Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa
File: 3231322e322e3233372e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier: thfIB2w0Z7cg7w1ieyFzdfAA2+rdPX1EGyH5OYRS5yI=
Subject key identifier: 12:17:43:61:B5:76:8A:51:3B:02:F3:79:DF:E5:B3:5E:98:F4:98:42
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 324321FADF6BB9A066D0DD9C8CBC45B4EC013D8B
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa
Signing time: Mon 13 Jan 2025 03:15:02 +0000
ROA not before: Mon 13 Jan 2025 03:10:02 +0000
ROA not after: Mon 12 Jan 2026 03:15:02 +0000
asID: 21840
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:43:21:fa:df:6b:b9:a0:66:d0:dd:9c:8c:bc:45:b4:ec:01:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jan 13 03:10:02 2025 GMT
Not After : Jan 12 03:15:02 2026 GMT
Subject: CN=12174361B5768A513B02F379DFE5B35E98F49842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:45:3c:38:03:29:38:78:46:72:31:98:08:
0c:15:da:a4:52:7d:78:ba:41:cb:cc:02:c5:b2:26:
f3:c7:a1:a6:78:7e:4b:80:9f:fd:c6:11:64:26:77:
0b:c8:e8:50:b4:68:4d:80:1a:2c:1c:83:96:88:d8:
ef:59:b1:f9:91:6f:bb:4f:08:77:8b:a6:a0:64:a7:
08:29:4c:42:41:b9:dd:11:50:89:2a:80:d4:4c:04:
bc:10:77:d9:79:61:f3:2e:d5:e9:19:08:aa:56:b4:
1b:c1:77:9e:a3:77:af:60:ab:7a:d1:39:d7:04:33:
25:fd:15:8d:c9:5b:39:8d:9f:00:2c:29:0a:04:f8:
76:ea:39:52:ae:92:a4:be:be:b2:bc:2a:eb:b1:7e:
8e:09:5b:08:3c:23:d5:19:36:9f:79:aa:fe:73:8c:
2f:f4:13:b1:68:ce:96:4c:3c:8d:f3:1b:96:50:1d:
c5:c4:27:48:46:83:d6:6b:30:53:85:97:5c:ea:e1:
5d:5d:98:c2:ec:88:da:55:fe:71:31:20:d6:82:ca:
44:78:67:c8:54:e6:00:c9:5e:9e:ca:49:4c:46:c6:
6a:e9:82:f8:cf:a3:1a:8a:1c:47:41:a7:ed:9d:f8:
21:75:6a:8e:c8:40:0f:42:e4:51:65:4a:1b:e3:29:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:17:43:61:B5:76:8A:51:3B:02:F3:79:DF:E5:B3:5E:98:F4:98:42
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
39:47:3a:4e:2c:5d:ff:c1:8f:be:e5:7a:8d:c8:b4:c0:ab:e2:
0b:c3:16:b7:09:66:fb:4a:cf:4f:70:c5:1e:91:57:f7:1e:f3:
61:18:2d:a1:ca:8b:1c:20:51:2f:3e:27:e1:6c:84:b5:ff:7f:
c8:35:ee:74:e4:29:2e:63:4a:2c:d2:2d:49:61:b2:b7:61:22:
dd:0e:b3:30:db:2d:4c:64:7d:01:df:34:6c:69:bf:9a:bc:5a:
fd:9f:5d:5f:86:de:ca:20:49:35:4b:a3:10:fb:57:4b:eb:b5:
c0:85:97:8d:5f:37:a0:4b:79:56:84:4f:27:66:e4:68:d5:ea:
b9:09:9b:e5:e0:1b:f1:5a:91:77:b4:ec:c1:b0:08:86:7e:84:
6a:cd:55:a5:c9:cd:73:93:fc:d5:d8:a9:3f:8a:1d:a3:a9:d2:
cc:68:e4:6b:84:2b:16:23:3e:be:1f:ee:43:70:db:0c:b4:81:
76:af:12:05:00:8b:b9:33:b6:58:6a:b9:0c:0d:32:8a:c3:f4:
b3:48:e0:cf:2f:eb:0d:b4:47:52:49:10:a5:04:7f:56:57:f3:
bd:2f:11:f8:af:7b:b8:7c:ac:d0:48:9d:52:7f:dc:0a:01:fd:
ed:43:84:9d:07:ae:6e:b0:ba:c2:7e:5f:6c:0e:89:22:cc:ac:
9b:8c:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:44 2025 by rpki-client