Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
File: 3231332e352e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3D5WGQx8FJbsajhBLp6Uvl/cTYCkppzQ9/3Vs14HoYU=
Subject key identifier: EF:89:CF:F5:3C:22:F1:AE:92:5D:10:D6:CC:67:BF:E2:72:CD:32:55
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 294646BA4936BC293592A4EC793CDB0392CEF8E4
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
Signing time: Sun 28 Jul 2024 00:00:32 +0000
ROA not before: Sat 27 Jul 2024 23:55:32 +0000
ROA not after: Sun 27 Jul 2025 00:00:32 +0000
asID: 834
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:46:46:ba:49:36:bc:29:35:92:a4:ec:79:3c:db:03:92:ce:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 27 23:55:32 2024 GMT
Not After : Jul 27 00:00:32 2025 GMT
Subject: CN=EF89CFF53C22F1AE925D10D6CC67BFE272CD3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:7e:b2:fc:82:11:ff:03:27:37:e1:a5:ae:
2b:a6:3d:35:45:f4:96:ee:a7:f0:9b:af:4c:14:59:
b3:a0:c3:fc:4a:4a:b2:9e:66:04:f6:ed:ac:43:ad:
f6:99:5a:d6:1d:f9:8f:be:1f:ad:28:41:b1:14:85:
05:44:10:1f:77:c7:89:7a:6e:e5:b0:79:51:cf:2f:
45:02:13:b2:b6:a0:3b:fd:4a:71:f1:de:a7:d9:67:
30:26:8e:6b:c3:b3:10:e1:5f:69:92:0b:28:ba:a0:
ef:47:44:e7:08:c9:26:e4:28:85:e9:0a:5d:93:8a:
e0:15:c4:d8:8b:ac:95:8f:0a:ee:75:f5:84:54:e5:
6e:cb:96:16:9f:0e:63:17:24:48:bd:3a:c8:af:65:
f7:34:03:36:ec:3d:9a:4c:cd:cb:c5:ab:33:6c:eb:
ea:30:a3:92:88:c1:bb:8d:dd:52:6c:2a:76:3a:fd:
2e:58:94:99:75:46:96:68:3e:10:29:f6:06:80:f1:
4b:08:6b:9f:3e:c0:aa:f2:94:8e:c7:d0:53:b1:07:
77:cb:2a:55:7a:e0:5b:75:68:a8:9c:be:a7:63:13:
2d:7e:fd:6e:04:44:06:d0:89:d6:d8:a6:89:e0:db:
ef:7d:09:bf:b2:28:6d:fd:ee:81:32:30:31:18:a7:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:CF:F5:3C:22:F1:AE:92:5D:10:D6:CC:67:BF:E2:72:CD:32:55
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
83:48:ec:6e:7d:fe:d1:53:c1:d9:29:f0:d6:b3:2d:ae:94:08:
e7:58:82:59:76:52:29:3e:91:21:81:af:8a:01:a0:c0:00:cb:
99:c0:0c:8c:b8:9b:d7:93:e4:c4:ac:ed:9a:00:f3:db:ef:2a:
c5:d2:d5:74:56:1d:ec:9e:e2:64:d4:e7:58:78:e8:b9:9d:1d:
65:2c:86:bb:87:7f:af:da:c9:a3:ee:1d:8d:92:70:a1:e1:e7:
b7:51:01:0f:8b:90:35:0d:3d:33:e3:f7:54:62:75:47:16:db:
d2:f6:e1:53:85:c1:d6:4a:fa:86:f8:bf:e6:a5:18:33:1d:2d:
3a:3a:65:ab:7b:e4:ed:f9:3a:ab:c8:0a:44:76:03:58:8b:8b:
50:4d:79:6a:c9:59:0c:a0:45:e7:9a:1d:4d:ce:7f:d6:a6:0b:
9a:7d:24:23:46:8a:0b:84:29:82:2f:9e:b8:ee:bf:84:f8:65:
23:88:e6:af:b1:f2:43:8d:ef:07:e5:6c:ff:d0:59:1c:d7:df:
63:57:9e:4e:93:18:12:a2:79:dc:e2:8b:08:e0:8f:8a:d0:4c:
7c:10:d1:8d:ca:f6:e7:64:ef:1f:49:59:fa:28:b6:e3:fb:d5:
04:9c:05:4d:3e:c0:8b:55:d8:87:dd:f6:bf:fe:2a:cf:b3:c7:
ea:45:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 01:02:54 2024 by rpki-client on console.sobornost.net