Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/220/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jd1pCNEuldrx95JQ9nuLKNnFAJSGgY9dJ0dAOIWMltM=
Subject key identifier: BA:7F:2B:EF:7E:69:58:60:60:24:AC:BE:37:61:6A:80:1D:3E:AB:B3
Certificate issuer: /CN=2cdf6d0cb7d8a871879e1855ed23b0ec4f791ae3
Certificate serial: 391D42BC6606EAA3463CEC651DA0AFA077C23C8F
Authority key identifier: 2C:DF:6D:0C:B7:D8:A8:71:87:9E:18:55:ED:23:B0:EC:4F:79:1A:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LN9tDLfYqHGHnhhV7SOw7E95GuM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/220/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 136787
IP address blocks: 185.147.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:42:bc:66:06:ea:a3:46:3c:ec:65:1d:a0:af:a0:77:c2:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cdf6d0cb7d8a871879e1855ed23b0ec4f791ae3
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=BA7F2BEF7E6958606024ACBE37616A801D3EABB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:0f:4b:dd:df:a1:31:c3:ae:4f:ff:b7:45:
5e:d5:ee:73:ec:7e:7a:90:6c:5a:6e:90:41:88:6a:
31:6e:68:e1:89:ab:7e:d3:20:9a:72:03:ed:23:94:
f0:6e:83:ec:15:dd:16:03:e4:93:8b:b1:43:4e:de:
58:8e:5b:3e:c6:86:02:75:f4:5f:12:9a:ed:18:ce:
15:ad:68:40:24:d3:5b:79:8f:62:10:ca:2b:29:37:
72:44:72:a4:91:97:7f:b2:0d:b7:df:a7:c9:09:1b:
80:ad:9a:d3:3f:78:e2:fc:6e:ae:44:aa:ec:b4:2f:
5e:e3:59:1a:f0:f7:9d:62:b6:a8:4e:48:83:e1:ec:
d7:3e:10:c7:6a:51:1d:23:12:33:95:c0:56:97:2e:
90:dd:0d:73:2d:1a:00:76:6d:50:2e:14:d4:12:af:
f1:d9:4d:4e:4a:bb:44:a4:32:70:f9:94:79:7a:57:
af:06:e2:61:c1:de:cf:af:00:d2:a4:75:23:be:0a:
d8:f5:b3:27:63:0f:e8:88:bd:84:c7:16:64:af:76:
6b:3c:0d:73:72:35:43:60:65:64:2e:4e:58:22:71:
18:52:75:7e:46:9a:60:06:c4:4a:cd:02:04:cd:52:
04:95:c7:05:03:65:5e:f2:dd:04:a1:a3:d2:f3:cc:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:2B:EF:7E:69:58:60:60:24:AC:BE:37:61:6A:80:1D:3E:AB:B3
X509v3 Authority Key Identifier:
keyid:2C:DF:6D:0C:B7:D8:A8:71:87:9E:18:55:ED:23:B0:EC:4F:79:1A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/220/2CDF6D0CB7D8A871879E1855ED23B0EC4F791AE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LN9tDLfYqHGHnhhV7SOw7E95GuM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/220/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8c:f0:3f:15:1f:44:bb:4b:6c:02:71:a5:5d:43:7a:02:ca:
be:11:7c:b5:67:d9:a3:a3:21:41:08:cf:21:75:ba:f0:ae:85:
cc:bc:39:0d:e0:a3:5c:d0:12:b4:dc:53:55:92:ea:a2:6d:31:
30:fd:08:ec:fd:d4:8f:be:b8:8c:36:cf:b3:ec:40:65:a0:49:
da:df:7f:27:21:d8:f5:7d:2c:6b:86:0c:36:b1:12:55:23:c3:
b5:76:19:2e:a6:e6:35:8b:ca:1c:6e:71:fe:f0:c2:a6:38:7f:
04:68:5d:6d:5d:4c:64:3c:9c:ab:00:41:2e:0f:ed:41:53:6d:
ea:40:91:ae:64:ad:06:1f:c5:fa:e9:23:a7:4b:fc:66:f2:fc:
16:94:d6:4e:3f:c5:f3:0f:a5:a6:a5:c5:db:82:af:c3:44:b9:
5e:45:b3:89:7e:33:07:c4:6b:15:9b:17:e6:11:03:98:8d:b9:
45:1f:e4:21:d5:19:b1:05:6f:40:dd:21:8e:a9:83:f6:37:fc:
fc:2c:2c:3c:75:7c:a3:a7:3f:79:13:d0:ff:c9:df:5a:a0:d4:
1e:e4:20:92:8d:2e:4b:46:54:0c:e2:2a:f0:79:8d:13:e2:d4:
d2:cb:3a:33:69:cc:04:31:37:2b:4d:12:fe:16:b9:f0:36:45:
ea:6f:3e:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org