Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa
File: 3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: U96cJMm3pGO5b07LUu1NTnBFmnO6SNexAeSENeYI1r4=
Subject key identifier: DF:9E:D3:06:16:FA:60:E5:AA:EF:F3:B1:54:98:5A:3E:DF:B2:69:82
Certificate issuer: /CN=fae8907c5de93e22e975390db5621669314c4e18
Certificate serial: 4D06D3A902A22862EB9C069FEB8FDD49E9341E39
Authority key identifier: FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa
Signing time: Mon 01 May 2023 14:28:50 +0000
ROA not before: Mon 01 May 2023 14:23:50 +0000
ROA not after: Mon 29 Apr 2024 14:28:50 +0000
asID: 62240
IP address blocks: 213.109.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:06:d3:a9:02:a2:28:62:eb:9c:06:9f:eb:8f:dd:49:e9:34:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae8907c5de93e22e975390db5621669314c4e18
Validity
Not Before: May 1 14:23:50 2023 GMT
Not After : Apr 29 14:28:50 2024 GMT
Subject: CN=DF9ED30616FA60E5AAEFF3B154985A3EDFB26982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:f1:a0:eb:50:77:c4:07:91:05:d1:dc:fd:
90:00:f0:25:78:d1:d1:d2:89:a8:68:9d:e6:3b:dc:
7e:be:54:b2:dc:80:8f:9b:d5:88:16:83:2f:fc:de:
4e:12:1b:ab:27:83:2b:7b:dd:1b:1b:13:36:10:b9:
b0:b9:82:c2:11:33:5c:b6:b1:00:b8:79:22:1b:34:
d8:ab:cb:de:d5:de:47:b2:9d:8b:84:dc:aa:26:88:
a5:88:68:59:52:71:af:65:1a:f8:ef:db:1b:1b:53:
8d:58:49:bf:80:39:b8:f3:68:a2:95:e3:56:65:46:
9f:b7:3a:77:a2:47:7d:f6:00:58:be:1a:29:df:cb:
65:2d:9d:3b:c0:e8:07:fb:e1:3a:0c:a7:41:98:54:
ba:6c:86:4a:7b:fd:54:c8:51:af:ca:a8:7d:28:e0:
ee:9b:f1:cd:ad:c4:5f:bd:69:91:8d:00:0f:01:f2:
6b:3c:d2:25:7c:13:ca:9d:31:5b:60:a8:97:48:34:
52:5b:51:28:ec:df:70:33:5b:eb:b1:c7:aa:fb:67:
44:55:33:63:1f:9c:54:eb:e0:0d:9b:30:f8:fc:a0:
64:5e:c7:25:5b:26:b4:e0:32:31:88:b3:0d:be:ac:
2f:4a:33:7f:0f:2a:00:c0:80:ff:49:94:3c:b5:c6:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:D3:06:16:FA:60:E5:AA:EF:F3:B1:54:98:5A:3E:DF:B2:69:82
X509v3 Authority Key Identifier:
keyid:FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
91:46:ab:51:95:a5:6c:fc:97:4c:59:e9:7f:8f:3c:c8:e4:69:
41:28:5d:17:7d:aa:a5:ed:61:03:24:34:00:38:1f:0b:a9:ea:
d1:6d:9f:10:e8:65:ca:dc:ff:f0:8e:c4:2d:9c:ca:5a:e9:1d:
33:53:b8:42:e2:fe:65:6c:50:64:e2:f0:bf:2e:fe:e1:1c:9b:
d3:45:5e:f9:81:25:30:df:f5:24:64:2d:c1:1a:ec:ac:3f:ac:
ef:12:47:17:27:5e:ab:de:19:5b:f7:73:a1:de:e7:7a:19:80:
79:0c:94:68:44:a2:ed:91:fe:bb:9a:e2:39:e8:be:49:e5:88:
7c:b1:5a:ea:ff:12:35:f5:be:79:5a:1f:8a:fc:09:32:b8:27:
ba:0c:13:b0:e1:09:e0:e0:be:4c:19:8e:ca:82:ff:32:3f:e1:
0e:b0:3f:b2:52:16:32:fc:42:69:c0:51:d7:f5:57:d9:f1:2a:
98:e4:97:52:18:be:cf:17:2a:34:32:76:54:b9:a4:86:63:9d:
0b:fc:fa:3a:c2:e1:30:b7:77:22:28:b5:4e:84:5b:65:60:3f:
82:fd:cf:a9:75:9b:55:7c:96:6d:56:e9:3d:a9:aa:d4:f6:14:
5c:c0:3c:08:07:d6:1e:81:72:c9:2d:c7:e2:3c:df:e7:4a:b2:
48:ce:02:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org