Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa
File: 3138352e3137362e39332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OQoOxJRdnWuJ59uM8MCvaHiPv4B5l7tTwmoTjwA3Rlc=
Subject key identifier: B8:0E:CC:1A:C8:B8:86:00:E1:52:98:3A:15:D7:4C:8D:87:6E:D4:5F
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 282B13F4B55205ED5754DEA479E98593EE05278A
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa
Signing time: Mon 20 Nov 2023 10:03:29 +0000
ROA not before: Mon 20 Nov 2023 09:58:29 +0000
ROA not after: Mon 18 Nov 2024 10:03:29 +0000
asID: 834
IP address blocks: 185.176.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2b:13:f4:b5:52:05:ed:57:54:de:a4:79:e9:85:93:ee:05:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Nov 20 09:58:29 2023 GMT
Not After : Nov 18 10:03:29 2024 GMT
Subject: CN=B80ECC1AC8B88600E152983A15D74C8D876ED45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:fa:f8:8d:23:6a:68:fa:b9:28:f7:b0:e9:
8b:45:a5:a7:a5:3c:cd:85:f8:e8:a0:a1:d2:9a:ed:
da:cc:71:d8:ae:27:4d:0c:27:70:20:dd:23:66:a6:
a8:4e:f7:49:d3:1f:68:05:0e:89:27:1a:82:30:8e:
9d:5e:3c:2e:b7:d7:fa:cc:ec:95:ed:9f:9e:e8:28:
b2:12:14:5e:ea:04:9d:b7:de:0e:a6:49:af:f9:8e:
10:33:f8:89:49:6f:85:fe:87:ac:fd:50:24:23:ea:
bd:1e:bd:2e:c5:32:95:6e:02:08:25:1a:ae:90:05:
71:6b:10:a5:c9:98:f5:39:a4:48:c8:2b:02:e2:a9:
aa:eb:98:fb:2f:34:2a:42:0d:fa:bd:fb:ad:c2:67:
d3:d8:2f:4b:69:ac:7c:c5:a5:fc:ba:0b:b6:a8:13:
1c:0c:29:8b:95:80:cf:29:21:4f:bc:f9:a8:9c:1f:
e3:b8:c1:71:20:85:f0:d2:47:aa:0e:93:9b:b4:72:
14:10:e5:dc:d0:6b:58:a4:44:ee:d3:d4:31:e9:75:
bb:e6:94:78:ad:84:db:93:da:d7:fd:56:2f:88:bb:
3c:61:4f:71:ff:b4:63:d0:55:26:b6:54:69:d1:2c:
c9:fd:42:ce:2a:1a:08:4e:88:4b:6a:54:2a:64:78:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:CC:1A:C8:B8:86:00:E1:52:98:3A:15:D7:4C:8D:87:6E:D4:5F
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.93.0/24
Signature Algorithm: sha256WithRSAEncryption
92:94:c2:d4:f1:fd:a3:d5:d9:23:84:01:a6:8f:a1:ce:90:14:
da:c9:13:a4:fa:44:30:c5:f0:ab:4f:d5:28:5d:d6:7a:33:40:
ae:f2:38:4a:f0:a2:5c:d5:b2:d3:d3:e9:38:9d:59:f5:d8:bf:
ba:8b:81:0e:2d:39:64:20:d8:7d:9a:41:19:59:78:a0:ad:81:
f8:3f:1b:83:3f:5a:22:80:41:55:1c:eb:b8:c0:df:38:dc:97:
a1:be:2a:8a:b9:23:fe:c5:12:fb:9e:94:3b:f5:75:68:35:d3:
9e:a6:45:6c:c7:94:36:5e:a6:53:2a:c2:c6:96:4e:80:e9:5c:
21:9f:0e:f9:23:cc:d0:15:6e:83:3f:ef:37:c5:40:12:42:1d:
41:c6:e3:2e:c8:28:99:61:cf:56:4d:f7:55:6b:16:ba:97:a6:
f8:8b:98:38:75:12:4b:66:af:f6:c0:39:14:07:c5:a6:63:53:
62:18:7c:b1:1e:d6:3c:dc:69:3e:a0:5e:c8:13:9a:c3:a7:63:
84:fc:39:6d:5b:77:1f:0e:c9:51:f0:d9:3d:bd:c7:dc:17:b7:
85:83:76:49:ee:56:c8:d1:42:7e:32:8d:f6:5d:b8:24:ec:db:
25:79:8a:8c:13:a4:c0:fd:04:59:33:d6:62:7b:c2:c7:03:39:
72:67:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org