Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
File: 3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa (raw, json)
Hash identifier: db9+8LDGy3AiNNNvdjyiBYqBDZp62sEa6bIs2TCp9cc=
Subject key identifier: 22:EB:7D:DE:76:61:A9:8A:50:00:E5:4E:9D:D2:5E:FD:39:BB:B7:69
Certificate issuer: /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial: 08C384EE4331CFF2A54BF9BC9022E538DED918D4
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
Signing time: Sun 17 Dec 2023 15:48:39 +0000
ROA not before: Sun 17 Dec 2023 15:43:39 +0000
ROA not after: Sun 15 Dec 2024 15:48:39 +0000
asID: 197882
IP address blocks: 185.212.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c3:84:ee:43:31:cf:f2:a5:4b:f9:bc:90:22:e5:38:de:d9:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
Validity
Not Before: Dec 17 15:43:39 2023 GMT
Not After : Dec 15 15:48:39 2024 GMT
Subject: CN=22EB7DDE7661A98A5000E54E9DD25EFD39BBB769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:79:95:33:c4:8f:bc:1a:d2:07:a8:b2:07:
db:95:28:8a:d9:c2:cb:c9:88:66:3f:79:e5:8d:b2:
38:c9:3e:4e:1d:c8:3f:fd:56:9c:fb:5c:31:3c:5d:
5a:5a:44:32:f9:ed:e3:b6:96:80:e7:c6:57:7c:ea:
58:c4:39:f2:6d:11:6e:52:83:e5:dc:b6:f3:a9:31:
00:51:80:d0:9e:52:bf:bb:c4:18:14:b5:40:87:95:
c3:f5:c5:92:ac:30:e6:18:76:28:4f:f8:68:39:cc:
b4:ac:6d:9a:29:9c:81:98:9e:5b:85:47:1b:df:ee:
5c:04:64:4d:de:7d:b2:be:2c:50:84:05:9d:35:3d:
a8:f6:00:ff:1b:4b:56:d2:f5:cd:92:d4:e1:00:78:
16:3b:15:2c:ac:c1:7a:d4:b8:88:56:26:4e:9d:ea:
3c:fe:dc:ee:28:1f:60:9f:e2:88:91:b8:0b:81:09:
af:8f:05:c2:da:52:30:64:d7:77:0c:a2:d1:d9:a3:
79:41:9d:11:44:3e:82:56:ff:f4:52:75:dd:3a:3b:
81:e8:83:1b:98:8f:e2:e9:d6:46:a0:00:ad:ad:b1:
60:17:b6:2c:53:8d:e2:9c:d8:59:cd:40:31:eb:0a:
c3:21:74:a1:c7:6b:53:46:a0:17:a7:76:4a:8d:f3:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EB:7D:DE:76:61:A9:8A:50:00:E5:4E:9D:D2:5E:FD:39:BB:B7:69
X509v3 Authority Key Identifier:
keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
03:bd:cb:4f:c2:70:96:74:62:e1:0c:b5:70:01:d9:cf:bf:c8:
92:55:dd:5a:1f:8a:a5:48:05:c9:e8:a9:02:d6:d0:c3:d6:cc:
cb:f5:e4:44:bf:0b:df:48:63:32:a4:41:94:f0:b1:17:14:3f:
65:cd:fc:98:a5:49:d0:88:08:86:11:ad:cb:ea:5e:26:90:12:
7a:66:02:00:a0:55:8e:97:cb:d0:38:e1:77:6f:3a:03:df:42:
23:d2:01:94:3f:90:5e:e7:57:66:1e:45:59:3d:57:5e:a5:0f:
c4:3c:bf:2f:d1:71:55:40:39:3a:28:e0:1b:04:f7:69:60:87:
3a:7f:75:50:79:6c:d0:cd:4a:8a:49:16:6a:97:dc:e3:e1:92:
56:38:81:1e:50:a1:ee:4b:17:7d:04:44:83:e1:a9:fc:ba:90:
c8:c6:ec:cc:42:5d:6b:a3:d3:df:f5:55:03:df:7f:36:51:4a:
cc:01:ff:a5:66:70:43:e0:45:66:2d:7f:72:a6:f9:fd:1e:d2:
41:a6:a6:f4:f3:80:38:a5:83:5e:96:47:6c:e9:d7:4f:29:5e:
34:72:d2:c0:5f:a9:a6:e7:2f:dd:ef:be:62:f0:a4:68:f2:3b:
0a:3c:39:ac:4a:8d:d7:5c:1b:de:42:7e:31:82:df:aa:8b:ff:
d8:0b:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 15:03:21 2023 by rpki-client on console-fra.rpki-client.org