Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa
File: 3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa (raw, json)
Hash identifier: 5DzAuBq5AuBPEutB/FsioWNaWt8E190EEWN3ZnEFmt8=
Subject key identifier: DC:C9:61:8F:00:2D:F2:12:C8:E2:4B:AB:8A:71:FD:1C:11:AB:3A:79
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 49112861CF6A81629219848AA27AA2668F47DD89
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa
Signing time: Sat 29 Apr 2023 09:40:10 +0000
ROA not before: Sat 29 Apr 2023 09:35:10 +0000
ROA not after: Sat 27 Apr 2024 09:40:10 +0000
asID: 272692
IP address blocks: 213.225.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:11:28:61:cf:6a:81:62:92:19:84:8a:a2:7a:a2:66:8f:47:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:35:10 2023 GMT
Not After : Apr 27 09:40:10 2024 GMT
Subject: CN=DCC9618F002DF212C8E24BAB8A71FD1C11AB3A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:fa:8b:72:11:26:64:0f:d6:f8:bb:79:2d:
bd:c8:e8:21:75:b2:fc:1d:4a:aa:55:b3:15:22:63:
66:df:ac:9c:f2:89:7e:25:05:35:43:64:37:1c:38:
42:df:41:b8:01:f7:46:9a:47:4c:c9:d4:4c:c6:46:
b2:c5:3f:36:d0:75:85:55:34:72:75:fe:bb:91:9d:
9e:32:67:9c:03:0f:7b:09:45:24:fe:5f:df:0c:45:
a7:98:0e:c2:8d:01:25:b0:74:fe:dc:f8:95:18:62:
db:9e:40:ed:14:a3:dc:3f:83:60:14:52:43:e4:19:
03:0d:64:62:e9:94:36:e0:5d:ca:f8:bf:0b:62:79:
6a:65:4d:0c:5e:d8:5b:cb:df:d9:49:f2:61:e3:ed:
9a:8a:d0:85:41:2a:3f:a8:f0:87:df:71:44:0c:ab:
bc:dc:48:67:44:42:4a:04:2c:6d:86:93:d4:30:c2:
a2:dd:08:b9:f5:52:3c:4f:7d:fd:e7:3e:87:64:15:
b0:9e:7d:32:b1:a4:21:74:8b:c0:62:74:d5:5d:07:
a4:b3:9c:7f:76:1d:e3:0d:ba:f8:39:a7:11:f3:3a:
60:8a:f0:88:c5:e4:9a:6c:56:06:8b:ab:64:e4:b0:
70:d2:12:6b:b1:c1:d3:4c:f2:92:81:7e:54:a5:01:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:61:8F:00:2D:F2:12:C8:E2:4B:AB:8A:71:FD:1C:11:AB:3A:79
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9e:fd:62:0a:76:ee:9d:07:ad:d0:54:d6:11:e0:b7:2e:89:
53:f9:6b:6c:15:a6:10:76:2f:f8:0a:19:d9:45:e8:5c:04:45:
ad:1e:d3:7b:21:8d:7c:a4:6f:56:68:d6:7e:10:78:2e:68:05:
ba:33:c8:e4:47:c9:81:8f:5e:85:60:6f:ac:ed:e1:75:f6:ca:
35:31:79:56:2a:ab:4b:18:ab:0b:da:83:44:e1:ec:8f:78:da:
26:95:3a:5c:93:2e:ad:bb:e4:3a:84:51:e9:d2:9c:b0:81:71:
0d:83:77:30:5f:fc:c3:f7:09:91:f8:f8:b2:3d:cd:8b:e8:a4:
90:b2:f1:ab:a4:fe:07:5b:ce:a9:6d:99:6b:48:bd:79:98:66:
0d:01:85:6a:86:aa:19:3d:41:08:f3:18:21:b5:27:cd:f8:33:
2b:e6:ef:54:7f:10:d6:f3:84:80:e4:b4:d7:42:c5:a5:36:25:
a0:46:ed:7a:7c:ed:2f:0b:87:fe:8b:90:ab:cf:30:48:b9:c5:
da:5b:df:e8:0f:9f:dc:34:88:11:ae:18:dc:18:8d:1a:26:a0:
f2:27:31:d9:24:c1:e5:fe:52:62:72:ba:40:3d:ef:f1:7a:4c:
17:89:e7:8b:10:18:36:d6:64:57:1a:19:d8:0d:40:6a:9d:9e:
76:f0:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org