Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa (raw, json)
Hash identifier: vHzU7h9O48vA/g7HyHNfVWSZN6xBp67wzhWkPAzH/sU=
Subject key identifier: C8:55:CE:EC:EC:B9:C4:27:E6:D4:E8:72:4C:E6:5B:88:D4:C2:19:B0
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 64938CD09FB7BA74E73840381CA9F8C8CA8E9115
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
Signing time: Sat 29 Apr 2023 09:36:32 +0000
ROA not before: Sat 29 Apr 2023 09:31:32 +0000
ROA not after: Sat 27 Apr 2024 09:36:32 +0000
asID: 44547
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:93:8c:d0:9f:b7:ba:74:e7:38:40:38:1c:a9:f8:c8:ca:8e:91:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:31:32 2023 GMT
Not After : Apr 27 09:36:32 2024 GMT
Subject: CN=C855CEECECB9C427E6D4E8724CE65B88D4C219B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:47:62:1c:03:9a:a5:fc:0a:d9:d9:cd:06:
77:13:9e:19:6a:83:dd:54:6f:99:36:4d:53:cc:f0:
a8:ad:38:d8:53:6a:d4:4d:39:ac:65:82:5f:99:b5:
cb:f4:5d:61:ad:cb:90:1d:a4:37:2f:95:0e:68:89:
05:8f:a1:81:5b:05:7e:9c:fb:82:77:83:9c:b3:3a:
cb:02:11:a8:2c:3c:0d:9a:25:03:91:9b:e7:ae:b1:
4d:c5:85:5d:c1:3b:2f:78:7d:3b:2b:55:64:46:3b:
8f:65:a2:17:17:1a:fa:92:9c:a7:62:a6:76:9e:9d:
7d:6f:fc:95:12:a3:b9:a1:35:47:a1:49:1c:de:28:
88:22:08:a7:af:81:67:51:48:e4:fb:75:e1:40:7f:
f0:01:67:1f:8a:ac:b3:50:92:bd:86:83:4a:bf:45:
77:f6:d7:76:e0:bd:06:a0:98:89:f0:99:8e:4d:68:
52:54:5b:11:34:c7:66:4f:ef:72:51:8c:c9:ba:56:
a3:4c:d2:36:e8:30:5b:1f:ae:49:0e:51:a6:60:f8:
db:df:c5:3e:ac:a4:74:31:ee:ac:cb:19:1b:c0:94:
3e:b8:60:af:ef:1a:c6:14:ad:63:63:ca:ec:15:bf:
f9:ea:2c:d0:03:13:a2:f1:cb:b5:b6:be:b4:7a:99:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:CE:EC:EC:B9:C4:27:E6:D4:E8:72:4C:E6:5B:88:D4:C2:19:B0
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233362e302f32342d3234203d3e203434353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4e:ab:4f:42:63:cb:15:a3:c4:a5:75:42:e7:8e:c6:c3:79:
c0:06:d2:c3:f1:53:ba:39:7f:47:f2:07:09:63:40:58:b3:e5:
1d:4a:54:c4:c2:62:ca:b1:97:c6:4e:da:06:7b:60:6e:ad:97:
ce:4b:af:92:01:05:a2:72:3b:e6:eb:9a:55:56:35:a5:c0:e4:
4d:df:98:76:c2:3f:0a:ea:7c:bb:a8:c5:c8:50:9c:0e:0e:3f:
1e:14:ba:de:54:62:55:00:4e:43:f2:d6:72:16:cb:52:1a:d0:
14:dd:a9:b8:cf:60:08:bd:61:e6:3d:40:18:24:0d:04:61:44:
61:fc:03:14:36:21:28:dc:0f:a0:9d:a8:b8:f8:44:fe:a0:44:
97:18:93:36:a4:0f:95:79:21:91:b8:de:96:f6:15:c6:46:35:
f7:5f:d1:47:7e:a0:f5:5d:be:32:fb:00:0e:14:26:fa:4a:52:
61:5b:f3:41:79:0b:98:f4:53:6e:4d:fc:33:b7:cb:97:50:03:
c4:ee:11:75:6e:72:9a:a8:10:19:7c:42:e0:82:cb:b4:07:94:
38:f6:c3:d3:04:6b:a1:0a:63:66:c6:c3:66:65:50:a7:1b:91:
67:74:97:e6:27:1d:a4:82:72:bf:fd:be:5e:89:85:64:e7:22:
c4:1c:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org