Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa
File: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: MyYhDCClqOEVfO2vmjRhAsiP6s592VYzOcyJsCiwYE8=
Subject key identifier: B3:0E:3C:43:13:09:0B:02:8F:C7:73:37:3B:28:3A:BE:17:79:72:88
Certificate issuer: /CN=40925af8017ebcf7c34d1a62658cc465308245c0
Certificate serial: 721BDA45B1041E9ECB8633DD97E337D4DA853DD4
Authority key identifier: 40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:44 +0000
ROA not before: Mon 27 Mar 2023 08:22:44 +0000
ROA not after: Mon 25 Mar 2024 08:27:44 +0000
asID: 201341
IP address blocks: 80.71.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1b:da:45:b1:04:1e:9e:cb:86:33:dd:97:e3:37:d4:da:85:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40925af8017ebcf7c34d1a62658cc465308245c0
Validity
Not Before: Mar 27 08:22:44 2023 GMT
Not After : Mar 25 08:27:44 2024 GMT
Subject: CN=B30E3C4313090B028FC773373B283ABE17797288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:90:a5:e2:29:e8:d1:ce:51:78:e4:f5:a4:
a8:61:e2:42:6b:ed:20:42:7b:3a:93:d1:1c:62:df:
36:4a:66:70:14:48:f8:cc:7b:dd:7c:32:e8:b6:d9:
45:7e:93:df:01:ac:47:df:2a:04:75:1b:35:23:aa:
49:79:42:43:49:ed:3e:e7:16:ed:78:87:2f:13:0d:
96:ee:7d:eb:cb:db:a9:1a:22:8e:7e:67:3c:ed:d4:
21:47:f7:6c:db:77:ec:ee:2c:db:9b:f3:e0:ae:1e:
76:ef:d0:83:42:16:ac:19:4c:ff:70:2e:ee:7c:f7:
dc:45:5c:40:e8:1b:7b:e0:2d:ba:c2:25:6e:b9:d0:
51:88:99:2f:0a:00:22:d9:67:15:71:80:22:ac:fc:
23:a5:cc:44:30:57:b7:71:d8:48:14:7f:c2:90:44:
e6:64:84:79:e1:28:f5:a0:44:99:4c:cb:ee:9d:62:
54:b5:2c:14:5e:0c:b5:40:a0:49:16:ba:c2:7e:cf:
98:7d:1b:f4:f3:48:34:c3:cc:52:69:5d:5e:fb:df:
0d:2f:75:14:99:e8:0a:67:da:67:8a:3d:fa:b1:1a:
e1:f8:eb:f5:8a:6e:eb:79:f4:b5:19:b0:d6:6f:cc:
43:25:82:aa:26:81:c6:f6:53:8d:65:f0:59:b6:93:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:3C:43:13:09:0B:02:8F:C7:73:37:3B:28:3A:BE:17:79:72:88
X509v3 Authority Key Identifier:
keyid:40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.148.0/24
Signature Algorithm: sha256WithRSAEncryption
76:56:c9:d9:9b:8b:ae:5e:06:ea:75:a9:f1:fd:54:c8:50:f1:
37:4c:42:02:12:46:15:43:8b:b9:81:c4:db:96:b0:56:01:a1:
b8:3e:2b:7a:9f:94:58:af:e5:4b:09:62:6a:20:24:85:ba:30:
e2:e6:f4:de:fa:6c:f8:d9:31:56:91:fc:34:67:42:6f:b0:ce:
ab:27:20:6f:0f:1b:23:51:ba:bb:77:25:33:5e:01:56:35:dd:
c3:97:e1:6b:68:6b:cd:78:81:16:71:72:6b:d2:9c:3e:78:86:
82:35:33:33:1f:c0:2a:07:8d:6f:b9:5e:a2:d9:23:60:e0:86:
6c:8f:97:04:b4:99:cc:c5:d3:b7:39:98:37:88:cc:72:72:6c:
14:a1:a7:2b:1d:16:0e:32:6e:0a:41:6b:66:1e:4f:78:39:7b:
4e:ec:b9:9d:8f:d2:72:31:d9:fa:b7:ee:45:37:81:45:f1:dd:
bb:9d:43:e2:99:be:11:50:71:fa:c3:fe:28:95:10:c5:03:5c:
98:8a:e6:be:4b:fc:9f:1b:7c:10:57:2a:9e:63:9c:48:a7:18:
dd:f7:3f:fc:66:36:1d:8c:58:39:85:84:11:18:bd:11:af:be:
4b:8e:a0:e1:86:d2:d8:d2:9c:5d:88:94:bc:bc:7d:2a:58:11:
fd:3e:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org