Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS36351.roa
File: AS36351.roa (raw, json)
Hash identifier: G2rGD+NhNpsDGU4E/3obAJ1FbzvShJcCd+1fsrC3QBY=
Subject key identifier: BD:EF:1D:F7:CC:FE:4D:F3:51:F8:4E:F9:53:51:58:11:5E:F6:E9:AD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 14D37EBF38C2A04F1CB0AD08819B394A526432AF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS36351.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 36351
IP address blocks: 185.236.212.0/24 maxlen: 24
185.236.213.0/24 maxlen: 24
185.236.214.0/24 maxlen: 24
185.236.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d3:7e:bf:38:c2:a0:4f:1c:b0:ad:08:81:9b:39:4a:52:64:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=BDEF1DF7CCFE4DF351F84EF9535158115EF6E9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:d2:19:ac:c8:92:b2:12:95:d9:18:66:e9:
83:6e:42:9f:21:f7:cf:88:71:05:14:05:fd:66:eb:
37:d3:03:2a:0c:8d:3f:89:75:f1:28:42:24:4a:06:
3c:7d:c6:b2:0a:56:2b:f2:bd:a5:7a:55:71:e6:22:
c4:45:b4:b5:41:b1:44:56:a3:f5:e9:09:83:e2:8d:
82:a3:ea:8a:7f:7a:46:40:40:52:3a:a7:52:03:5f:
85:e7:5f:1e:e7:bf:78:d7:dd:4f:ea:f8:32:47:dd:
39:40:21:0c:2f:1e:8a:c3:dc:8d:2f:3a:49:67:72:
7a:44:2f:7b:02:0b:fc:39:35:50:30:31:d8:95:47:
f6:3c:68:74:87:2f:20:8c:c8:cc:e9:1e:f5:6f:91:
1f:2d:be:d2:ba:c2:5c:f6:09:cc:8a:96:dd:9c:d1:
0e:d0:74:ab:aa:d7:09:10:1b:54:f2:a4:7b:6d:48:
0b:c0:07:71:b3:10:f6:5f:6a:dd:cb:29:b6:f8:76:
3c:46:90:0d:3b:ab:19:93:1c:78:ad:0a:12:88:33:
c4:b8:b6:da:11:16:5a:0f:83:db:56:36:86:bd:be:
68:cf:1a:9e:a2:a3:9b:72:17:a4:be:af:4c:c0:1f:
d2:b1:e3:e5:2b:63:03:8e:14:56:37:06:39:2f:f5:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:1D:F7:CC:FE:4D:F3:51:F8:4E:F9:53:51:58:11:5E:F6:E9:AD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS36351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.212.0/22
Signature Algorithm: sha256WithRSAEncryption
33:64:97:76:2b:ae:4f:b5:3b:70:a0:6f:c7:c6:6a:6d:b0:08:
49:41:26:91:e7:1b:a6:9d:40:1a:2d:35:5b:50:59:29:05:23:
a5:c4:50:cb:f7:5c:44:75:34:01:cc:2e:66:4f:d2:3e:00:d7:
4b:72:73:a1:04:e0:ca:4b:45:01:ca:43:bc:8f:22:c9:e9:cd:
89:99:07:d3:51:b8:60:6a:6d:25:d7:04:c3:c3:bd:ce:37:7b:
b0:93:eb:0e:4b:9c:7a:42:14:09:c1:2e:b0:df:f2:1c:b2:55:
18:94:69:25:10:07:b2:d2:6e:73:a7:c6:80:13:72:6b:8c:3f:
1e:57:f2:42:09:ee:f0:84:68:8c:7c:75:33:a3:b7:b3:bb:d7:
75:68:3e:da:ee:aa:27:ca:13:84:23:59:ac:dc:77:88:37:d1:
c3:34:8c:f2:66:ea:75:da:39:6a:03:b8:db:4b:6b:38:c2:2c:
d3:53:7d:b8:2a:d2:6f:9a:19:39:00:58:de:41:41:96:cc:c9:
ee:5f:ec:24:44:14:77:70:7f:29:8d:11:92:67:40:8d:10:0b:
e8:7d:59:9d:c1:50:aa:f8:6c:18:00:28:1e:dd:86:4d:f7:bf:
50:9e:51:5f:9b:47:ec:c0:e0:68:e9:a9:f0:c1:32:0c:f9:2a:
f8:c0:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org