Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa
File: 3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: HP5UA7e3Fbn2CtPyQ4koUotJa30vb2eoLGRe+n8u910=
Subject key identifier: FD:57:11:72:B0:DA:F4:B4:91:CF:3A:D8:CF:9A:A7:98:08:4E:32:C2
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 1EF667FDAF6F0383002B2C9FEAA431A764FDAE53
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa
Signing time: Sat 29 Apr 2023 09:39:59 +0000
ROA not before: Sat 29 Apr 2023 09:34:59 +0000
ROA not after: Sat 27 Apr 2024 09:39:59 +0000
asID: 58061
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f6:67:fd:af:6f:03:83:00:2b:2c:9f:ea:a4:31:a7:64:fd:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:34:59 2023 GMT
Not After : Apr 27 09:39:59 2024 GMT
Subject: CN=FD571172B0DAF4B491CF3AD8CF9AA798084E32C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:e7:34:d0:94:69:c6:97:48:21:85:56:0a:
8f:f4:12:49:a4:ee:5f:af:49:d7:c8:fe:02:b0:4b:
97:07:2a:f5:9a:0d:1c:62:43:c2:53:75:75:85:fb:
3f:7f:dc:97:27:1f:7b:23:2c:cf:0c:5e:09:a9:2a:
6f:ea:8e:2a:e4:ae:94:b1:b7:6e:39:f8:fe:b0:25:
3c:c5:29:29:28:bd:dc:6b:5f:a3:f2:52:fc:eb:81:
1a:66:2a:24:90:89:86:a2:9d:04:9f:47:0e:8f:5b:
f4:84:63:bc:d1:73:9b:a2:4c:69:8b:f9:f1:5a:9f:
09:b7:a9:6e:7e:ae:3f:50:5d:c0:7c:85:0a:d8:93:
9e:6d:d4:a0:47:7f:ea:02:40:ab:b4:cb:31:8d:07:
ad:07:c7:0c:02:91:01:b8:39:25:16:63:29:6b:be:
ff:31:c8:89:c8:4d:62:a8:c0:f8:bf:17:57:04:55:
9b:a7:12:d4:bd:a2:37:58:6f:d6:a1:cc:77:ab:fe:
92:c5:70:46:1c:df:01:0d:64:bd:51:00:2f:de:9e:
f0:ca:c0:30:03:ac:db:f1:f1:6c:72:74:10:85:c6:
92:02:b5:9d:3e:fa:e0:eb:28:21:db:b1:82:ec:11:
d5:00:ab:57:d5:f9:13:0f:77:ce:60:99:18:90:42:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:57:11:72:B0:DA:F4:B4:91:CF:3A:D8:CF:9A:A7:98:08:4E:32:C2
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e1:74:e9:07:16:63:4d:19:90:1f:19:fe:80:e7:e7:8f:e3:
36:2a:9d:cf:d6:0e:a7:11:89:93:b1:b4:b3:ee:49:1d:26:87:
9d:da:67:a3:73:54:1d:30:f9:ec:84:26:eb:83:e6:4f:24:8a:
96:22:c4:c0:17:a7:6b:89:5d:85:3e:7c:93:f7:d7:e7:36:e1:
fa:bc:86:60:fb:89:96:7f:c6:6d:55:44:78:75:a9:3c:3e:8f:
b8:84:0d:68:4d:dd:8f:06:b5:34:c1:dc:ba:4e:a5:99:84:8b:
e8:8e:52:36:da:38:18:5e:a2:b8:78:29:bf:ad:b9:7e:40:f8:
1f:36:b6:5f:6a:d3:5a:03:d8:40:69:95:82:04:c5:25:2a:89:
48:0e:47:3d:5c:e9:4d:e9:04:9f:97:76:0b:5c:58:44:df:2d:
0c:a3:c7:6c:cf:54:7e:d1:91:aa:91:eb:34:48:18:f2:95:2f:
d5:33:9a:3e:d5:0b:5f:f7:81:4e:2a:6b:89:7f:0c:bd:bd:d2:
15:30:12:ff:59:fb:92:63:bf:0d:09:2a:b1:a4:3e:5e:f1:b4:
a7:9c:df:0f:e0:d9:db:61:c8:1e:f5:58:a0:6c:13:1e:0f:ea:
fa:21:8c:ad:3e:27:ba:d6:8d:ca:37:4d:cd:4c:09:2c:57:12:
9a:c4:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org