Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20383334.roa
File: 3138352e3232392e3232322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1azWXjsNgc7DwK5STHOL8iTTevfVYP6NQpTNwLS4kR4=
Subject key identifier: FF:17:D5:7E:59:9D:79:E2:BD:B3:D7:35:CB:A4:C8:EA:7A:B9:4D:6A
Certificate issuer: /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial: 63FED190CD56689244F2A16BDB1235B0028DECB1
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20383334.roa
Signing time: Tue 31 Oct 2023 00:00:09 +0000
ROA not before: Mon 30 Oct 2023 23:55:09 +0000
ROA not after: Tue 29 Oct 2024 00:00:09 +0000
asID: 834
IP address blocks: 185.229.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fe:d1:90:cd:56:68:92:44:f2:a1:6b:db:12:35:b0:02:8d:ec:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Validity
Not Before: Oct 30 23:55:09 2023 GMT
Not After : Oct 29 00:00:09 2024 GMT
Subject: CN=FF17D57E599D79E2BDB3D735CBA4C8EA7AB94D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:ba:a1:1e:3e:9e:5e:07:da:70:b8:a9:e9:
d0:2c:1b:04:29:dd:b2:e7:37:62:34:eb:19:41:03:
70:3d:f4:ae:d0:ae:14:2c:ed:c1:d1:ff:6b:f2:80:
50:c2:36:9b:8f:17:e2:8a:db:90:11:b7:a2:eb:47:
33:df:d6:e7:b2:70:da:bf:c7:77:2f:97:af:53:75:
f9:2e:98:03:7e:ac:4a:dd:9a:32:ed:48:32:f1:38:
cf:92:c3:00:cb:ca:65:3e:95:5d:a3:6b:43:5d:7a:
7d:75:31:73:0d:ec:e4:07:92:3c:85:7a:67:c3:47:
96:b3:92:30:04:c5:60:90:f3:96:b7:95:b6:ea:52:
1d:6d:ab:f0:22:f2:42:04:2c:1c:48:d7:f4:c9:c7:
f1:5d:a8:fb:9a:3c:dd:bf:31:af:5f:b8:6f:83:94:
50:80:e5:88:35:6c:6b:a1:ab:e0:08:e4:f3:e0:84:
43:06:83:97:ad:df:e5:6b:39:6d:e3:40:e1:39:da:
ae:49:dc:88:48:cb:4b:ff:1e:bb:b4:7b:7d:36:38:
f8:08:92:c0:ba:55:14:7c:98:ac:7f:1d:f0:35:43:
f0:92:d9:7d:58:90:3a:08:9f:ec:80:fa:5c:96:1c:
e3:59:3a:a3:83:1f:8b:f4:24:53:76:08:c0:8d:a6:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:17:D5:7E:59:9D:79:E2:BD:B3:D7:35:CB:A4:C8:EA:7A:B9:4D:6A
X509v3 Authority Key Identifier:
keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3232392e3232322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:77:8a:73:ed:e4:ce:ef:c3:a9:50:b6:88:39:14:69:92:aa:
0a:c8:8c:44:70:ab:8a:8e:38:16:29:69:1e:3a:2d:5e:61:56:
db:7a:63:13:2c:3e:41:6d:53:23:0f:00:94:f9:f9:ac:5a:e2:
97:8b:17:55:1e:41:87:bf:7f:c3:0e:e4:29:f4:db:59:14:08:
ab:c0:c7:29:aa:07:db:63:04:98:0e:b3:25:49:78:77:35:7d:
97:e4:7a:ef:51:96:77:24:63:cd:78:11:5d:50:ad:03:f4:98:
27:7b:41:ee:05:bd:4a:02:f5:42:ae:05:c4:20:6a:89:5f:cb:
65:d3:8b:ca:e6:c2:31:13:91:51:19:7f:9a:3c:1b:42:c3:07:
ab:ef:84:f8:c2:7e:c2:01:47:be:4c:0e:90:72:7e:bf:bd:38:
d8:2c:c2:7a:c0:fc:85:1d:f3:42:fa:1a:39:e0:00:5b:95:ed:
cb:f4:32:82:f0:bd:85:86:96:40:20:78:56:13:3d:0f:35:78:
e0:f2:d9:cd:fd:1a:a4:65:d5:e4:0c:83:11:7a:db:6e:04:d8:
1e:b7:da:53:ba:5e:ad:e4:8d:6c:0f:db:02:20:fb:4d:4d:4d:
e9:4c:e4:b3:83:26:18:c7:01:b3:fe:46:21:5f:92:fe:67:ab:
28:a8:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 21:34:03 2024 by rpki-client on console-ams.rpki-client.org