Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa
File: 3138352e3231362e3130342e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: JeY0PdBV6UN/wjEYKQic+7j6ElIKi0Hoct9uEEdhTE8=
Subject key identifier: 62:2A:CA:27:30:FD:F7:5C:66:45:B6:20:3A:66:98:40:B7:E8:B1:46
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 50CDC9308AFD97AAF0DB3223EA7253C48D62EA96
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa
Signing time: Wed 07 Jun 2023 06:45:40 +0000
ROA not before: Wed 07 Jun 2023 06:40:40 +0000
ROA not after: Wed 05 Jun 2024 06:45:40 +0000
asID: 834
IP address blocks: 185.216.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cd:c9:30:8a:fd:97:aa:f0:db:32:23:ea:72:53:c4:8d:62:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:40 2023 GMT
Not After : Jun 5 06:45:40 2024 GMT
Subject: CN=622ACA2730FDF75C6645B6203A669840B7E8B146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:18:cb:47:8d:3a:21:e4:cb:32:83:bf:cb:
a9:4e:3e:85:af:80:04:59:d9:63:3e:ab:f6:22:8e:
d1:33:7b:11:ca:59:ff:b1:76:a0:09:08:20:46:b6:
3b:9d:83:ec:cb:65:11:a9:43:53:c6:22:ae:b6:23:
f0:3d:a8:67:7b:d8:dd:a3:53:e8:f5:c6:94:2e:f3:
09:e7:cc:aa:41:12:b4:31:02:ef:f8:ac:6d:43:88:
7b:1d:d2:28:8e:e4:c8:a4:14:45:4b:18:b4:f7:73:
ed:1d:fb:ea:b4:f3:f3:93:b8:38:79:d7:4b:a1:84:
4d:35:02:ee:74:e4:08:c1:3b:8b:94:c7:db:ae:12:
9e:dc:67:6b:41:f7:8d:0e:d6:64:8e:a5:27:f3:e5:
91:d2:7d:e6:b0:39:8d:a1:ad:85:05:d3:6d:6f:35:
f1:55:5c:33:e1:a6:4d:e0:7d:f0:d6:5c:ae:92:66:
b0:50:a1:4c:0d:b6:37:2f:a1:98:14:36:ad:35:e6:
ac:81:99:8f:94:7e:42:a4:92:29:e7:09:2f:97:77:
e8:9e:59:db:c8:b5:f1:22:b8:f5:5d:9e:7d:b6:47:
4c:21:94:14:29:74:4a:d9:06:7b:bb:f0:cc:f6:ae:
21:99:92:fa:43:23:73:93:e0:ad:79:59:28:c4:f3:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:CA:27:30:FD:F7:5C:66:45:B6:20:3A:66:98:40:B7:E8:B1:46
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.104.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3c:01:dd:9a:91:4d:b8:ac:11:28:63:a9:14:9a:9f:86:84:
53:81:c2:2e:90:64:fc:b5:ec:c8:1d:1f:a6:be:1a:d9:e7:60:
0f:e6:eb:25:c8:43:a7:3d:03:14:9a:f7:08:bb:59:d9:7c:4d:
dd:1f:b5:0f:cd:e4:c2:cc:80:a6:a9:80:71:7d:54:2c:35:d6:
b3:7f:6c:80:9e:31:ee:d5:92:05:91:b9:48:f3:da:09:b3:12:
ca:db:13:8d:30:aa:25:e3:ab:80:dc:dc:b9:69:6a:0c:ae:d5:
d6:1e:b3:1b:5b:e6:fd:d2:fe:3b:d0:af:e4:fb:f7:8c:b8:56:
9a:51:87:5c:e1:e3:99:2b:f6:3d:22:91:7b:72:e5:a7:c1:2e:
42:f8:6a:25:21:17:9f:9a:26:03:ca:d8:1e:d8:7e:de:45:65:
72:3b:c0:b0:97:44:d2:62:1e:b1:74:60:55:54:a2:8a:ec:f3:
49:24:51:48:a0:33:b4:5d:bf:cb:d2:f8:17:a7:a1:a7:9e:21:
a8:94:00:68:61:a8:d7:38:f2:6d:02:1f:6c:e1:8b:b2:a7:da:
95:b5:e0:15:9d:6c:9c:d7:77:6b:2c:72:50:5c:7b:13:19:ab:
01:72:36:00:19:84:dd:60:c7:fc:b6:bf:f8:86:84:ca:1d:48:
ae:42:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org