Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/6/3138352e3232322e3231322e302f32342d3234203d3e20323130393132.roa
File: 3138352e3232322e3231322e302f32342d3234203d3e20323130393132.roa (raw, json)
Hash identifier: 8ekZTuibmOnm4hMVj7BG4h1ouXlNI/k4+oaGGaA7JK4=
Subject key identifier: 55:AB:B6:43:0C:E6:F6:2E:CB:77:31:9F:D2:F4:79:03:4E:B1:43:AF
Certificate issuer: /CN=950534b83d1489b2db26862ac9dda0e3e87deb6c
Certificate serial: 47EEB1D18C8AEBAD7111642462DA17293F06087D
Authority key identifier: 95:05:34:B8:3D:14:89:B2:DB:26:86:2A:C9:DD:A0:E3:E8:7D:EB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQU0uD0UibLbJoYqyd2g4-h962w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/6/3138352e3232322e3231322e302f32342d3234203d3e20323130393132.roa
Signing time: Wed 03 Jan 2024 14:29:21 +0000
ROA not before: Wed 03 Jan 2024 14:24:21 +0000
ROA not after: Wed 01 Jan 2025 14:29:21 +0000
asID: 210912
IP address blocks: 185.222.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ee:b1:d1:8c:8a:eb:ad:71:11:64:24:62:da:17:29:3f:06:08:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950534b83d1489b2db26862ac9dda0e3e87deb6c
Validity
Not Before: Jan 3 14:24:21 2024 GMT
Not After : Jan 1 14:29:21 2025 GMT
Subject: CN=55ABB6430CE6F62ECB77319FD2F479034EB143AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:09:23:da:84:bd:f7:de:b5:aa:f0:2e:48:
6d:30:1b:de:3c:3d:62:6c:cf:d0:64:d3:00:84:42:
08:7e:10:e9:fb:e7:61:a6:cd:ae:d8:2b:e2:9d:66:
47:85:cd:4f:76:d6:df:2b:aa:17:02:2d:3a:76:9a:
8a:2b:45:ce:16:cd:65:77:e1:69:5a:12:eb:93:3b:
46:b3:67:4a:35:c7:d4:78:2d:d7:e3:5b:ad:75:0b:
e4:0d:94:f7:44:09:82:e0:13:c9:69:d5:c6:21:5d:
76:8c:68:e4:23:5f:40:9c:e9:be:f0:e8:1a:51:8a:
7a:eb:35:8d:37:bc:8d:86:01:28:de:c6:f9:e4:19:
65:bb:b3:fd:ed:d4:41:08:9a:6d:77:49:3d:db:80:
fd:e1:6c:03:cf:0e:4e:a8:1b:78:3f:a0:a0:26:e6:
19:ba:6d:f9:83:3b:06:49:e1:13:a8:50:92:b6:cc:
1f:f9:e4:e0:6a:0c:8f:5c:36:bd:b5:7a:c7:59:c5:
b1:86:8e:4c:5e:f2:6e:aa:dc:5d:64:c4:50:f5:e1:
8c:b6:d2:25:54:94:f5:ce:aa:f0:ff:d4:d9:e4:21:
3f:ee:0c:62:27:89:60:14:6c:91:47:56:6d:fc:79:
1d:c6:3d:fc:2c:1a:5c:26:54:ca:c1:2d:59:99:e4:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:B6:43:0C:E6:F6:2E:CB:77:31:9F:D2:F4:79:03:4E:B1:43:AF
X509v3 Authority Key Identifier:
keyid:95:05:34:B8:3D:14:89:B2:DB:26:86:2A:C9:DD:A0:E3:E8:7D:EB:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/6/950534B83D1489B2DB26862AC9DDA0E3E87DEB6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQU0uD0UibLbJoYqyd2g4-h962w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/6/3138352e3232322e3231322e302f32342d3234203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6a:2c:f7:6a:0c:90:f0:08:cd:46:25:52:bf:5b:90:56:a1:
9b:fa:8a:53:86:7f:65:fd:57:8c:34:d9:bb:9c:5f:f6:f3:19:
5c:3f:3c:1e:a4:5d:2f:c1:f3:b7:60:38:35:87:3c:d8:e1:ab:
af:22:5b:15:0b:1b:e2:bb:8b:e4:7f:a1:34:0c:0b:14:82:7b:
bf:7f:b2:40:df:50:f7:bd:45:fa:d9:d2:82:d1:0c:de:5b:2b:
0d:d3:d3:4e:85:40:f0:a4:39:d3:e6:77:57:0c:fc:39:5c:a9:
af:9c:ca:25:e6:a2:a8:89:e2:ed:90:cc:4e:c7:c5:78:4c:f1:
96:4e:f2:56:49:8a:2d:45:0d:24:05:7d:e1:be:88:e5:8c:e2:
63:09:e7:5c:0c:b3:a7:c4:69:7d:c6:15:7e:52:15:57:36:92:
e2:b6:6e:5c:cb:cc:b5:2a:9d:d9:89:35:bd:cb:e2:b5:f8:99:
2a:3d:76:60:24:12:9a:91:88:58:fb:3d:4f:29:08:90:84:a3:
c2:65:dc:8a:79:ab:47:84:02:3f:b3:db:32:4d:3e:ae:d9:85:
4e:18:a7:e6:79:16:89:7d:21:df:f8:d9:a6:12:e5:94:04:b7:
4d:6f:b5:e7:ba:46:d1:f0:74:7e:8a:e7:26:c0:e1:32:cb:70:
83:90:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org