Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
File: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: qMvjY/fWn5InV6J4cS4hy8H0yoL+x8y94PhGRhmRcwE=
Subject key identifier: 0B:5A:11:A3:CB:80:DB:6B:2E:37:0F:47:90:38:61:8C:44:69:B0:19
Certificate issuer: /CN=517eb47b21069e2acca5181fba0abfd0e9284b2a
Certificate serial: 26CDDD4180999E746AC79F5B5E1C683B36A27653
Authority key identifier: 51:7E:B4:7B:21:06:9E:2A:CC:A5:18:1F:BA:0A:BF:D0:E9:28:4B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX60eyEGnirMpRgfugq_0OkoSyo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 23 Mar 2023 16:30:51 +0000
ROA not before: Thu 23 Mar 2023 16:25:51 +0000
ROA not after: Thu 21 Mar 2024 16:30:51 +0000
asID: 200017
IP address blocks: 185.251.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cd:dd:41:80:99:9e:74:6a:c7:9f:5b:5e:1c:68:3b:36:a2:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517eb47b21069e2acca5181fba0abfd0e9284b2a
Validity
Not Before: Mar 23 16:25:51 2023 GMT
Not After : Mar 21 16:30:51 2024 GMT
Subject: CN=0B5A11A3CB80DB6B2E370F479038618C4469B019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:07:6c:70:6e:ad:c0:8e:66:53:3d:6b:df:
0e:f9:12:9d:40:f7:4b:29:bd:28:97:b0:d9:2a:d7:
89:a5:d2:ee:b9:2a:31:06:85:b6:87:f7:03:84:49:
06:69:49:b2:e9:0b:34:70:5f:9e:db:fc:8d:ac:1d:
43:28:58:8f:f2:d6:4e:db:22:16:26:56:88:aa:fb:
7f:9a:73:0e:59:b0:6b:68:2c:fa:3e:b8:e5:94:96:
a3:32:4a:67:a7:ec:61:1d:73:90:13:16:b3:f5:3c:
92:a4:a5:50:ca:56:08:ad:77:29:a3:b9:e6:f5:52:
4f:d1:6b:5b:99:a6:3f:d3:f7:0a:a9:17:06:80:00:
03:bf:ac:e5:02:36:c5:d2:11:ac:3b:bc:b1:de:af:
b1:19:30:4c:97:e9:4e:0b:1c:16:1a:d6:77:b9:d0:
32:1b:46:76:be:e0:af:36:81:a2:a9:9c:28:81:56:
8a:1b:2f:85:04:74:a5:b0:f3:5b:0c:10:1d:cb:4c:
58:cb:fc:b7:6a:7b:87:96:aa:5e:d4:de:e6:08:88:
a1:56:9d:02:dd:3c:f9:a6:55:18:ee:18:10:b8:c9:
b8:28:ff:4a:b8:eb:3c:fe:e7:c7:97:70:b5:43:71:
12:ca:eb:3c:fc:8c:c1:44:88:9d:09:0a:33:8c:de:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:11:A3:CB:80:DB:6B:2E:37:0F:47:90:38:61:8C:44:69:B0:19
X509v3 Authority Key Identifier:
keyid:51:7E:B4:7B:21:06:9E:2A:CC:A5:18:1F:BA:0A:BF:D0:E9:28:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/517EB47B21069E2ACCA5181FBA0ABFD0E9284B2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX60eyEGnirMpRgfugq_0OkoSyo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8574e975-c52f-4c08-81d0-2a0ae9876c92/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:13:5e:59:ab:93:cb:51:b8:c5:28:0e:19:18:e5:82:23:
93:f6:72:24:31:ee:c7:3c:45:e9:df:03:ab:fe:b2:a8:a2:09:
d2:b9:64:51:76:d8:e5:08:fe:bb:51:ab:a6:0a:a7:13:bb:9c:
2f:52:90:1c:9d:31:6e:d7:11:ef:bf:6c:77:c6:cf:2e:14:6b:
f2:de:e8:4b:7d:74:0c:b2:5a:31:3d:ea:bf:e4:80:a4:37:d2:
59:76:b2:08:23:a1:77:33:3d:6f:01:89:b0:93:df:6d:f8:cd:
40:59:90:51:77:fc:e3:be:5d:ab:b4:25:25:18:73:36:63:1b:
27:15:37:a8:c0:34:29:86:50:65:05:26:ab:15:0c:85:0a:04:
af:8e:4b:96:33:9d:cb:03:e0:c8:e8:82:16:f6:b0:ac:a6:fc:
5a:84:83:3f:3e:ce:19:de:97:cf:db:b1:2d:60:68:dc:5d:8b:
9f:30:69:f8:12:57:b4:9b:98:13:22:2e:8f:e8:8b:81:39:83:
ed:31:e7:16:d3:f1:d3:02:60:4d:84:8e:bc:e6:34:44:b7:98:
53:6d:79:b4:b1:16:3e:f6:1e:6b:b9:98:5c:f4:a2:f5:ef:ec:
87:90:18:af:c3:ad:5c:0d:68:47:a2:38:6f:52:e9:4e:22:f2:
46:5f:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 10:35:01 2023 by rpki-client on console-ams.rpki-client.org