Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232302e302f32342d3234203d3e20383334.roa
File: 3138352e3232392e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0DDjvboVLBjdfqm58OpM9C/ymmioBsqPfhB+XqlqyiI=
Subject key identifier: C0:68:8A:A5:62:80:BE:74:00:91:6A:B6:70:55:2E:1D:37:2F:D2:F1
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 78164500933635BE5035E767680E52FAA9045B39
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232302e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 Sep 2023 00:00:07 +0000
ROA not before: Wed 13 Sep 2023 23:55:07 +0000
ROA not after: Thu 12 Sep 2024 00:00:07 +0000
asID: 834
IP address blocks: 185.229.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:16:45:00:93:36:35:be:50:35:e7:67:68:0e:52:fa:a9:04:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Sep 13 23:55:07 2023 GMT
Not After : Sep 12 00:00:07 2024 GMT
Subject: CN=C0688AA56280BE7400916AB670552E1D372FD2F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:d6:4c:18:40:7c:5e:3e:ff:37:9f:b9:29:
00:5a:06:09:a9:72:b7:53:79:49:b6:a1:5e:bc:55:
a6:72:36:66:28:32:96:b0:17:5d:3d:bd:23:e4:69:
db:61:2f:d5:63:4d:e8:2f:67:c6:ad:eb:1d:df:90:
c8:b3:cd:cc:f8:66:aa:a6:5e:a7:8e:9e:26:0d:94:
32:20:e4:e2:82:37:96:cd:15:c1:9a:a4:1d:aa:c2:
12:96:c2:c4:2e:00:a3:a0:29:61:7f:e9:e9:1f:9c:
4b:5b:e3:82:4a:a0:c6:17:53:73:de:37:4d:99:ed:
19:0a:b6:a9:89:05:9c:bf:75:12:f6:33:5b:6f:e1:
48:45:5e:1e:b4:8a:63:fa:b8:01:01:97:2c:ae:f0:
29:c3:1d:e7:2d:3a:b8:57:22:45:7d:04:e2:b0:33:
52:35:5d:59:66:ec:19:54:7e:57:8c:66:a9:69:49:
a0:8e:71:47:17:e5:b5:d8:0c:f6:3f:db:eb:9a:a9:
36:7c:e2:63:80:a5:02:a6:d3:d5:10:67:3f:3a:cb:
c2:cc:0c:20:b0:d8:10:23:17:2e:bd:31:6b:dd:bc:
71:02:82:0e:c5:2f:31:b6:5a:b2:e1:99:69:ae:5f:
03:8e:87:04:ad:ed:c4:26:a1:1e:85:59:98:2a:59:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:8A:A5:62:80:BE:74:00:91:6A:B6:70:55:2E:1D:37:2F:D2:F1
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5f:61:0c:cf:77:03:c7:6f:e9:5f:94:e2:8f:20:16:b7:f2:
36:e6:8f:74:56:6e:53:13:82:94:87:9c:e2:8e:0a:cf:ef:f0:
82:26:60:2d:be:85:cb:f4:e6:9b:19:df:7c:bb:38:d9:80:80:
61:6a:1d:8d:ca:85:d1:3c:8f:d1:1c:8a:9f:8a:c1:1b:46:32:
8a:3c:75:06:c2:54:4f:3f:8b:fc:a9:10:ce:1f:7d:c1:42:2b:
3b:42:bf:1e:f4:a9:5d:54:8e:3f:7f:45:3c:4a:ef:92:0e:75:
f8:3d:cf:e8:42:91:26:d2:d9:ce:3b:cd:6e:df:33:36:ed:97:
d9:e6:b7:20:ee:9e:8c:7e:47:d1:9f:f8:46:92:55:6d:02:8f:
df:f6:2d:ed:74:eb:94:3b:18:1a:7d:96:7c:b9:24:2f:be:ac:
df:6a:ad:41:c0:ef:a7:cd:88:aa:10:8e:50:38:d2:0c:1f:be:
ab:ab:fa:52:27:a4:6b:78:af:76:4a:c3:5d:54:80:e8:9f:bf:
19:20:c6:6d:d9:c0:68:82:b5:6e:7b:63:49:25:3e:8b:c8:4f:
9d:22:07:47:e2:9c:33:05:ed:15:16:0c:b7:67:17:d1:f1:99:
8b:d2:3f:55:c7:2b:b5:a0:74:34:41:d4:c7:b6:a2:c8:dd:02:
4d:8e:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:49:02 2024 by rpki-client on console-fra.rpki-client.org