Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: oDllO+yKU1jytCroTEDlEGne11+gsJDExSwxwStYZhk=
Subject key identifier: EF:EF:13:78:CD:E2:20:75:ED:63:5E:39:B3:8D:C5:11:51:8B:5D:68
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6FC65E8AA058728E72A89E8B0F1ECD60CD8EC686
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 204170
IP address blocks: 185.182.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c6:5e:8a:a0:58:72:8e:72:a8:9e:8b:0f:1e:cd:60:cd:8e:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=EFEF1378CDE22075ED635E39B38DC511518B5D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:85:df:f7:53:ba:fe:9f:71:9a:bb:e7:73:
25:30:da:77:8a:c1:78:28:fc:6b:d8:b3:2f:32:03:
3b:08:09:1a:88:31:58:aa:02:cc:93:a5:64:f4:1b:
0b:de:b8:0a:57:f3:ac:47:47:c1:24:1a:fc:fd:1a:
2d:94:3d:3a:9f:e7:94:9f:9d:ea:c5:3f:05:d0:72:
dc:af:a0:b1:ab:4c:48:d3:0c:d3:7a:50:da:1a:ba:
e2:9b:37:2c:9b:33:e3:f9:86:6f:88:b5:30:73:35:
3f:a8:41:b9:a8:06:1a:0e:cd:c3:b3:31:f8:e9:91:
9f:f1:d9:74:7a:c1:df:8b:cf:51:2c:b1:b4:14:2f:
d9:d8:e8:ee:30:21:f5:86:a0:c8:29:e2:ad:2d:e9:
64:a4:98:44:79:ac:28:f9:20:d2:95:da:d5:97:6d:
8e:86:98:79:2c:73:64:21:56:d1:df:6b:b5:8f:f2:
0e:ed:6b:76:ca:f1:8c:e0:f1:4d:76:de:7d:9a:73:
7d:fe:4d:b8:d4:38:44:71:41:80:cc:eb:d8:39:95:
cf:e6:ed:63:2f:03:32:66:4d:31:2a:ab:11:8e:25:
63:8c:40:25:0a:86:d5:bf:91:b0:45:09:1b:4f:b6:
b7:38:8e:3a:4f:16:c3:39:1d:57:f1:80:30:12:82:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:13:78:CD:E2:20:75:ED:63:5E:39:B3:8D:C5:11:51:8B:5D:68
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:21:a1:d7:9d:99:fb:c1:7b:4c:d4:57:33:d9:dd:9f:79:8a:
75:49:29:21:d7:df:43:09:f9:23:4e:2e:d9:97:40:e4:7a:2d:
0a:6a:b5:b6:15:0d:76:1c:b1:b4:08:d2:aa:d8:cd:f0:4d:dd:
97:1a:b9:08:c2:56:8b:4b:57:d7:a3:d5:f7:d5:4e:35:39:92:
b8:d5:bd:78:f0:fc:0a:ef:27:31:1d:7b:2e:19:72:fa:34:de:
f6:92:d2:b7:42:83:42:d2:f4:a4:4e:d7:38:eb:1f:c0:57:e1:
6d:78:7a:46:b1:78:63:78:e8:07:22:62:3c:41:b5:8d:fa:55:
9b:af:5c:f6:ec:c6:79:74:1f:71:74:59:17:be:6a:e3:36:ec:
16:c9:db:03:55:82:f6:58:6e:c5:6a:ac:d3:ca:15:21:f0:39:
39:3d:6d:d3:12:b8:c9:a3:d0:c3:eb:53:81:83:27:84:08:81:
c2:be:9a:55:2f:3b:60:d7:59:2f:86:15:4d:30:5a:3d:30:0c:
17:6f:65:fa:3c:b6:ac:32:84:dc:a2:1a:30:3b:6f:e5:8f:9b:
b4:b1:5c:aa:81:8b:76:7d:32:df:27:85:21:bb:6f:28:45:1c:
b4:8c:49:f7:71:cd:68:7b:b6:a4:07:a4:b7:f4:39:fe:1e:fb:
8f:0d:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org