Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e203630313137.roa
File: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier: o2O6mm+3NiSpIxIRK8ZNrpzy6suVZYBh7tcixISbCrs=
Subject key identifier: BE:51:0B:76:B0:53:FD:6D:DA:AA:97:B2:C6:58:F0:48:55:9C:9A:76
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 22110798D3F806FCAA48117009B41FAA3451661A
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e203630313137.roa
Signing time: Mon 27 Jan 2025 14:20:51 +0000
ROA not before: Mon 27 Jan 2025 14:15:51 +0000
ROA not after: Mon 26 Jan 2026 14:20:51 +0000
asID: 60117
IP address blocks: 212.103.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:11:07:98:d3:f8:06:fc:aa:48:11:70:09:b4:1f:aa:34:51:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 27 14:15:51 2025 GMT
Not After : Jan 26 14:20:51 2026 GMT
Subject: CN=BE510B76B053FD6DDAAA97B2C658F048559C9A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:bc:16:dc:2c:b7:38:87:eb:73:c1:97:7a:
2e:2c:c5:d7:64:99:32:c1:f4:c6:37:81:32:50:54:
df:b9:af:0b:40:bb:5d:aa:d5:31:4c:2f:98:d7:5b:
fa:c5:b5:18:8a:93:8d:a6:e8:ab:3a:c3:67:82:a0:
44:3e:3b:b1:f1:62:27:be:46:59:1d:f8:b5:ad:b0:
78:8c:4c:e9:72:46:f9:32:81:b0:27:0b:e9:16:41:
38:7a:42:78:fb:b7:da:fc:7b:aa:a2:56:1c:91:7e:
c5:8d:f6:21:f2:b9:32:f7:24:04:1c:ad:e9:6a:96:
6d:38:85:24:08:8b:32:8c:91:f4:61:7a:e4:81:9b:
0f:59:80:c4:75:3d:85:31:e8:01:ab:73:ec:ab:5d:
60:b2:98:27:23:a1:0d:fe:e4:ac:a7:f3:61:fb:66:
6c:49:de:2d:ae:76:6c:63:c1:0a:c3:18:72:42:de:
83:c9:e5:81:34:3a:d4:a3:13:f2:e9:f5:68:5f:91:
0a:ef:94:dd:d8:2e:e1:39:49:cf:4c:54:4d:72:bf:
00:57:71:cf:e0:66:cd:a2:fb:d4:29:49:67:da:fe:
7a:53:94:af:44:e4:52:aa:43:2a:d2:32:82:b1:0e:
ab:62:36:d1:d6:8b:a5:b2:9d:c9:64:ec:92:1f:d6:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:51:0B:76:B0:53:FD:6D:DA:AA:97:B2:C6:58:F0:48:55:9C:9A:76
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34372e302f32342d3234203d3e203630313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d3:10:92:e5:64:27:9a:76:2d:ff:d5:42:4e:48:32:2b:80:
d1:09:b1:1d:83:24:c2:5a:ae:4a:0a:39:4d:be:42:2a:8c:22:
50:3c:ed:6a:16:a5:2b:b2:08:f7:c4:16:c7:af:37:6e:90:41:
87:8a:b0:f3:cf:a7:3c:30:f8:4d:6e:e0:ff:7b:6e:7f:ef:5d:
8b:1e:13:4b:b7:8f:28:20:56:63:fa:ab:17:ef:fa:b2:72:84:
b9:ed:54:ce:55:4b:3b:82:e5:cb:c8:a5:a0:a8:9d:df:8d:f8:
f9:37:cf:42:b5:52:96:84:b7:b7:30:42:13:cc:ef:39:21:5d:
5c:96:78:d0:9f:9d:72:ea:e2:b5:75:15:f2:4e:13:49:f1:aa:
6a:79:cd:1b:db:d3:c3:91:3e:bf:d6:d4:c3:36:cb:69:da:9d:
aa:fe:7d:c0:75:7b:5a:a4:6c:8a:58:f8:25:9f:d9:84:4f:59:
53:54:6e:d4:83:e4:a0:9e:37:b1:67:7b:71:76:b7:f3:6d:74:
c6:2a:c3:41:7c:43:0e:95:a7:43:67:5f:d9:c9:06:64:4b:b1:
9f:82:8c:c7:94:14:bd:bc:94:eb:53:6d:d4:52:4f:40:9e:d6:
aa:ec:04:dc:8d:49:bc:0c:26:0e:b2:02:f7:2e:34:9c:81:10:
9d:81:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:03 2025 by rpki-client