Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa
File: 3137362e35332e3137362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: eY0jBnheP2SlVpEHbGDTUt5R+Zl5FvQtBTOztZFk8C8=
Subject key identifier: 66:B6:63:A0:32:FB:CC:B5:74:5D:FF:F2:F9:98:EE:46:2A:30:52:B6
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 0FDEC4EAAAE76EBACBBF4C196005DCDB08031392
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 0
IP address blocks: 176.53.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:de:c4:ea:aa:e7:6e:ba:cb:bf:4c:19:60:05:dc:db:08:03:13:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=66B663A032FBCCB5745DFFF2F998EE462A3052B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:79:d9:da:fd:68:44:0a:5f:90:d8:80:d7:
db:4b:ab:72:3e:d2:0f:96:e8:93:9d:e5:ac:65:9d:
90:14:9d:c1:df:30:62:e8:63:7a:b0:af:9d:9e:3e:
7b:9c:18:0e:64:29:67:c6:8f:02:95:bd:c1:d0:5b:
1c:d0:78:9c:f4:46:d7:44:d7:50:b7:79:5a:f7:15:
1f:4b:aa:cc:90:a6:85:2e:55:97:02:d9:c2:1f:77:
c1:10:d4:0a:f1:e6:23:e4:3d:d9:35:67:9b:23:86:
75:bf:fe:34:56:4c:fa:44:c0:42:bd:76:e4:ef:1e:
a4:2b:0a:03:50:f1:13:50:c5:76:f5:a9:72:69:e2:
32:fe:50:20:40:b4:8d:55:9f:e0:05:4b:a9:d8:28:
2e:d2:64:00:f2:01:7b:7c:86:34:a6:6f:5b:6d:90:
75:a6:d4:a0:06:2a:47:26:b0:f3:d5:1f:d7:18:bd:
e6:4e:32:ba:b9:d1:78:7f:9c:09:05:7c:a6:46:b8:
f8:6b:3c:02:1f:d8:64:18:ce:7d:16:9b:07:81:9b:
f7:e3:fd:28:e7:85:a2:db:ae:b1:28:b7:58:62:0f:
9d:73:ee:97:44:a0:b5:33:d8:ff:08:f1:e8:49:fd:
da:13:e9:f4:b2:7e:f9:c5:6e:e7:15:d7:e2:6b:75:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:63:A0:32:FB:CC:B5:74:5D:FF:F2:F9:98:EE:46:2A:30:52:B6
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3137362e35332e3137362e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:db:09:0a:c7:77:2a:2c:c0:cf:71:00:16:5f:09:52:b9:c5:
54:0a:b9:8c:3e:39:13:07:6c:c6:3a:cc:23:a9:57:b4:2a:9c:
b8:03:c9:cc:3d:c8:f3:bd:bb:e2:12:0e:5c:04:b6:84:11:c3:
94:3d:76:44:05:3c:95:a8:68:72:a5:52:af:9e:f2:6e:bc:46:
7d:8f:ad:c6:1d:3e:72:fd:d9:69:3b:ae:0b:ab:44:e2:aa:6d:
8b:f1:a2:eb:22:53:b5:85:d0:6c:04:c3:07:fe:0f:48:65:8a:
e1:68:9d:92:90:51:ee:b1:6f:f7:1d:63:2c:0d:bd:ef:9d:4f:
41:13:df:41:a3:bc:5b:de:a1:43:ae:95:73:72:e5:dc:cb:8e:
0e:d7:3e:e3:4e:60:56:1a:7a:85:45:87:2c:15:54:6d:e6:9b:
70:51:9c:f3:01:85:b9:6e:cd:74:e5:ec:68:cb:3f:33:d2:22:
8b:52:d6:9e:5c:e8:7a:5a:65:23:34:a9:d7:e0:5d:ee:22:b8:
73:65:d8:bf:62:2e:60:1d:a5:05:32:ec:70:6b:30:3b:b1:1b:
d0:e7:3b:a3:8c:39:d3:ed:16:7a:e1:b9:6d:3e:df:40:02:89:
ce:a8:09:0c:86:90:14:6a:9d:2d:86:72:6b:a2:ef:3f:6f:9e:
4b:04:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:34 2025 by rpki-client