Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20383334.roa
File: 3231322e3130332e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vEdELFQYtyYRinzQ/tV7Y8LvXVFViQxnidBgfJLOB14=
Subject key identifier: 54:DB:19:F5:7D:63:CE:16:10:B9:D5:9B:46:1E:82:D2:16:D1:97:6A
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 79F0B0CE4B67BE9074B24A18A1B43F9FD63F034E
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Apr 2025 10:09:11 +0000
ROA not before: Fri 11 Apr 2025 10:04:11 +0000
ROA not after: Fri 10 Apr 2026 10:09:11 +0000
asID: 834
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f0:b0:ce:4b:67:be:90:74:b2:4a:18:a1:b4:3f:9f:d6:3f:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Apr 11 10:04:11 2025 GMT
Not After : Apr 10 10:09:11 2026 GMT
Subject: CN=54DB19F57D63CE1610B9D59B461E82D216D1976A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:4b:a9:10:71:24:9c:48:ed:d8:dc:f4:6a:
8b:15:dc:a7:9e:19:c9:60:22:a7:f4:64:70:ea:f8:
35:41:94:10:0c:e3:57:15:10:15:c6:db:a0:0c:64:
5b:82:55:75:be:e9:2d:b3:93:9e:24:47:1e:9e:d3:
ac:03:16:ac:3e:75:72:ff:74:8e:c7:87:f7:20:36:
64:2b:53:60:5f:a0:ce:46:09:be:c1:90:96:d0:69:
7e:46:ae:e6:42:fb:dc:11:a9:b1:32:6f:bd:3e:b3:
f4:57:38:ef:36:65:b7:8f:b5:cf:18:d1:b6:db:cb:
f9:54:fb:17:5d:b9:b2:10:18:74:93:d8:bd:1d:50:
bb:a5:85:02:8b:33:47:4b:3e:c0:9f:92:38:63:8a:
42:00:39:c6:ac:4f:bd:af:4c:8e:5b:83:19:73:ff:
5b:74:1b:28:db:26:3b:ec:e6:18:67:69:88:21:bf:
db:8c:b8:8c:a9:c4:31:83:0c:2d:23:16:7b:79:22:
ce:68:7f:ab:5f:6a:5f:a0:37:02:dd:14:cd:5c:8a:
df:a7:a5:2b:5a:65:1a:f7:10:d8:fe:10:41:63:ca:
4d:7f:08:0a:1c:e6:56:05:e5:8d:b3:75:c5:6e:0f:
32:10:94:b3:5f:cf:4d:0e:47:73:2f:7f:85:6f:e1:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:19:F5:7D:63:CE:16:10:B9:D5:9B:46:1E:82:D2:16:D1:97:6A
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:55:41:74:44:f7:a1:76:d0:a6:cc:9d:85:ad:da:d6:38:77:
42:6a:79:a9:09:36:e5:03:f8:3c:bc:30:e8:e0:70:b2:37:d0:
a7:c9:45:a8:ec:ea:d9:9a:53:0d:da:6e:89:96:88:f1:20:f8:
88:69:32:4c:0d:30:d1:4f:56:ff:e7:7e:69:3c:00:7d:5c:d3:
0a:2c:a4:c7:73:bc:13:b8:c7:49:42:62:13:7c:51:7b:4e:e5:
ab:2c:f2:6a:f7:01:b9:84:41:6c:98:39:50:d6:ad:4f:1f:ba:
b1:26:5d:8c:d6:58:7b:f4:91:1d:31:f1:59:e2:bf:38:66:a3:
84:73:7a:43:59:a6:ed:7a:09:20:4a:ca:4c:27:8a:d9:ab:90:
1b:f7:9d:2f:b8:a4:a9:98:61:dd:d9:af:87:89:69:c5:ae:89:
87:84:30:82:99:85:e1:d4:81:60:4f:40:b0:5c:6d:8b:98:c8:
99:23:8d:0c:10:1c:26:e5:5f:bc:cb:4f:da:66:cb:a1:40:b2:
17:7b:bb:85:88:22:40:6c:05:ec:c9:98:c6:92:f4:fe:3c:08:
19:ab:6f:09:39:c5:e4:46:1d:c0:cb:6b:56:18:71:09:97:bc:
2c:1e:89:41:df:15:cb:52:6e:75:7c:58:2f:b4:48:bd:cc:34:
90:d3:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net