Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
File: 3231322e3130372e31362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: e3epH54Jh4dBhnVsVg1CvWbJzM6Xjfrgju/mmO4l4kU=
Subject key identifier: 6A:88:E8:BB:FA:34:EA:48:9F:81:F5:2C:A3:B6:1D:51:D4:DA:9D:5E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6AE85A8A848116F37E3B5138CE782125E3C72697
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:48 +0000
ROA not before: Mon 27 Jan 2025 09:39:48 +0000
ROA not after: Mon 26 Jan 2026 09:44:48 +0000
asID: 47583
IP address blocks: 212.107.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e8:5a:8a:84:81:16:f3:7e:3b:51:38:ce:78:21:25:e3:c7:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:48 2025 GMT
Not After : Jan 26 09:44:48 2026 GMT
Subject: CN=6A88E8BBFA34EA489F81F52CA3B61D51D4DA9D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:2c:65:fc:26:b7:af:51:9d:e1:ca:df:6a:
71:5f:29:98:8a:52:2c:63:6e:ec:17:76:d3:43:99:
c5:2e:ec:50:df:99:87:a7:a7:0d:d8:0b:ba:74:97:
b4:43:bf:b0:43:ee:28:64:2e:95:a8:35:7b:6a:80:
bb:76:c3:6c:57:04:db:5a:18:4e:fb:55:b1:7f:de:
27:88:9c:6b:51:b4:39:18:d3:69:d2:91:fc:3d:f1:
74:71:ae:3b:02:f2:84:be:1c:31:5c:e7:f4:ea:3b:
30:6b:ea:a3:69:fb:ab:4b:a1:08:17:ab:7c:ae:45:
3f:28:dd:29:01:82:bb:69:b2:3d:ed:08:91:0c:a9:
44:22:fa:a7:8d:b8:99:01:fc:36:21:01:40:cb:11:
84:28:86:2f:27:6a:da:e8:37:f3:4f:39:c0:a1:48:
d3:ed:ec:62:53:27:0b:a0:12:f3:bf:e7:a6:b1:0c:
e6:27:20:1e:76:19:ab:8e:96:38:26:b9:33:8f:47:
ac:20:ec:f2:da:b5:fa:de:b9:e4:94:33:58:05:c3:
40:5b:aa:9f:16:09:85:55:69:a5:6c:d2:f4:17:8a:
75:96:7b:ce:06:74:5f:56:b6:3c:ea:38:7e:72:d6:
13:6e:62:78:6d:1a:84:ae:57:27:10:85:ab:88:3c:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:E8:BB:FA:34:EA:48:9F:81:F5:2C:A3:B6:1D:51:D4:DA:9D:5E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.16.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d0:9a:6d:c1:93:6f:2f:8d:e3:23:0e:fa:b0:40:66:b1:db:
0a:c3:19:7a:7e:05:6c:48:04:60:53:91:20:60:d6:fd:2c:a8:
51:6d:33:ed:17:3c:da:88:75:df:32:6c:91:c2:18:9f:5a:f0:
31:70:20:53:1f:d6:cc:9d:18:09:b8:78:3d:4e:2d:69:69:8e:
4a:7c:cf:dc:f5:58:0c:8f:46:eb:b1:89:bc:c0:95:36:77:55:
5c:2b:60:cb:a3:8e:e5:3c:1b:9d:fc:e0:25:c1:b4:64:87:95:
0e:d9:c8:7b:6f:bd:2c:a3:29:ea:23:38:50:d7:52:83:30:65:
2d:f0:f2:27:4b:69:aa:91:46:33:88:dc:71:59:34:4b:6e:86:
33:55:58:8a:94:d4:6b:7b:e8:3a:6f:c1:b4:34:77:7e:a6:5f:
16:a0:0f:65:d5:2a:ab:e9:5c:98:5b:53:2a:2b:66:e3:81:93:
e7:74:17:e4:ed:aa:1c:62:f8:70:a7:6c:7c:cc:7e:c2:b7:8c:
39:8e:21:45:83:d4:70:45:a2:fc:cb:73:7c:48:d2:93:25:8a:
7e:61:d3:15:93:1b:ad:d6:dc:ab:f5:65:87:73:57:35:fb:79:
fe:b5:02:39:7b:00:d3:13:7a:33:28:0e:df:5d:ea:50:a8:4b:
19:5b:5b:35
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUauhaioSBFvN+O1E4znghJePHJpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTAxMjcwOTM5NDhaFw0yNjAxMjYwOTQ0NDhaMDMxMTAvBgNV
BAMTKDZBODhFOEJCRkEzNEVBNDg5RjgxRjUyQ0EzQjYxRDUxRDREQTlENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXSxl/Ca3r1Gd4crfanFfKZiK
UixjbuwXdtNDmcUu7FDfmYenpw3YC7p0l7RDv7BD7ihkLpWoNXtqgLt2w2xXBNta
GE77VbF/3ieInGtRtDkY02nSkfw98XRxrjsC8oS+HDFc5/TqOzBr6qNp+6tLoQgX
q3yuRT8o3SkBgrtpsj3tCJEMqUQi+qeNuJkB/DYhAUDLEYQohi8natroN/NPOcCh
SNPt7GJTJwugEvO/56axDOYnIB52GauOljgmuTOPR6wg7PLatfreueSUM1gFw0Bb
qp8WCYVVaaVs0vQXinWWe84GdF9WtjzqOH5y1hNuYnhtGoSuVycQhauIPLgRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUaojou/o06kifgfUso7YdUdTanV4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzIzMTMyMmUzMTMwMzcyZTMx
MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
1GsQMA0GCSqGSIb3DQEBCwUAA4IBAQAl0JptwZNvL43jIw76sEBmsdsKwxl6fgVs
SARgU5EgYNb9LKhRbTPtFzzaiHXfMmyRwhifWvAxcCBTH9bMnRgJuHg9Ti1paY5K
fM/c9VgMj0brsYm8wJU2d1VcK2DLo47lPBud/OAlwbRkh5UO2ch7b70soynqIzhQ
11KDMGUt8PInS2mqkUYziNxxWTRLboYzVViKlNRre+g6b8G0NHd+pl8WoA9l1Sqr
6VyYW1MqK2bjgZPndBfk7aocYvhwp2x8zH7Ct4w5jiFFg9RwRaL8y3N8SNKTJYp+
YdMVkxut1tyr9WWHc1c1+3n+tQI5ewDTE3ozKA7fXepQqEsZW1s1
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:33 2025 by rpki-client