:5c:
1a:cf:c4:11:76:df:7e:97:ce:69:64:7a:c3:50:b2:
c0:49:33:13:b2:89:1b:2b:0a:bc:ad:15:18:ed:a1:
5e:5b:6c:72:44:5e:99:60:e8:bb:e3:5c:6b:70:14:
6c:d0:b8:e7:14:40:d4:d5:4b:fa:f4:26:2c:17:e5:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:1B:72:FC:E2:E8:A9:D2:54:B4:86:FC:CF:43:86:94:BA:8E:A3
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231322e322e3233392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.239.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e1:26:22:56:bd:52:93:1a:3e:37:b1:2e:f2:fd:a6:94:c7:
0c:16:ea:06:58:a5:43:71:fc:23:5a:c0:c7:7d:64:6c:5a:b4:
0c:79:44:ba:f9:91:9c:7e:30:5d:8d:bf:cd:ca:2c:9f:43:5e:
fc:d4:56:ce:d2:0f:46:c5:19:0f:13:32:25:3f:ed:b6:3f:5f:
91:ae:56:07:a1:9f:1f:31:55:01:85:c1:7b:d4:bd:a7:93:ad:
3d:8c:b2:2b:74:c2:96:0a:5c:b1:dd:65:40:1f:60:ca:fe:78:
f2:58:b6:14:a6:f3:b3:c5:eb:d3:d3:73:43:21:1f:da:da:9b:
a4:c0:d1:94:db:08:c8:d2:98:fa:2f:de:2f:ac:3c:40:b2:92:
60:7b:c7:94:f0:8d:84:70:05:57:84:a8:3d:8b:18:c7:e0:b2:
c0:1e:bd:63:64:5b:ad:78:39:7c:85:4a:9e:10:9b:b3:97:27:
ba:5b:db:21:af:bc:f5:be:77:98:85:3a:36:71:37:28:2d:16:
9a:3d:59:10:9a:0a:83:5f:b5:0b:8e:62:55:c9:80:b0:08:61:
41:0e:5c:2c:52:38:79:ad:d1:77:9d:62:65:61:57:58:0e:59:
33:8c:fa:b5:51:ca:06:40:21:82:27:2e:fe:b0:1b:4e:89:d2:
b6:66:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org