Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9n3g5yFITLm2ptjuXh/lTCN+fpm5/F5WhgzwLJnl/FI=
Subject key identifier: 35:C5:9C:1A:40:D7:67:D3:65:D4:F5:87:B4:68:35:22:4A:61:38:C9
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0878E451A3F7BE4C49AE871A92219DD07403857D
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
Signing time: Thu 10 Oct 2024 03:59:53 +0000
ROA not before: Thu 10 Oct 2024 03:54:53 +0000
ROA not after: Thu 09 Oct 2025 03:59:53 +0000
asID: 834
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:78:e4:51:a3:f7:be:4c:49:ae:87:1a:92:21:9d:d0:74:03:85:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 10 03:54:53 2024 GMT
Not After : Oct 9 03:59:53 2025 GMT
Subject: CN=35C59C1A40D767D365D4F587B46835224A6138C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:11:ed:e1:5e:61:47:00:fc:7c:68:51:0b:
80:f3:a8:95:8a:77:7b:42:ce:eb:11:4d:ce:91:bd:
b9:77:72:75:64:05:39:2a:27:85:15:3a:bd:b0:bb:
41:0d:29:a3:3f:21:84:a9:bd:87:2a:1e:c0:4e:3a:
ba:ea:ca:dd:0e:5b:7e:52:c3:ff:02:e2:a3:4a:47:
da:50:39:73:a9:87:73:ea:98:f2:13:63:e2:49:b0:
9f:da:00:47:3f:00:f0:84:43:c6:a3:20:1e:05:dc:
3e:ea:de:f7:f5:e7:99:d7:0c:81:f1:56:23:09:4f:
5e:96:25:5c:67:18:09:c8:65:71:87:c8:14:9a:97:
66:aa:b5:60:c4:1f:9a:4c:e6:d2:3d:84:d0:e3:35:
dc:1c:0a:69:46:6c:13:3c:4c:9d:7d:60:d2:84:d3:
3e:12:d3:06:c9:d7:dd:fd:45:de:ad:c6:bb:f2:58:
52:ea:c5:c0:a7:45:10:58:64:70:aa:36:9d:9e:f6:
dc:b4:72:70:d0:c0:ad:91:f1:76:b9:3d:59:ba:eb:
b0:a4:4f:67:8a:67:f1:a4:60:91:46:2f:fc:24:66:
db:43:dd:74:98:50:6c:71:4c:d7:f0:35:32:ec:63:
fa:63:4a:5b:e3:4d:2f:4d:47:f7:5f:2c:1d:3c:f6:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:9C:1A:40:D7:67:D3:65:D4:F5:87:B4:68:35:22:4A:61:38:C9
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5c:71:b4:53:9c:fb:37:72:89:f9:c3:b0:bb:73:fc:fa:88:
f5:30:df:67:1f:2a:bc:3e:e3:07:ac:ff:c6:46:53:b7:71:eb:
c4:38:ba:e6:e8:2e:91:4a:b0:6e:d7:80:23:23:7a:4c:8c:d7:
4c:28:9a:04:5e:b8:36:ef:31:6a:cd:c0:86:d0:95:a5:20:d8:
7b:8c:7c:ce:75:c3:79:70:12:d0:bc:8f:2c:e1:df:f1:89:d2:
80:5b:b2:79:69:e3:86:fc:d9:10:13:f6:3b:a9:cd:cd:76:1c:
33:87:83:62:d1:e9:af:da:23:06:9e:2b:a4:8d:13:0b:ef:86:
f6:16:40:f1:10:0b:57:db:1f:69:98:4c:10:9e:ee:b3:9d:00:
d8:5d:38:bb:e2:3e:09:13:47:74:1f:5f:c0:fb:85:49:57:09:
e8:f5:9b:46:7e:82:66:41:23:1e:87:6b:6f:f8:a2:f3:97:75:
fe:72:11:22:83:18:b6:ed:0f:88:79:2a:28:ab:25:d2:7b:6b:
53:02:ee:2c:3d:85:2e:05:63:fa:b2:3c:39:b8:fc:e9:57:f7:
87:30:4d:28:e0:83:89:48:cb:20:90:aa:25:4e:3c:ab:29:fe:
b6:db:18:6a:8a:0d:0e:ff:c3:a2:30:72:ae:1a:3a:fb:80:11:
0e:6f:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:24:43 2024 by rpki-client on console.sobornost.net