Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
File: 3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa (raw, json)
Hash identifier: Jh79SHTlvOgsQEXA5V4QsYse2QQPVjWnpWK0W62txK0=
Subject key identifier: 87:56:D9:8E:21:F4:0C:8B:DF:F6:35:82:FB:8A:22:4A:7A:53:DF:FE
Certificate issuer: /CN=de87352238d030dc2ab690bc1b25fe640745db3c
Certificate serial: 6379DC801FC9A15BC918127D7FEF7A704F8E0069
Authority key identifier: DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
Signing time: Tue 26 Dec 2023 14:44:17 +0000
ROA not before: Tue 26 Dec 2023 14:39:17 +0000
ROA not after: Tue 24 Dec 2024 14:44:17 +0000
asID: 197882
IP address blocks: 185.212.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:79:dc:80:1f:c9:a1:5b:c9:18:12:7d:7f:ef:7a:70:4f:8e:00:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87352238d030dc2ab690bc1b25fe640745db3c
Validity
Not Before: Dec 26 14:39:17 2023 GMT
Not After : Dec 24 14:44:17 2024 GMT
Subject: CN=8756D98E21F40C8BDFF63582FB8A224A7A53DFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:9b:c7:be:d0:f0:a7:79:68:8e:a6:3b:f7:
05:47:a4:3b:67:2f:34:48:a6:39:90:15:4c:25:69:
78:59:3b:3d:76:b9:37:0e:69:5e:e9:e5:0f:64:fb:
c5:4d:29:e5:5a:1a:c6:ab:8a:c7:be:54:05:fd:7d:
8a:1f:5d:59:da:2d:b5:d3:09:2d:6c:17:d7:38:c9:
cb:6b:0d:12:e8:b9:6c:6a:55:a5:01:2b:17:e8:eb:
24:a6:83:3a:83:33:f0:28:16:e2:c0:bb:b4:d6:13:
e4:d8:0b:66:75:6d:2c:07:b0:95:4d:39:ce:da:4d:
be:03:7c:f9:5d:07:7e:54:38:f4:34:ca:44:ea:07:
a7:b2:de:ea:b4:c7:d5:c6:cd:9f:18:b4:ad:93:60:
32:da:52:50:7a:c1:25:41:1b:ba:d8:a9:60:37:82:
db:8e:e3:0b:ad:0d:42:c2:b3:a0:56:c9:d0:83:fb:
f5:12:8d:7c:16:48:8d:81:5d:e3:81:f8:43:22:d0:
6a:4f:04:b2:7e:fa:2c:1c:4d:28:46:bf:dd:01:01:
8f:e6:4f:3f:ee:5a:78:47:27:c0:c4:9b:30:88:c2:
7c:85:c3:d5:e7:10:d5:03:d1:72:32:e7:72:25:df:
55:af:f9:c0:49:be:f4:fd:b6:da:44:f0:00:f7:ca:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:D9:8E:21:F4:0C:8B:DF:F6:35:82:FB:8A:22:4A:7A:53:DF:FE
X509v3 Authority Key Identifier:
keyid:DE:87:35:22:38:D0:30:DC:2A:B6:90:BC:1B:25:FE:64:07:45:DB:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/DE87352238D030DC2AB690BC1B25FE640745DB3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oc1IjjQMNwqtpC8GyX-ZAdF2zw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f379202c-e970-43d7-85c2-0dac80b199c3/0/3138352e3231322e33332e302f32342d3234203d3e20313937383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:72:fe:af:c1:9f:a1:ef:dd:cd:a8:5b:9e:80:d6:d2:68:c0:
6d:2a:f0:e0:c8:45:3e:01:27:d6:de:a2:5e:65:b5:17:26:c3:
9f:23:0f:76:3d:13:1a:a6:20:68:ad:0d:20:16:a7:58:3c:c0:
3f:06:78:72:25:ee:88:d7:07:c7:83:ea:37:b0:8c:d7:88:63:
16:4b:c1:22:9d:ca:26:57:c2:96:28:17:7e:65:2a:82:af:f2:
8d:72:6c:6e:96:99:53:19:1b:ec:d4:19:1e:be:2f:52:f2:37:
cd:81:09:ef:ac:72:51:eb:65:aa:06:21:92:a2:34:fb:bf:cd:
3a:9a:b7:3f:05:79:05:b7:00:1f:e6:1a:0d:7b:33:b0:4d:1d:
26:ac:ef:ef:c3:63:50:70:fc:c4:16:a0:89:31:83:d0:f4:2b:
c5:7f:1a:f5:a9:cf:2f:be:6e:38:cf:fd:17:6d:1d:98:ae:e8:
4a:e0:db:3b:b4:6b:9c:0a:d8:ff:85:ff:3d:93:3a:e3:1c:23:
02:44:56:55:ba:6e:41:be:29:1a:ac:1b:22:b1:f5:2e:4d:42:
b9:d6:95:7d:64:14:6f:75:fc:cb:80:bd:c7:54:00:a2:a6:f8:
50:05:ac:b7:0d:ef:0c:60:04:a1:86:59:0e:68:a1:fa:0e:53:
f2:69:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org