Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/3138352e302e322e302f32342d3234203d3e20323032303736.roa
File: 3138352e302e322e302f32342d3234203d3e20323032303736.roa (raw, json)
Hash identifier: VgJ0VR4uTFSSEH1raXnWvj/geIUbFZaYStpaXyAvGgw=
Subject key identifier: FE:C2:AB:C2:77:65:47:19:4D:27:CF:CD:7D:7E:9B:AE:36:84:9C:15
Certificate issuer: /CN=5c39713123c652e0f02b25389490f94f89dd818a
Certificate serial: 3548316B1A65E15F8E1E5B9D03F02B4C1FC84B47
Authority key identifier: 5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/3138352e302e322e302f32342d3234203d3e20323032303736.roa
Signing time: Sun 30 Jun 2024 12:15:23 +0000
ROA not before: Sun 30 Jun 2024 12:10:23 +0000
ROA not after: Sun 29 Jun 2025 12:15:23 +0000
asID: 202076
IP address blocks: 185.0.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:48:31:6b:1a:65:e1:5f:8e:1e:5b:9d:03:f0:2b:4c:1f:c8:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c39713123c652e0f02b25389490f94f89dd818a
Validity
Not Before: Jun 30 12:10:23 2024 GMT
Not After : Jun 29 12:15:23 2025 GMT
Subject: CN=FEC2ABC2776547194D27CFCD7D7E9BAE36849C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:5d:e8:cb:17:c0:2c:89:e6:12:63:4c:42:
8c:5d:8c:76:37:2b:db:8c:51:d9:f5:6c:ae:16:cb:
bb:e9:b4:76:6b:10:c8:ba:4a:a7:f3:9a:e4:28:27:
41:5b:b2:54:ef:53:0d:a3:d2:1c:63:a2:81:a3:2f:
f5:6a:c5:3e:36:28:81:20:d3:16:e9:38:00:67:50:
45:a7:a3:b7:50:e8:93:96:27:13:65:3d:04:e2:1b:
ea:0a:8b:2d:3c:04:36:8f:d4:18:0c:a8:a0:00:ec:
f2:9c:1d:ba:10:03:3f:f1:39:88:71:06:cf:ea:1f:
00:31:bb:eb:10:e9:94:9d:b3:fb:b6:11:b5:1b:f7:
a9:1c:17:f5:94:ae:2a:39:35:53:50:32:dc:d9:28:
00:e5:1f:cb:2a:5a:83:f5:06:6f:1e:76:8a:20:90:
e6:9f:41:98:a5:86:0e:eb:5c:19:1c:50:92:2d:ab:
e4:59:d6:2a:2c:ad:32:db:32:bb:ee:82:d3:21:df:
ef:fd:b6:ba:6a:b1:08:b6:b0:ba:2a:d9:2f:0f:d3:
53:94:95:ff:c7:06:7b:64:ba:06:74:20:01:f6:87:
8c:27:c6:7a:46:e2:8b:78:c2:33:7b:5f:17:f9:1c:
44:bb:4c:20:f3:e0:65:ee:21:b5:d6:5a:0e:e6:16:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:AB:C2:77:65:47:19:4D:27:CF:CD:7D:7E:9B:AE:36:84:9C:15
X509v3 Authority Key Identifier:
keyid:5C:39:71:31:23:C6:52:E0:F0:2B:25:38:94:90:F9:4F:89:DD:81:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/5C39713123C652E0F02B25389490F94F89DD818A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDlxMSPGUuDwKyU4lJD5T4ndgYo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/17/3138352e302e322e302f32342d3234203d3e20323032303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f5:1c:63:23:01:c5:b7:64:8a:27:60:c4:bf:d1:10:ea:9b:
5a:31:59:7a:38:b4:a0:40:88:4b:e5:8d:d1:b1:06:b3:39:d3:
f2:73:4d:b3:5c:4d:17:bc:c2:c2:6b:60:96:d2:76:21:93:93:
04:46:d9:4c:1c:0f:ec:42:63:4f:2d:e7:d6:df:cf:1d:07:3a:
16:51:c9:17:b8:1f:aa:c0:37:81:b2:82:ac:d9:23:7f:c8:eb:
78:43:74:e9:0f:bd:2d:6d:ee:3b:24:7a:80:15:6b:00:50:c8:
1d:65:df:53:a6:4c:46:0e:cb:60:46:d1:27:f1:ed:28:5a:92:
6a:d6:59:ec:3d:ad:1a:4b:eb:07:8b:df:17:f4:46:9e:a2:fc:
58:d3:e8:ae:df:25:d9:03:24:aa:88:6e:ee:d4:c6:61:fe:24:
92:a0:64:c8:c8:50:6c:32:8a:18:35:e9:4f:1c:26:78:da:68:
cd:c3:b6:e6:43:76:d8:c8:d8:cf:05:15:b8:1d:18:e7:c3:20:
29:8c:56:d6:65:7b:c4:07:e0:7e:68:89:fc:e8:2c:54:a6:1b:
00:b3:84:04:52:a1:d8:50:1f:aa:02:b4:0b:5a:9c:50:e9:59:
e7:4f:46:5d:3a:b6:b6:17:e5:48:d0:55:2d:a9:90:7f:be:b6:
18:b3:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:08:26 2024 by rpki-client on console-fra.rpki-client.org