Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: kye4sDOBIWfGXJjGmyE3dcXmVu1ggiiIMhlRzQkDAaU=
Subject key identifier: D5:90:1A:3C:21:E2:1A:BE:BF:69:20:EB:A6:60:A3:21:1B:39:52:B0
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 450E993418501693157BDC5140B3C899C748D356
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 61317
IP address blocks: 185.187.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0e:99:34:18:50:16:93:15:7b:dc:51:40:b3:c8:99:c7:48:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=D5901A3C21E21ABEBF6920EBA660A3211B3952B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:87:ee:e5:cd:04:ed:c3:ab:c7:11:7a:6c:
26:65:d3:ff:2d:ff:f9:84:0c:4f:a3:fc:37:cf:0c:
fe:91:22:00:65:4b:c8:00:f1:2b:b7:ef:b9:55:ea:
1d:31:0c:98:20:00:00:28:b5:ff:97:66:62:c4:41:
73:70:38:d3:b4:bd:ff:23:b4:e5:a8:28:1d:3d:a8:
da:51:d9:ef:71:a3:e8:66:fa:66:bc:b5:66:04:a3:
b3:7d:08:42:f0:2e:48:36:cc:3d:c2:7c:93:07:cf:
82:16:11:8d:6b:f1:e4:7c:89:23:98:57:12:1b:39:
8f:e8:69:c9:89:67:6f:be:5f:1a:27:35:e1:df:d1:
cd:f3:8e:72:cf:b1:20:99:37:96:43:1a:96:ff:db:
76:9b:ea:c3:a2:9b:6c:1a:c6:58:dd:6f:42:77:f2:
11:94:04:6d:d8:98:05:38:a7:5c:ef:d6:e3:f4:7e:
3d:67:90:43:d7:e5:14:18:50:1e:5f:b2:ba:e4:15:
c7:0f:52:7c:83:f3:75:3b:12:dd:94:b0:5e:f8:3d:
58:02:3d:3e:d2:f3:11:fb:39:e6:6a:d3:da:8f:c5:
11:70:ca:95:c6:6b:80:e4:19:99:8a:43:56:65:20:
67:3f:f9:d8:75:89:d7:65:34:a2:97:f6:5a:e5:da:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:1A:3C:21:E2:1A:BE:BF:69:20:EB:A6:60:A3:21:1B:39:52:B0
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/23
Signature Algorithm: sha256WithRSAEncryption
95:4d:2a:b9:e4:b2:5b:c9:ce:9d:19:2d:3c:51:38:72:20:aa:
52:f4:fd:43:7c:ef:d6:ce:c3:40:38:dc:26:e5:f6:04:84:13:
20:0a:a7:26:0a:72:8b:f2:9b:19:ae:78:ce:35:62:cb:8e:ec:
0a:e2:7a:fe:b9:51:45:7d:0e:1d:70:2c:85:e7:aa:b7:37:cf:
ca:31:26:e4:3c:d6:25:bf:60:80:ff:31:40:ee:d9:0f:13:54:
63:f4:d8:76:8f:3c:f3:df:43:2e:66:20:d3:c2:3a:40:a5:3d:
24:53:10:47:af:66:a6:84:9c:40:49:6a:15:d6:6a:c8:81:fb:
6a:79:b2:0b:84:f3:90:b7:b4:2f:9f:6b:9b:8a:de:d4:da:be:
14:cc:f1:d5:92:ff:d0:7f:68:ef:20:96:31:e5:e1:27:69:bd:
05:92:9a:02:7a:79:92:6f:52:61:d2:bc:ba:c9:1e:f0:5c:1a:
99:7d:45:df:03:87:30:fa:31:f6:b8:15:b4:f2:27:df:e2:13:
2f:ef:a5:bd:15:8e:77:f0:f7:43:4b:67:39:05:c7:40:c0:52:
6e:0d:ab:ca:61:e0:a2:d8:01:c2:a1:d2:c6:60:a8:fe:70:cf:
89:0e:4c:44:8c:85:34:8d:73:d4:86:79:98:eb:ec:65:f7:e5:
d2:7d:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org