Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31312e302f32342d3234203d3e2030.roa
File: 3138352e3138322e31312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: A32LGV9dDiuPRs8+PQHXDZPDbnQQN0/ZnZV0e89Z26Y=
Subject key identifier: F0:E9:9A:B5:A2:44:16:62:F6:F8:99:73:9F:C2:54:3D:9E:D1:63:4B
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 188EB035DD2726D8E1DEB38D0D27BC900AA38A0A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31312e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 0
IP address blocks: 185.182.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8e:b0:35:dd:27:26:d8:e1:de:b3:8d:0d:27:bc:90:0a:a3:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=F0E99AB5A2441662F6F899739FC2543D9ED1634B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:34:37:b2:95:0b:57:96:ee:80:7d:b2:8e:
a9:8a:7e:59:35:a3:c9:63:0c:81:eb:64:b1:e7:18:
bc:0d:2b:d9:cd:13:f8:0d:22:28:9f:82:63:9b:8e:
5d:ea:45:a4:cd:b9:91:18:5c:0c:8e:47:ee:60:ad:
8f:14:4e:ae:8c:c1:a3:ff:50:10:39:24:6e:44:63:
3b:a2:3e:65:e6:2f:a2:14:1f:1d:e0:db:c4:d7:7b:
54:2d:4a:3f:c3:94:d4:51:2c:d5:ac:76:15:b5:bb:
d0:13:f8:b0:fc:62:38:bb:7b:69:85:c8:36:8d:63:
e0:34:0f:d3:e9:71:88:a2:8d:44:29:b4:80:07:b9:
7e:a9:70:0b:d4:bb:73:79:0c:ca:5f:36:cf:7c:d9:
ba:16:59:9d:1f:98:d0:fc:ca:c7:b8:04:e5:3c:d4:
58:5d:47:ce:38:0f:84:f4:73:bf:90:31:c4:ae:41:
df:30:53:c9:dd:8d:b6:b6:3a:31:a5:7d:8c:2f:10:
15:0a:d5:3a:ec:5e:07:cd:e0:03:d1:08:78:31:9b:
05:53:d9:e1:f4:67:8a:4f:fe:18:da:73:5a:d1:dd:
b1:c2:dc:bc:b5:b9:77:b0:b4:9b:61:5b:42:b1:1a:
80:dc:09:47:46:b0:37:db:b2:71:35:d3:c3:91:02:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:9A:B5:A2:44:16:62:F6:F8:99:73:9F:C2:54:3D:9E:D1:63:4B
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138322e31312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e8:ee:f5:aa:0e:f9:84:dd:92:3b:46:58:4e:e6:15:64:ed:
54:a4:66:02:7b:8a:db:cc:86:0d:0d:d5:fd:3a:50:ea:29:58:
87:16:64:b8:ec:64:c7:3c:06:1a:2e:13:89:53:e5:be:6d:d4:
70:df:24:67:89:6d:d3:37:f0:c8:2a:82:7d:a0:8b:f1:63:9d:
2a:45:1c:1d:56:a0:df:b0:b9:b0:b5:bc:4a:61:90:eb:95:1d:
77:8c:90:5b:b3:ef:98:90:6e:59:18:30:1c:ff:c7:36:b8:7e:
3e:d6:8c:bb:a0:3b:78:35:a8:80:d5:84:aa:5c:37:da:67:2c:
05:f3:d3:d3:b8:4a:78:a0:94:a4:14:4a:bc:10:f9:66:53:40:
ca:50:f7:c1:8f:cc:f8:ce:7a:20:89:52:15:29:3d:a6:f2:6b:
0c:c6:a9:33:bc:41:94:5f:68:ef:e9:9a:c3:71:5e:0c:5a:b7:
3f:b0:04:a2:8e:d9:ac:af:ec:ac:e5:bd:df:85:67:6a:9f:93:
a4:e0:33:a2:91:5e:4b:60:ad:df:cc:74:7e:8a:4c:0a:25:b0:
8a:44:07:51:a2:51:ce:d1:b3:b4:da:56:08:83:8e:80:7a:91:
1b:71:25:d2:6d:cd:1c:d4:91:f5:9d:01:76:15:dc:a1:7d:69:
89:57:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org