Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e203231383539.roa
File: 3231322e3130332e34342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 9Ymk/TbW9oweNKkghBsdgruQcLz+lfKH9NyDbVLaJVA=
Subject key identifier: 32:EB:27:56:86:7A:5C:40:FB:A0:C2:84:08:17:1E:1D:3C:FF:09:7F
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 34CD5D43E3948455FE3A90360202D34A349E2CBD
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e203231383539.roa
Signing time: Wed 27 Nov 2024 06:44:05 +0000
ROA not before: Wed 27 Nov 2024 06:39:05 +0000
ROA not after: Wed 26 Nov 2025 06:44:05 +0000
asID: 21859
IP address blocks: 212.103.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cd:5d:43:e3:94:84:55:fe:3a:90:36:02:02:d3:4a:34:9e:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 27 06:39:05 2024 GMT
Not After : Nov 26 06:44:05 2025 GMT
Subject: CN=32EB2756867A5C40FBA0C28408171E1D3CFF097F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:64:eb:16:0d:78:23:27:a0:5b:3e:4f:95:
b2:29:5f:7b:40:47:08:33:c8:77:e5:8e:b7:5c:59:
59:a6:70:41:38:05:08:ec:88:7b:84:ae:7e:d9:7b:
1a:37:ff:f0:a9:3b:59:5d:bc:4a:d5:26:05:28:19:
2d:fc:e1:7e:33:1f:b7:11:f2:80:e7:f6:41:33:ed:
7d:f2:ec:f8:ab:46:bd:46:ce:35:4a:90:14:af:83:
44:16:91:4e:f1:45:0f:b4:a5:6d:40:89:e5:2e:bc:
a0:38:7c:ce:8b:b3:58:ee:5d:4c:34:3e:2c:e3:a3:
ed:04:a5:d2:95:12:b7:96:13:e2:d9:5c:e4:da:07:
d8:45:c1:8c:64:f7:51:f7:1e:b3:46:ff:64:d6:8a:
d3:58:8e:30:ad:f3:cb:3f:06:61:8e:bd:41:e0:31:
3f:7f:87:51:c7:9a:e4:11:7d:aa:68:1c:bb:68:d1:
54:a8:a6:12:89:1e:61:1c:71:21:70:f5:3f:b1:0e:
f8:2c:79:11:64:41:b3:d5:02:81:b9:37:6e:bd:b4:
b7:50:69:a7:9e:26:76:0b:49:90:5e:6a:8e:39:fd:
e6:0c:82:9c:34:90:53:e0:29:b3:98:42:c4:af:30:
6f:35:46:a5:b1:68:49:3f:d4:19:70:7a:32:a5:2f:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:27:56:86:7A:5C:40:FB:A0:C2:84:08:17:1E:1D:3C:FF:09:7F
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.44.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:47:a5:c4:a9:4c:15:d0:3a:44:2a:fb:f5:59:6c:e5:77:
ba:5b:1a:34:bc:5d:e9:ee:90:f2:42:70:38:4c:bc:a9:a5:f8:
c8:f8:a6:70:c3:1d:91:40:f4:05:8b:be:51:af:7a:ca:6b:c5:
4d:83:b2:48:aa:f7:86:ab:ca:c0:3f:30:4a:ee:56:47:ab:d0:
3f:86:12:21:91:bb:81:2c:b2:c3:48:89:c5:06:93:44:46:46:
96:6e:4a:a7:ef:03:bc:6f:3d:83:4c:6e:ba:fb:e8:28:56:b2:
5a:4c:a7:68:97:b0:5a:7a:58:34:01:81:5e:10:05:d8:cb:ea:
f9:77:08:71:90:de:ad:f0:33:11:7b:40:a7:30:4f:bd:9b:56:
b8:c3:27:be:8b:2d:ee:9f:14:d9:96:0f:fe:23:3f:0b:56:95:
32:63:34:62:98:3d:da:0b:b9:0e:d3:ee:44:85:b6:cb:c4:57:
88:d9:7a:60:b9:2a:9f:a5:a8:9c:a9:20:1e:be:e4:39:8d:c8:
89:b0:00:75:57:ff:7d:e3:8b:3a:27:62:e5:bb:c8:d0:54:ba:
a6:af:59:d3:cf:44:53:7f:1b:16:da:17:af:5a:33:8b:a4:53:
3e:f6:b3:a3:a6:84:66:09:f3:d7:83:d9:0a:b5:fd:76:26:6e:
3a:ff:ed:91
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNM1dQ+OUhFX+OpA2AgLTSjSeLL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNDExMjcwNjM5MDVaFw0yNTExMjYwNjQ0MDVaMDMxMTAvBgNV
BAMTKDMyRUIyNzU2ODY3QTVDNDBGQkEwQzI4NDA4MTcxRTFEM0NGRjA5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPWTrFg14IyegWz5PlbIpX3tA
RwgzyHfljrdcWVmmcEE4BQjsiHuErn7Zexo3//CpO1ldvErVJgUoGS384X4zH7cR
8oDn9kEz7X3y7PirRr1GzjVKkBSvg0QWkU7xRQ+0pW1AieUuvKA4fM6Ls1juXUw0
Pizjo+0EpdKVEreWE+LZXOTaB9hFwYxk91H3HrNG/2TWitNYjjCt88s/BmGOvUHg
MT9/h1HHmuQRfapoHLto0VSophKJHmEccSFw9T+xDvgseRFkQbPVAoG5N269tLdQ
aaeeJnYLSZBeao45/eYMgpw0kFPgKbOYQsSvMG81RqWxaEk/1BlwejKlL3ShAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMusnVoZ6XED7oMKECBceHTz/CX8wHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzIzMTMyMmUzMTMwMzMyZTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1GcsMA0GCSqGSIb3DQEBCwUAA4IBAQA4oUelxKlMFdA6RCr79Vls5Xe6Wxo0vF3p
7pDyQnA4TLyppfjI+KZwwx2RQPQFi75Rr3rKa8VNg7JIqveGq8rAPzBK7lZHq9A/
hhIhkbuBLLLDSInFBpNERkaWbkqn7wO8bz2DTG66++goVrJaTKdol7Baelg0AYFe
EAXYy+r5dwhxkN6t8DMRe0CnME+9m1a4wye+iy3unxTZlg/+Iz8LVpUyYzRimD3a
C7kO0+5EhbbLxFeI2XpguSqfpaicqSAevuQ5jciJsAB1V/9944s6J2Llu8jQVLqm
r1nTz0RTfxsW2hevWjOLpFM+9rOjpoRmCfPXg9kKtf12Jm46/+2R
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:57 2024 by rpki-client on console.sobornost.net