Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS138995.roa
File: AS138995.roa (raw, json)
Hash identifier: vrKFzuizQB8TSc0MScUDCFrFD8sW6wuwwDflAR87p34=
Subject key identifier: 3F:FB:70:48:36:BA:39:ED:2D:B3:4A:39:E8:4E:60:3C:C4:7A:98:94
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 65B90DE08B53F7F4C2ABCFCE7789DA284708AFCA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS138995.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 138995
IP address blocks: 185.121.170.0/24 maxlen: 24
185.121.178.0/24 maxlen: 24
185.121.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b9:0d:e0:8b:53:f7:f4:c2:ab:cf:ce:77:89:da:28:47:08:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=3FFB704836BA39ED2DB34A39E84E603CC47A9894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:dd:f3:29:c0:e4:a0:35:c1:86:c1:97:11:
3c:32:4b:49:93:e5:66:95:c5:e7:c2:8c:44:89:e0:
ba:3f:3c:0f:27:aa:11:15:76:97:21:e0:ac:e8:81:
b3:c5:d6:71:b1:42:71:76:e8:90:55:2c:6d:85:30:
5e:d5:b6:18:ac:10:20:95:8d:68:1e:74:56:7e:cb:
aa:7e:19:af:49:9f:12:81:6d:a0:1f:1b:6d:50:b0:
3b:55:49:12:63:88:03:a5:ae:f6:26:a2:af:a6:d0:
46:91:be:d9:f5:61:7d:e2:4c:35:7b:20:49:2a:02:
bf:bc:10:85:75:5a:ae:95:b9:f7:20:50:b6:53:19:
fa:fa:ee:46:26:f0:7f:57:48:52:12:21:40:6b:52:
e4:86:22:6d:6d:7e:d9:3a:4e:67:bd:c6:cf:00:7d:
88:0a:68:9d:82:1d:12:19:3b:67:42:46:59:4a:99:
03:a7:89:ae:7b:af:5e:f4:e6:41:60:fc:85:d4:7c:
89:01:4c:12:6d:ae:fa:59:70:78:f8:ff:5b:25:7d:
ca:2d:8b:30:37:97:17:3b:87:38:9d:13:3c:23:41:
06:bd:7a:4c:82:69:d8:a8:f5:fa:44:bd:2d:63:be:
16:7a:1e:3b:e3:3b:00:3c:15:85:20:df:0b:5a:d6:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:70:48:36:BA:39:ED:2D:B3:4A:39:E8:4E:60:3C:C4:7A:98:94
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS138995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.170.0/24
185.121.178.0/23
Signature Algorithm: sha256WithRSAEncryption
37:61:dd:60:5d:f7:95:b9:ce:ab:89:5f:0c:45:34:af:65:ad:
50:34:48:64:5c:f4:35:40:e9:8b:4d:39:3a:2d:6f:5d:17:19:
d7:16:0c:1a:57:d2:2f:27:a1:0c:f1:07:e5:b6:af:17:95:4d:
47:2e:af:34:f4:6e:45:1e:cf:2b:a6:7b:28:36:53:77:0a:38:
8b:0a:26:06:e6:3c:bb:24:06:f1:36:b9:5f:af:91:28:07:5b:
e4:ec:55:9d:ed:cf:03:7b:50:de:c3:06:9b:f5:bd:6c:86:e1:
a0:a4:5d:a3:40:af:48:cb:18:1e:b2:9c:33:28:5a:ea:b3:bc:
7b:23:98:aa:31:b8:c5:e9:81:cd:12:98:f0:57:d9:94:52:e9:
59:e9:17:79:82:48:a6:a1:39:ce:5e:b9:2f:8e:03:bc:b5:2f:
91:b8:49:0e:5d:36:60:24:54:5d:b0:41:cd:16:7b:f8:e9:29:
27:44:47:a3:92:0c:84:eb:ae:1b:af:85:44:22:10:00:c9:22:
7c:2c:0e:f4:15:f1:cb:3e:cc:19:58:5f:6e:60:eb:e3:7a:dc:
c7:53:31:b0:93:8b:fa:c5:c1:9d:05:58:44:de:50:ea:06:0f:
53:4d:1f:59:cb:af:fe:ac:ee:be:ae:58:da:0f:5e:30:60:c5:
ab:6b:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org