Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
File: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (raw, json)
Hash identifier: KdkqaCJ/9lTqG1UHjnwEwDHPyaTK730o4i2Z6IY9pf0=
Subject key identifier: 86:E1:F8:06:1F:CC:55:44:8C:01:E6:BD:54:4D:FA:FC:9E:57:68:53
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 2326FF8913E4CE7922AC1BABDFDA728427B628FA
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
Signing time: Sat 29 Apr 2023 09:40:20 +0000
ROA not before: Sat 29 Apr 2023 09:35:20 +0000
ROA not after: Sat 27 Apr 2024 09:40:20 +0000
asID: 200435
IP address blocks: 213.225.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:26:ff:89:13:e4:ce:79:22:ac:1b:ab:df:da:72:84:27:b6:28:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:35:20 2023 GMT
Not After : Apr 27 09:40:20 2024 GMT
Subject: CN=86E1F8061FCC55448C01E6BD544DFAFC9E576853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:85:22:1f:11:0b:a0:54:2f:f0:c5:96:90:
90:5b:6b:c6:4f:a4:46:95:21:01:9d:52:c3:9f:e8:
8a:45:c9:36:81:d9:8f:ed:9b:67:50:b2:45:e3:7e:
54:25:71:86:ea:36:99:e5:da:c4:8d:d1:3c:c7:41:
76:ab:3a:ec:27:ec:3a:ae:9e:d4:55:48:55:b4:80:
bd:25:59:f5:93:92:9d:91:64:4e:5e:10:df:c5:33:
5f:dc:1b:98:50:c8:ae:94:b2:0d:3c:8d:2f:3d:c4:
58:f0:2d:d4:9e:f5:05:bb:da:ce:0c:26:36:16:c1:
ba:34:5d:5e:05:7a:48:ed:cc:56:d4:dc:61:a7:ea:
76:cf:c4:48:92:7d:8f:cb:2b:5d:0c:ac:c7:71:3c:
25:bf:94:ae:e4:7b:40:2f:0a:49:3f:9a:c4:13:70:
d0:ca:6b:62:ee:3d:76:65:ea:76:0a:50:eb:48:86:
0b:83:ba:26:d6:0a:e4:9c:1f:93:93:30:42:16:8a:
fe:63:2d:b1:c1:e8:cd:53:ee:0a:92:ea:77:cb:5d:
62:b9:1c:de:0a:e9:5d:86:61:38:15:cd:91:43:73:
25:8e:c4:e4:02:c0:b4:23:ec:67:87:46:87:c5:a7:
f3:78:07:16:6e:e0:f1:4e:69:95:46:c9:50:31:67:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:F8:06:1F:CC:55:44:8C:01:E6:BD:54:4D:FA:FC:9E:57:68:53
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:1c:e0:9d:d7:74:16:e7:e7:f8:a2:95:64:b1:5b:ed:b8:
31:8e:90:9d:0e:bb:10:16:6d:cc:ac:0d:e9:96:f3:d9:18:25:
5e:61:05:f6:c9:b2:ae:23:ed:c2:6e:ab:8d:d5:78:b0:13:0e:
73:41:78:a2:5d:e9:50:c0:fb:a4:de:35:04:9a:e5:95:e7:62:
98:e6:bf:21:98:35:93:1d:22:6d:71:2a:7f:c1:12:33:d7:37:
d9:cc:49:90:f1:d8:66:2e:8e:e6:47:b0:75:b3:23:29:d3:c1:
df:74:e4:bf:70:33:c9:61:d2:b5:fd:a9:0b:3e:fb:72:3f:63:
ca:d6:de:e0:c6:ce:8b:5f:17:30:d8:28:54:18:7d:f3:9a:61:
74:27:e0:c0:3e:d5:52:da:9f:d7:a2:ab:aa:18:8e:64:aa:71:
e0:6f:d3:eb:e3:a8:69:18:ac:65:f3:06:d7:9a:c7:46:fc:be:
b8:52:d5:dc:ed:23:bf:70:be:4e:6b:08:14:9f:5c:a8:ce:46:
89:19:86:16:6a:5c:01:26:7d:5d:c2:f0:44:d6:60:90:7b:fe:
21:e4:9a:59:7d:47:65:76:d8:27:29:20:49:5d:34:f7:0b:8d:
d5:1a:47:90:f0:c5:c1:49:b4:31:45:51:58:78:50:b9:59:8b:
bf:fb:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org