Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/3230322e35302e35332e302f32342d3234203d3e20323133373037.roa
File: 3230322e35302e35332e302f32342d3234203d3e20323133373037.roa (raw, json)
Hash identifier: iaFeacRadeJFe1GETpDvF5UZqc5zJysNy36E46llZNg=
Subject key identifier: 63:DC:E1:85:FD:3C:B4:96:8B:C9:BD:56:C7:FD:1A:4E:3D:56:95:A7
Certificate issuer: /CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Certificate serial: 15F51A1BE218BC986D717E7EB9865BE082C33A69
Authority key identifier: F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/3230322e35302e35332e302f32342d3234203d3e20323133373037.roa
Signing time: Fri 04 Apr 2025 21:19:04 +0000
ROA not before: Fri 04 Apr 2025 21:14:04 +0000
ROA not after: Fri 03 Apr 2026 21:19:04 +0000
asID: 213707
IP address blocks: 202.50.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f5:1a:1b:e2:18:bc:98:6d:71:7e:7e:b9:86:5b:e0:82:c3:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5
Validity
Not Before: Apr 4 21:14:04 2025 GMT
Not After : Apr 3 21:19:04 2026 GMT
Subject: CN=63DCE185FD3CB4968BC9BD56C7FD1A4E3D5695A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:df:93:21:d7:b0:9f:96:05:dd:c1:78:f7:
6e:f9:c9:59:db:f4:c0:bc:3f:2a:60:12:7e:0c:09:
14:e0:5d:32:6e:a9:9b:e0:c6:7d:35:65:9f:f0:ee:
76:f4:78:5a:91:34:17:4b:0f:51:f4:c9:1d:95:a3:
01:cf:0b:e1:8e:18:9b:1a:35:62:af:b4:69:60:d2:
76:a4:da:70:97:59:78:6c:c1:81:86:1e:34:09:73:
2e:06:a6:1b:1f:cd:b2:22:b4:ce:31:7a:43:bc:66:
e6:49:a1:4d:10:dd:d6:0b:50:ee:59:16:f4:c8:fe:
5f:df:7f:96:fe:2c:49:f1:c9:e3:14:6a:ec:51:a1:
d8:f4:9e:7a:ff:ba:5b:e2:25:26:ec:58:f5:71:31:
9a:bf:5b:f0:e7:be:a2:5e:d8:6e:e7:d8:df:82:88:
85:f3:c2:5d:1a:04:f2:be:63:27:45:aa:8c:77:b5:
91:a2:98:1f:ed:c2:e0:35:c9:80:cb:7a:eb:44:10:
53:25:1f:1a:b4:7d:41:44:f4:ae:16:45:44:8a:67:
ba:01:d8:bf:74:89:65:13:78:19:77:d6:62:cc:22:
ee:b5:a1:03:f3:30:34:1d:4c:fc:6a:1a:df:8c:fd:
58:9a:04:9f:c2:5b:b7:03:fd:24:cc:2f:bb:02:80:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:E1:85:FD:3C:B4:96:8B:C9:BD:56:C7:FD:1A:4E:3D:56:95:A7
X509v3 Authority Key Identifier:
keyid:F6:0B:FC:22:CE:5A:3D:F5:51:DA:BB:CC:4C:48:D2:B3:F8:C5:6D:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F60BFC22CE5A3DF551DABBCC4C48D2B3F8C56DF5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4e650b54-abc4-4418-aeb6-088a50d1d5f1/0/3230322e35302e35332e302f32342d3234203d3e20323133373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.53.0/24
Signature Algorithm: sha256WithRSAEncryption
44:14:50:ca:97:32:15:90:2a:f9:c4:83:28:4f:f2:11:78:69:
a0:48:56:fe:3d:de:a3:be:ab:b9:fe:c3:38:3d:51:09:df:1d:
79:77:39:a1:e9:cc:b1:e7:83:f7:25:62:e0:84:b9:ef:78:1f:
7c:a2:fe:c4:6d:fd:20:f2:bd:b0:03:0b:1f:1c:0d:07:7a:57:
12:e4:0b:4b:2f:7c:87:43:a6:b2:5b:ca:bb:86:78:a1:2b:b4:
30:e4:24:b8:27:34:f4:cf:41:83:8a:a8:1b:6c:cb:61:78:86:
b2:ad:8f:90:b3:0a:6d:a8:fc:9d:cf:20:45:02:99:6b:a2:9a:
89:e8:40:08:0a:33:0b:4d:84:a0:74:b7:da:36:b5:30:d2:a3:
e4:21:ad:38:17:cb:48:2e:d8:0d:de:ad:24:df:f1:6e:3f:b2:
b6:ea:16:27:50:5b:65:db:8f:cb:9a:22:c1:67:c5:72:1b:ee:
14:b1:4d:49:f9:14:27:38:5b:f8:8b:cf:69:d2:04:7a:ee:0d:
68:7a:bc:ea:58:bb:d1:32:50:72:e4:1f:e7:0b:19:4d:6d:19:
0f:25:d1:bd:70:75:36:c2:d8:68:24:97:ad:82:aa:c3:93:32:
7f:91:e0:72:a7:5a:39:dc:33:ab:01:c2:9d:5c:c9:b4:fe:0f:
8b:0b:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:24 2025 by rpki-client on console.sobornost.net