Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39342e302f32332d3234203d3e20383334.roa
File: 3138352e3137362e39342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: duPw9FJlitCibNjUbSjqPwT7twHB7XmzkOQRLDOVlM8=
Subject key identifier: 1C:FA:69:20:B4:9A:F9:CE:CE:9A:04:70:F7:A8:20:B5:ED:63:EC:F4
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 54700CF3053669B0D397E9806E4468B438747A32
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39342e302f32332d3234203d3e20383334.roa
Signing time: Sun 20 Aug 2023 13:00:07 +0000
ROA not before: Sun 20 Aug 2023 12:55:07 +0000
ROA not after: Sun 18 Aug 2024 13:00:07 +0000
asID: 834
IP address blocks: 185.176.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:70:0c:f3:05:36:69:b0:d3:97:e9:80:6e:44:68:b4:38:74:7a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Aug 20 12:55:07 2023 GMT
Not After : Aug 18 13:00:07 2024 GMT
Subject: CN=1CFA6920B49AF9CECE9A0470F7A820B5ED63ECF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:df:86:8a:af:16:b7:e5:45:bc:ff:28:23:
ec:9a:74:60:b9:ba:1e:4a:03:c6:a2:1d:f2:b1:a5:
4a:e5:53:0a:e4:98:68:bb:60:e3:41:b7:68:79:7c:
08:37:89:e3:be:f9:de:11:45:bd:b7:08:7b:d5:55:
78:0e:02:82:5a:b1:bb:63:79:1a:46:56:1b:76:5a:
3d:a1:22:5b:45:2c:e0:fe:a7:32:70:4e:74:48:2e:
f1:79:f8:c7:4d:0f:89:a7:3e:ba:7e:26:fc:4d:81:
06:88:e9:82:e7:36:c5:dc:14:1d:12:4b:b9:81:12:
70:9e:71:09:07:32:30:89:65:c7:eb:02:6b:0e:15:
d8:2a:59:d6:e4:9f:10:cd:39:a9:2f:59:0f:61:96:
89:a9:2e:d5:a6:b7:04:4d:ba:ee:43:6a:68:27:99:
30:db:6f:2e:eb:03:80:7b:a3:d6:55:2c:21:8b:90:
a4:e4:21:e7:f6:91:a6:1f:25:0c:f9:b2:7b:0d:e7:
cd:b5:92:5f:da:42:74:f3:93:77:22:d0:87:1f:86:
ff:6f:cd:bb:2c:21:c5:89:cd:7a:9f:ee:ce:3a:5a:
4b:bb:e7:c9:48:ed:10:8f:fa:fd:2c:41:3d:3c:59:
d7:e7:79:cf:9a:d1:5c:11:1e:62:19:a0:97:4a:a5:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:69:20:B4:9A:F9:CE:CE:9A:04:70:F7:A8:20:B5:ED:63:EC:F4
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3137362e39342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:59:7e:98:f2:09:4d:bc:97:ed:cf:ee:67:40:28:ca:9d:dc:
7d:ec:fb:8b:82:aa:df:c3:db:98:7b:7d:af:af:d4:01:1a:4a:
62:21:9e:36:e9:c6:19:26:88:66:78:99:24:62:f2:4d:75:93:
1e:62:d8:e3:4a:3c:90:c1:5c:fe:de:00:26:f4:65:2c:b8:cc:
ee:43:ad:12:ef:a0:20:bc:ab:5e:d2:03:0c:9a:b2:87:97:ac:
fb:49:5f:a1:45:49:f0:59:41:74:85:22:4c:ca:85:3e:f4:c0:
6d:2e:12:5f:f8:3c:c6:43:31:08:8d:4f:db:eb:4f:84:ae:cc:
b0:5b:a1:30:20:8d:af:90:bb:04:a8:6f:3f:a4:8e:20:18:ac:
c6:0d:61:8c:e6:09:04:d5:9f:0d:f1:7c:2d:27:b5:b5:17:a3:
99:ae:1e:50:de:8b:d9:30:9a:63:d9:c3:14:e5:b4:a1:f9:72:
b6:d0:fe:58:2c:71:cb:30:c7:45:a9:54:b3:11:34:69:13:ce:
29:9f:3a:f2:42:58:5e:19:c1:cc:79:f2:3b:46:f6:3a:29:75:
52:90:a4:aa:ab:67:62:74:e4:0f:28:b5:44:1a:88:0a:11:d1:
f2:7d:a7:90:b9:ed:ae:21:a4:b9:f9:4b:0a:49:45:99:87:73:
51:08:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org