Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa (raw, json)
Hash identifier: Sldha16s3ddv9cAS1nKEFuRUKez0o2hZndJ2gQ58728=
Subject key identifier: 07:FD:37:92:03:F2:87:0E:57:A7:48:5C:CC:2F:3E:BB:D4:13:D0:BA
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 7E6594CE2E287CA7E69E8362270BBF7E66F596E2
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 34984
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:65:94:ce:2e:28:7c:a7:e6:9e:83:62:27:0b:bf:7e:66:f5:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=07FD379203F2870E57A7485CCC2F3EBBD413D0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:30:ad:cf:7f:7d:f9:46:a0:5f:03:48:6b:
f5:02:33:8c:d1:b9:3a:d4:ad:44:75:53:72:49:c6:
4f:86:ae:46:02:52:39:cf:da:1c:cc:ee:f9:ca:56:
40:26:43:2d:61:6a:c9:53:12:e8:56:17:9c:7c:8f:
af:49:e9:6a:6a:05:fa:68:21:e7:a5:a5:3c:e4:81:
ed:5d:40:17:a2:3e:f1:f6:1d:ed:68:de:29:bd:18:
9a:99:a0:63:40:03:4d:1a:ec:e3:9d:69:23:f5:0f:
15:da:b7:37:a5:55:03:b2:ff:e3:b4:b5:f2:a3:8a:
eb:26:a3:aa:c6:75:9a:30:87:44:b9:07:0f:76:e5:
de:b6:48:fc:97:fa:d5:1a:37:ba:4d:a2:59:15:0a:
51:5f:23:8c:5f:9d:ff:97:b3:92:45:7f:99:33:ba:
b0:dc:e2:ad:52:20:0d:cb:87:7a:be:08:d2:13:4b:
39:d3:bc:31:58:3b:a2:0e:b1:38:f5:27:b2:d9:17:
22:4b:15:0d:ef:98:34:35:64:21:5c:39:54:bf:a9:
68:2f:2d:0e:48:ef:69:37:e3:1a:68:f4:03:31:dd:
86:0a:13:6f:63:0c:f1:20:bf:0f:c7:fc:dc:36:26:
62:7d:84:b0:46:15:ad:a3:83:b5:f5:97:d8:02:45:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:37:92:03:F2:87:0E:57:A7:48:5C:CC:2F:3E:BB:D4:13:D0:BA
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203334393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
56:90:db:3a:4d:d3:8f:58:22:af:a2:7f:ad:03:9a:11:8f:79:
87:fa:5e:ae:27:a2:6f:f4:70:fb:9f:d0:54:98:aa:97:9a:49:
f7:38:2d:f4:d2:28:18:25:69:e8:a8:bb:27:fa:27:7e:98:41:
37:7f:6d:af:b8:5b:9d:f6:07:6e:f3:31:9f:d6:19:39:43:23:
f9:67:50:6b:5b:96:c3:98:ab:33:42:a4:d5:90:02:62:0f:48:
be:c6:f1:fe:5c:5d:8b:77:fa:70:df:ce:ff:20:0b:14:61:f3:
5d:52:da:d4:d9:8d:93:88:9e:d3:c5:ca:41:ff:87:41:2e:8a:
e4:1f:00:d0:bf:a9:47:26:7a:3a:e1:d6:0f:45:c1:c0:aa:f7:
24:0a:46:ba:8a:0b:5c:8a:ca:5b:e8:71:a3:15:5b:ee:6e:25:
a7:21:d1:40:d4:98:a3:df:cb:25:c3:47:21:7c:3f:fc:8a:c1:
18:0c:fd:33:9f:b4:2b:d5:61:0f:b0:29:d7:54:e0:0e:ab:5c:
3f:f7:0a:4b:80:29:67:5d:51:0f:53:fb:ad:3a:c9:cb:6c:3c:
cd:23:a3:f9:9b:30:ab:d9:b9:d3:9d:b2:28:ec:2c:50:d7:bd:
90:4f:94:88:fa:ea:3c:9d:c5:bd:42:7c:8a:86:bc:a7:ea:9f:
6e:73:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org