Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323130393132.roa
File: 3138352e33342e3130312e302f32342d3234203d3e20323130393132.roa (raw, json)
Hash identifier: g7Wgt7ImhmLmWqeEv3HYN8drQwSdCG2sW5X2lHWBm1w=
Subject key identifier: BC:DA:26:EE:83:C2:63:05:8F:31:33:C6:60:9A:66:A3:80:E3:63:1C
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 5C9F3152F654642CFFBDCA668989737025F86DD4
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323130393132.roa
Signing time: Wed 20 Dec 2023 12:23:43 +0000
ROA not before: Wed 20 Dec 2023 12:18:43 +0000
ROA not after: Wed 18 Dec 2024 12:23:43 +0000
asID: 210912
IP address blocks: 185.34.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9f:31:52:f6:54:64:2c:ff:bd:ca:66:89:89:73:70:25:f8:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 20 12:18:43 2023 GMT
Not After : Dec 18 12:23:43 2024 GMT
Subject: CN=BCDA26EE83C263058F3133C6609A66A380E3631C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:0e:b0:37:ee:82:0e:fe:f3:3f:1e:60:3a:
88:03:c0:03:bf:58:33:82:56:21:fe:e5:ad:cb:ee:
af:2e:93:bb:9a:af:09:43:8b:e4:c2:6e:e0:ec:07:
76:0b:b8:a8:ec:d0:3e:be:6e:01:d2:89:7e:19:a2:
c3:32:f3:79:a3:8f:ba:d9:64:ab:7f:87:54:64:33:
ff:d0:6a:25:54:dd:0c:2d:3d:56:f2:56:b9:b3:d6:
e3:d3:20:d0:2c:d7:17:f6:e5:20:9c:17:fd:fd:85:
ee:94:07:d3:75:ed:8b:e2:c3:5c:26:09:d2:8b:99:
b8:dc:4e:f7:19:3e:36:04:9f:d7:71:be:95:3f:3b:
f8:09:0f:0f:4c:8a:bc:e0:46:ac:7f:c3:ca:c3:88:
b6:e8:33:85:8c:77:1d:f7:00:95:ed:a3:6f:1c:70:
17:27:38:08:eb:da:fa:cf:de:66:8b:35:b6:54:5b:
18:1c:4f:7f:6e:b6:34:b6:fd:dd:ba:b3:d1:f8:98:
67:a8:36:c0:fc:c1:a8:42:b8:23:49:e4:57:82:f1:
3f:47:00:27:d2:46:c0:7a:e9:97:bb:0a:7f:25:e6:
93:fe:67:0e:04:4c:60:25:06:db:8f:91:cf:58:e2:
b4:b9:fd:5a:5b:c8:92:28:64:53:7d:43:1f:70:d7:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:26:EE:83:C2:63:05:8F:31:33:C6:60:9A:66:A3:80:E3:63:1C
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3138352e33342e3130312e302f32342d3234203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8c:45:0b:b3:42:ba:56:fb:b3:ac:5b:2d:e4:42:aa:0a:75:
d3:74:eb:ac:ff:93:e4:34:60:aa:72:2f:3f:44:68:0a:f5:05:
ab:1a:89:81:d6:82:75:35:a1:4d:a6:2b:40:e3:eb:20:7a:31:
67:5f:34:4c:48:6f:24:84:8b:3b:a7:c1:92:24:b2:26:cb:e9:
38:b6:61:44:62:32:72:8b:b8:0d:82:f0:69:5e:64:ea:63:45:
e5:f5:6d:2e:d7:90:17:e3:c4:b5:d8:94:37:b7:0c:56:02:bc:
13:f6:10:6b:83:1f:99:8f:b5:64:62:d6:7d:6d:45:d4:f4:27:
58:71:f6:d9:9a:21:04:2e:ec:91:f2:03:5c:f5:8b:12:5b:4d:
9d:15:80:76:bf:a1:26:1b:0d:26:a2:cc:f1:4b:c5:51:82:b6:
b9:65:3f:9d:4f:79:bc:7e:60:7a:fe:78:6f:29:a1:08:42:9c:
a7:5d:24:2b:ab:40:ae:8d:6a:38:b4:24:8e:29:ca:93:d4:70:
f9:01:18:3a:5f:bc:6e:b6:29:c4:91:e9:7c:8b:06:62:d6:e2:
c0:c5:1d:00:60:1c:10:58:df:7b:4b:51:f1:4d:f4:55:4d:68:
30:d6:e6:d5:f3:a8:7c:ca:8b:4c:1e:54:99:70:9f:b1:9f:fd:
3c:29:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org