Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa
File: 3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier: leYP6eIffIv6sa195NGMzd1xo8f102EN8FKDmaylfsw=
Subject key identifier: 5C:4D:B2:07:68:BE:26:A5:24:2C:61:2B:DC:71:11:F3:B3:9B:DE:27
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 025B415A036BEE3EA5958D604352CD24E530D620
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa
Signing time: Wed 07 Jun 2023 06:45:37 +0000
ROA not before: Wed 07 Jun 2023 06:40:37 +0000
ROA not after: Wed 05 Jun 2024 06:45:37 +0000
asID: 1239
IP address blocks: 185.229.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5b:41:5a:03:6b:ee:3e:a5:95:8d:60:43:52:cd:24:e5:30:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Jun 7 06:40:37 2023 GMT
Not After : Jun 5 06:45:37 2024 GMT
Subject: CN=5C4DB20768BE26A5242C612BDC7111F3B39BDE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:96:81:4f:0f:3e:8d:2a:72:f0:a7:e2:16:
37:42:aa:7c:9b:35:ce:3c:cd:3a:f5:c0:f3:64:0d:
4c:6d:90:31:3d:33:0a:99:b3:41:07:de:f1:24:10:
30:54:92:f2:44:c0:a3:9c:c4:c3:c3:f7:31:4f:ad:
16:aa:5b:72:12:ec:c1:8b:1b:12:da:ed:5d:43:15:
48:cf:81:ea:e5:30:13:a3:78:48:e6:48:56:5a:aa:
5f:2c:ce:b9:97:2e:18:2d:64:ca:f6:95:47:43:03:
f1:22:40:7d:39:97:c0:33:6f:66:83:ff:46:49:86:
05:23:3b:85:31:35:4a:71:f6:af:58:54:08:d1:c3:
fd:5c:a3:15:66:0d:fb:a4:c8:44:44:f4:7f:f0:fa:
73:de:ec:5f:55:10:bc:d9:5a:22:3a:92:f3:ce:5f:
33:3a:18:8e:cd:29:04:08:1c:10:87:ff:b3:49:e0:
eb:86:f3:29:d4:2f:d5:e9:37:ad:7e:6e:8a:14:9f:
e0:5f:e6:85:74:23:38:20:40:f5:8e:8c:5f:40:a7:
b7:cb:ea:d7:17:76:fc:15:a6:a0:dd:b7:01:14:2b:
ea:95:09:e6:e2:f7:c8:18:d7:aa:ca:19:0e:04:e1:
5c:7a:23:00:63:47:e4:78:c6:e2:85:2d:49:e3:08:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:B2:07:68:BE:26:A5:24:2C:61:2B:DC:71:11:F3:B3:9B:DE:27
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.222.0/23
Signature Algorithm: sha256WithRSAEncryption
81:d3:6e:f7:5a:0a:93:27:f6:73:31:fa:db:5f:d0:b0:8c:fc:
4d:a2:a3:16:46:7c:91:37:83:0a:c4:33:31:23:23:33:66:ef:
ec:02:95:54:0a:fc:54:7b:64:91:e3:0c:78:a2:10:74:b4:5b:
77:3a:a3:7a:a3:61:ea:be:68:f9:24:44:b9:41:e6:e1:95:b4:
21:89:bc:00:da:ee:18:67:54:21:02:26:b8:00:93:ec:dd:76:
7f:d4:f6:66:34:be:7b:a7:c5:52:58:96:d3:79:8d:53:7d:42:
4f:f8:21:1d:d5:aa:e6:e6:b6:3b:f1:5b:bd:58:d2:90:2e:97:
f6:3f:4c:76:17:2a:61:68:09:af:bf:41:b3:39:ac:75:4c:6e:
a2:01:e4:e8:e7:4c:6a:f8:6d:56:dc:a8:e3:b3:dd:76:23:d2:
8c:75:fa:61:6e:fb:d7:b2:86:2b:d9:bc:88:56:35:0b:0a:48:
93:c3:bc:af:ed:48:fa:22:c6:fe:07:8c:f5:22:c2:9a:0d:4f:
24:22:e2:3f:5f:3d:04:cc:94:e1:82:e0:09:5f:00:71:55:67:
5a:90:7c:94:6e:d3:e9:40:fd:53:fb:cf:ab:dc:42:92:ce:30:
e0:0f:60:ef:f4:45:82:bb:c0:af:f9:50:c3:96:74:bf:a6:40:
74:e1:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org