Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kFEMZVTJPI+wGvmiIAdi8UjlBass37RhPG6fbmYxMvg=
Subject key identifier: D7:B2:5E:BE:68:31:B0:32:65:4B:AC:07:7A:FD:5C:10:D7:E3:CB:2E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 24526A7A0DF2FFEA187744F5F76179CF8DAC3A42
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
Signing time: Wed 31 Jul 2024 00:01:08 +0000
ROA not before: Tue 30 Jul 2024 23:56:08 +0000
ROA not after: Wed 30 Jul 2025 00:01:08 +0000
asID: 834
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:6a:7a:0d:f2:ff:ea:18:77:44:f5:f7:61:79:cf:8d:ac:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 30 23:56:08 2024 GMT
Not After : Jul 30 00:01:08 2025 GMT
Subject: CN=D7B25EBE6831B032654BAC077AFD5C10D7E3CB2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:dd:72:94:23:a7:73:ec:b5:be:a9:46:e6:
da:e1:25:1b:91:aa:8a:34:3b:53:3f:fb:7e:0d:b5:
6f:e7:be:44:7c:79:d4:37:f4:e4:2a:c2:3a:d6:16:
cd:fe:e1:8f:b3:08:a2:04:0b:7d:e9:64:e3:b5:59:
5e:b5:65:25:5d:4a:29:ff:04:29:cc:8a:48:ea:2a:
54:75:24:fd:ca:3e:78:e2:38:03:c5:30:44:e8:3e:
fb:d4:a3:a7:43:fb:ab:ec:67:6e:d3:4c:de:47:cd:
a9:3b:3a:d6:0d:75:b2:b5:cc:3e:fe:aa:09:36:30:
66:fe:27:44:6b:71:7e:9b:24:b3:46:bb:cb:00:53:
45:12:a0:9e:79:e9:4a:97:39:e7:89:cd:2d:72:51:
eb:89:7d:d3:53:5d:63:78:fa:c8:ab:81:d0:49:39:
d0:02:05:c9:09:44:85:db:4a:90:30:1e:f4:90:2e:
e9:64:c2:63:a3:75:d8:1a:75:33:a9:78:dd:71:84:
2f:20:cb:33:1b:3b:d0:8a:e6:17:40:18:da:45:68:
1c:9d:00:b6:0a:f0:28:5c:4b:3c:25:4b:25:df:1c:
3d:8a:20:3d:6a:47:f5:33:cc:35:e8:e1:2c:0a:7c:
cc:70:3c:5a:e0:2b:34:c8:40:ce:8e:66:11:e4:75:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B2:5E:BE:68:31:B0:32:65:4B:AC:07:7A:FD:5C:10:D7:E3:CB:2E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fd:cf:19:07:6a:7d:55:5f:da:db:9e:36:48:79:3a:01:52:
8d:be:c8:12:38:b2:47:c4:8c:1f:8b:8c:dc:98:b3:08:84:7b:
ce:a5:ef:ff:aa:28:86:0e:65:46:c7:83:a1:c8:d0:fa:23:c8:
25:f6:96:fe:a4:52:8b:81:52:5d:52:66:53:2c:38:df:d7:2b:
69:3c:9e:ce:4d:c9:58:22:3b:37:99:d3:e3:26:22:e6:a4:1f:
29:d5:e4:15:35:31:96:be:85:28:a5:22:25:78:50:ed:5c:96:
95:02:ba:15:7e:b8:ff:dc:c7:24:16:69:c5:82:36:bf:c8:ef:
fb:3d:ed:1c:d5:1e:61:91:b6:a3:d9:48:9b:45:ab:a3:6b:14:
47:74:1a:19:8a:cb:ae:bf:3f:86:e7:be:47:ea:b0:1d:2e:16:
19:37:c7:0c:98:43:28:36:38:de:ce:ac:a3:42:7b:1a:ed:83:
34:1c:d8:fb:30:ab:b4:82:ca:cb:2e:14:9c:58:d9:0c:ba:7d:
c1:21:5b:c1:4e:8b:40:fa:e0:c0:5b:70:52:b0:1e:55:e7:4c:
d6:7b:18:a0:84:a7:c4:56:33:20:14:cb:8a:ac:5e:3a:7e:2b:
c4:af:80:d1:8e:18:eb:11:60:12:a9:c1:8c:06:c8:72:3d:63:
56:14:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 10:02:59 2024 by rpki-client on console.sobornost.net