Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa
File: 3231322e39302e3132322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: vODW4/xVkG88u5qV0CHxwLuM1jiHBaSQe/y5CpTRDg4=
Subject key identifier: AC:59:F8:4A:D0:B1:1E:F5:E4:1C:FF:74:92:9E:AE:BC:C0:BC:0A:2F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 4D880EBA5CCE636D6D247F9097BD80B1CD8D670C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 0
IP address blocks: 212.90.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:88:0e:ba:5c:ce:63:6d:6d:24:7f:90:97:bd:80:b1:cd:8d:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=AC59F84AD0B11EF5E41CFF74929EAEBCC0BC0A2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:b4:78:f7:ba:23:3a:ce:23:c2:20:0b:98:
99:d9:db:db:7b:65:c1:90:d0:5f:e8:49:cd:3e:e0:
58:11:db:22:27:83:4b:ac:69:09:c0:96:11:cb:95:
37:e0:3a:d7:ae:8a:84:a9:1c:3c:8f:b1:ba:d9:89:
f2:ae:bd:d9:ac:5e:b1:20:e5:d7:21:ef:bd:c5:73:
1c:c4:bb:07:2b:23:cb:53:0c:cf:0b:80:47:98:f1:
8e:f7:7a:7d:7d:0a:69:75:b1:cf:13:22:29:a4:2a:
df:e8:4f:44:93:9f:45:c6:72:ed:6d:15:65:d1:d4:
19:66:95:68:1d:72:83:22:dd:45:f2:3c:a7:03:10:
de:8e:fa:29:8e:0e:81:32:b9:b2:b8:31:59:4e:56:
4d:a6:97:0b:d5:5c:b6:97:fe:ea:52:b6:b6:00:03:
79:71:c9:25:50:83:6d:bb:90:6d:9a:ac:96:60:09:
7f:c7:08:5b:0f:0b:08:5d:6e:07:3d:ad:d4:30:d8:
67:23:95:86:fd:de:b3:3a:77:1c:c2:01:de:d8:43:
36:4d:8d:02:f5:32:23:ce:22:23:e8:dd:70:5c:4a:
c2:a4:8e:8e:25:89:56:9a:7e:35:e9:b2:5e:97:b7:
84:86:2b:7f:17:7b:87:91:ae:68:a3:58:4c:f9:f5:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:F8:4A:D0:B1:1E:F5:E4:1C:FF:74:92:9E:AE:BC:C0:BC:0A:2F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3231322e39302e3132322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.122.0/23
Signature Algorithm: sha256WithRSAEncryption
10:56:72:93:03:9f:f3:be:1a:a8:70:ee:8a:69:99:d1:27:d6:
95:01:58:c3:32:f2:27:ea:db:49:29:80:7c:66:6d:a0:5a:d9:
b7:36:f3:d2:a1:b2:95:d5:bd:e0:1e:5a:68:53:f7:86:c1:05:
19:ad:b2:23:e0:98:78:cb:42:6d:4a:81:e6:e3:9f:2a:38:91:
38:ed:f0:b9:02:e7:4e:c4:cf:1e:22:20:a2:47:fd:37:46:c3:
bb:e9:b1:02:8f:3a:9a:81:65:6c:fc:ba:2a:7e:9b:0d:99:24:
2c:4c:af:95:90:11:3e:b6:64:24:cf:16:bd:31:fb:31:2a:2c:
16:39:53:4b:75:71:53:de:d7:d5:aa:ba:f3:7b:d2:22:53:92:
3b:7b:d7:85:92:95:39:3b:03:37:ee:91:31:4c:a0:20:ec:be:
50:68:61:ea:8f:79:fe:85:46:2d:96:91:4c:84:c2:32:a4:23:
02:46:d3:94:f0:d7:b0:1a:8f:8d:18:27:07:d8:6f:bb:2c:5b:
e3:f7:59:7e:f4:4a:b3:e8:b2:ae:67:10:4c:d1:4c:85:6e:55:
1c:5a:58:2b:d0:f0:b4:28:a2:f9:14:0d:4e:7e:c0:46:4f:93:
f3:94:0f:9e:41:29:7a:62:f4:9a:86:84:30:2f:3a:11:08:16:
c7:32:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:07 2025 by rpki-client