Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/3138352e3231352e3134302e302f32322d3234203d3e20323032333834.roa
File: 3138352e3231352e3134302e302f32322d3234203d3e20323032333834.roa (raw, json)
Hash identifier: V6TmPji2dvpyf4vqQcNQtHNi7MDa9qIgzZQrK+jPYOs=
Subject key identifier: 66:EB:8C:97:35:1E:43:23:EC:D7:75:25:1F:0A:3B:A4:06:0C:92:AA
Certificate issuer: /CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Certificate serial: 423812018FB3242DBB7C0CDC51DD898FC82DE1F2
Authority key identifier: CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/3138352e3231352e3134302e302f32322d3234203d3e20323032333834.roa
Signing time: Wed 10 Jan 2024 20:51:54 +0000
ROA not before: Wed 10 Jan 2024 20:46:54 +0000
ROA not after: Wed 08 Jan 2025 20:51:54 +0000
asID: 202384
IP address blocks: 185.215.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:38:12:01:8f:b3:24:2d:bb:7c:0c:dc:51:dd:89:8f:c8:2d:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Validity
Not Before: Jan 10 20:46:54 2024 GMT
Not After : Jan 8 20:51:54 2025 GMT
Subject: CN=66EB8C97351E4323ECD775251F0A3BA4060C92AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:3e:94:8a:18:b5:83:b5:40:c3:b2:0a:fa:
19:d1:4d:cf:32:39:6c:83:ab:5a:a2:7e:ab:c5:0f:
b1:3d:b8:c7:59:64:3e:ec:62:ec:c1:30:7b:d1:f3:
a6:8e:a7:04:a5:c4:8f:dc:0f:bb:26:5c:a0:32:7e:
67:e9:b7:b0:3b:62:4f:8f:41:6a:06:0c:02:c7:75:
67:ca:fd:a9:24:70:7c:28:b8:19:7c:3f:c4:92:98:
5e:e4:a0:ce:a1:d3:bf:08:0e:16:80:34:2e:58:4a:
b4:32:1e:71:75:60:80:af:17:a0:a1:e8:b5:18:89:
45:6f:8a:45:b2:15:4d:6a:e0:ad:a9:b8:3f:87:9d:
ff:d0:9f:5f:79:ab:25:7c:11:da:02:c2:c9:3d:e5:
34:24:b7:d1:3e:de:0d:3c:90:9c:ad:bd:dc:9a:ba:
0c:20:0e:1d:53:53:22:3c:8d:f4:2e:60:9d:cb:11:
46:f1:56:de:28:7b:c8:80:f8:c3:63:07:cb:13:f0:
9d:44:98:cf:cc:ac:e7:59:36:07:6b:8c:0e:c4:e7:
de:5b:b6:a2:36:6f:89:40:b2:93:fa:e5:a1:59:56:
25:0f:7c:60:08:38:45:02:d6:68:47:b2:58:7e:2e:
b6:30:6a:6b:0b:09:bd:bb:a3:4b:1d:f6:3f:08:13:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EB:8C:97:35:1E:43:23:EC:D7:75:25:1F:0A:3B:A4:06:0C:92:AA
X509v3 Authority Key Identifier:
keyid:CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/3138352e3231352e3134302e302f32322d3234203d3e20323032333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.140.0/22
Signature Algorithm: sha256WithRSAEncryption
43:75:58:1f:35:44:ea:fa:4c:16:19:70:18:9c:86:75:bf:aa:
2f:9c:2f:fe:10:bb:9b:7b:1b:21:46:93:15:c5:ec:34:e6:02:
3c:59:88:22:f6:f3:fb:44:0c:1d:83:20:f0:19:0f:33:b7:ad:
05:8b:0f:55:bf:9c:54:28:67:c6:80:d4:34:ec:ea:db:c7:3c:
ba:27:78:bf:c8:d3:1d:96:88:37:4e:e6:c5:f0:c6:b7:c9:77:
00:d8:88:b9:86:05:df:18:35:c1:86:d9:fa:93:df:98:aa:3c:
c1:f3:93:7c:b8:4d:d5:af:7d:84:ab:5f:82:fb:80:79:56:28:
5e:33:52:2c:62:5b:4c:80:a3:cf:e8:1d:78:ec:30:bf:86:73:
ba:10:7f:98:92:25:55:88:57:ab:26:bd:9d:3d:b7:24:36:f8:
07:da:90:90:35:d9:98:08:d0:bb:4d:71:ff:99:2d:5c:99:c1:
a1:3c:ef:7d:a7:60:58:a3:b9:74:1e:31:2a:b4:96:72:f7:d2:
66:c3:65:67:54:4c:f6:60:de:f6:da:f4:0f:d7:fa:91:60:e9:
b9:8f:c0:2d:d7:97:4c:d7:99:1a:a5:6a:b4:19:28:40:c7:52:
c6:73:d1:06:2f:0f:e4:53:66:9e:ec:53:30:ba:59:cc:78:47:
14:f3:72:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org