Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
File: 3231322e39302e3132302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: DQuEsHFUduo+8CabNFHl6fVG52XSbb458gY1vauDGrI=
Subject key identifier: 95:BF:E8:68:EC:6A:5F:33:AB:0F:D9:4F:B6:93:DE:57:48:CD:0B:A8
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 052FDF26652B56F15DB3D060466BE7B9320407E5
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:17 +0000
ROA not before: Mon 27 Mar 2023 08:22:17 +0000
ROA not after: Mon 25 Mar 2024 08:27:17 +0000
asID: 51167
IP address blocks: 212.90.120.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2f:df:26:65:2b:56:f1:5d:b3:d0:60:46:6b:e7:b9:32:04:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:17 2023 GMT
Not After : Mar 25 08:27:17 2024 GMT
Subject: CN=95BFE868EC6A5F33AB0FD94FB693DE5748CD0BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:da:9a:12:a1:b7:6d:5f:73:2d:4f:a6:e4:
9e:42:8c:45:16:60:55:39:b0:d8:c7:e5:8f:fa:47:
75:7c:10:9e:1d:ea:19:30:c1:fb:b8:c2:69:c5:3a:
c3:82:7d:06:af:90:9b:94:a3:41:bc:c1:42:ef:9a:
8b:56:94:f0:ce:df:05:66:84:eb:a8:5b:fc:c4:ca:
d3:29:18:0e:d4:ea:56:35:e6:ab:ed:02:c6:52:18:
77:88:18:3d:ea:03:4e:b5:8a:1d:30:78:0c:9d:bc:
14:75:44:90:90:86:13:94:4c:34:0d:b1:9a:be:38:
f9:36:fe:e5:ee:cd:d0:f0:a3:88:f6:92:93:53:30:
38:bb:94:f5:9a:ff:70:5c:01:b7:e6:df:8a:ba:30:
77:ce:81:5b:55:0c:d9:e7:63:7e:da:cf:59:03:b4:
1d:19:7f:00:d4:48:a5:08:9e:1c:4c:b3:c4:07:35:
0c:e3:d4:40:bf:00:a1:1d:17:a5:91:b4:32:93:2a:
0a:6b:53:b3:73:ed:d1:7c:61:0c:15:3d:2a:6b:6e:
87:8a:c9:58:87:77:06:e6:59:0b:86:2b:d1:bd:42:
78:09:1a:8a:f7:40:54:2e:6b:ee:6a:02:92:a8:3b:
2e:74:51:37:f3:5e:51:ba:69:6d:97:dc:86:4d:f5:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:E8:68:EC:6A:5F:33:AB:0F:D9:4F:B6:93:DE:57:48:CD:0B:A8
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.120.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c1:48:54:f6:b0:8e:fe:41:5e:12:3d:81:d4:1f:f4:47:66:
d9:dc:30:72:18:d4:d9:6e:da:37:8b:5a:fa:14:e5:7a:c3:b8:
64:87:55:2c:10:cd:9e:81:4c:fa:dd:89:24:86:b1:59:7f:d5:
b3:ac:0a:ff:37:db:b8:44:7a:aa:cf:81:05:9a:d3:9f:43:72:
ab:53:48:92:04:26:51:18:b4:6a:7e:f1:fb:bc:69:72:49:68:
dc:f0:b2:87:48:55:c1:9e:83:b7:26:af:4a:16:59:a9:d6:9b:
e2:63:b8:d9:ac:4e:2d:77:50:c7:69:0c:25:a9:c1:c9:c4:24:
f6:6a:dd:65:83:60:c6:33:f1:73:42:58:d9:cc:64:8d:e6:68:
70:24:ff:60:0a:1c:a2:ad:47:1e:3a:9b:02:62:13:36:ec:96:
16:87:a1:32:1f:d0:9c:62:24:9f:e4:94:9d:01:2f:b0:f2:76:
e4:5f:60:e9:ac:ce:f2:ab:fb:b6:c7:99:be:4a:19:33:12:9b:
8e:34:4b:13:b2:4d:db:b3:1c:04:b7:5d:89:ae:48:96:e7:34:
01:25:d8:d3:20:f1:cf:98:73:be:c1:88:e1:d9:57:c2:df:0e:
8d:f4:59:3b:3b:49:17:ef:97:b4:6e:c7:60:c5:0c:c2:46:bf:
cc:e5:53:47
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBS/fJmUrVvFds9BgRmvnuTIEB+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTdaFw0yNDAzMjUwODI3MTdaMDMxMTAvBgNV
BAMTKDk1QkZFODY4RUM2QTVGMzNBQjBGRDk0RkI2OTNERTU3NDhDRDBCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN9qaEqG3bV9zLU+m5J5CjEUW
YFU5sNjH5Y/6R3V8EJ4d6hkwwfu4wmnFOsOCfQavkJuUo0G8wULvmotWlPDO3wVm
hOuoW/zEytMpGA7U6lY15qvtAsZSGHeIGD3qA061ih0weAydvBR1RJCQhhOUTDQN
sZq+OPk2/uXuzdDwo4j2kpNTMDi7lPWa/3BcAbfm34q6MHfOgVtVDNnnY37az1kD
tB0ZfwDUSKUInhxMs8QHNQzj1EC/AKEdF6WRtDKTKgprU7Nz7dF8YQwVPSprboeK
yViHdwbmWQuGK9G9QngJGor3QFQua+5qApKoOy50UTfzXlG6aW2X3IZN9eTlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlb/oaOxqXzOrD9lPtpPeV0jNC6gwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzIzMTMyMmUzOTMwMmUzMTMy
MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
1Fp4MA0GCSqGSIb3DQEBCwUAA4IBAQBjwUhU9rCO/kFeEj2B1B/0R2bZ3DByGNTZ
bto3i1r6FOV6w7hkh1UsEM2egUz63YkkhrFZf9WzrAr/N9u4RHqqz4EFmtOfQ3Kr
U0iSBCZRGLRqfvH7vGlySWjc8LKHSFXBnoO3Jq9KFlmp1pviY7jZrE4td1DHaQwl
qcHJxCT2at1lg2DGM/FzQljZzGSN5mhwJP9gChyirUceOpsCYhM27JYWh6EyH9Cc
YiSf5JSdAS+w8nbkX2DprM7yq/u2x5m+ShkzEpuONEsTsk3bsxwEt12JrkiW5zQB
JdjTIPHPmHO+wYjh2VfC3w6N9Fk7O0kX75e0bsdgxQzCRr/M5VNH
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org