Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: zEmHp0VH8T74ITbhjmJ3JBZhkIDXfJepE1O7Tkwij7k=
Subject key identifier: A6:04:0A:D6:A3:7E:7B:AB:B1:10:A7:25:F5:5E:D3:3E:F6:B8:33:35
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6EA113D9E435DA248C28D2B5BCB5E8D37F514A0A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 61317
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a1:13:d9:e4:35:da:24:8c:28:d2:b5:bc:b5:e8:d3:7f:51:4a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=A6040AD6A37E7BABB110A725F55ED33EF6B83335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:97:b7:3a:48:1f:3d:fc:12:dd:c1:32:2b:
1e:d4:2f:75:da:d2:fb:c8:5b:15:62:4a:c2:11:86:
dc:e9:3c:4f:47:b2:bc:eb:e2:90:4d:34:3f:2a:1a:
fa:dd:c3:86:07:51:3b:37:0d:97:c8:d3:12:de:db:
8b:93:78:8d:3b:5c:23:c7:ed:34:53:7c:43:d9:bd:
db:53:7f:b0:5b:a2:af:17:21:ac:be:d6:3c:c4:34:
a9:69:b4:01:eb:81:ce:2d:22:5d:75:4b:03:bd:92:
5f:4c:35:27:35:4d:f1:ea:20:a3:f2:6b:6e:13:dd:
33:ec:14:f6:7d:66:e7:ef:0b:dc:d0:ed:59:5e:a5:
41:51:98:9b:7b:ec:77:31:2c:9a:17:ef:4f:98:24:
91:dd:35:84:9f:2c:91:e4:6d:81:82:88:fe:a0:40:
27:a3:c0:90:71:bb:73:20:e4:75:3b:c2:0a:28:76:
6c:1c:18:54:94:1b:06:1c:06:b6:21:59:2c:0f:58:
d0:22:b6:f3:8a:e2:f3:8c:47:c3:ba:ac:95:8a:c2:
78:6c:53:72:a4:8f:48:0e:84:45:13:e8:20:c3:9d:
bb:be:c5:87:0b:e6:d1:a7:fe:3a:e5:f1:6f:01:fd:
18:a2:5d:c4:f8:e1:98:ab:0f:48:b7:ac:89:08:8c:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:0A:D6:A3:7E:7B:AB:B1:10:A7:25:F5:5E:D3:3E:F6:B8:33:35
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
52:04:1e:f2:33:bd:0f:35:1a:ed:54:02:aa:7b:69:6f:38:7c:
33:40:48:23:8b:80:9c:8b:38:1a:65:88:ed:fb:01:2c:86:31:
48:5b:6d:8d:49:75:ad:bc:1c:e8:cf:93:4b:38:d3:21:04:fd:
54:e7:7a:e1:b6:6f:36:e1:00:ef:80:6f:ea:c3:5b:ca:0b:4a:
70:04:bb:ea:c1:6a:7b:82:c6:bd:51:fe:d1:a2:be:37:97:4b:
18:8a:fb:fd:78:dc:de:64:67:39:9f:15:3a:77:68:72:f9:6e:
6c:a9:27:46:1c:af:5d:a1:71:42:95:97:82:ad:ac:b1:c3:84:
5f:68:90:3a:d9:bc:b3:fa:29:62:9e:e0:34:ce:d1:a2:77:11:
b1:ec:f8:42:27:0b:66:c7:54:30:03:a9:92:35:4b:d1:70:76:
5a:f6:78:42:76:6a:db:d9:5b:54:a1:6b:61:ce:1b:88:3d:c8:
09:6b:8a:15:fc:6f:56:74:c7:3f:e5:11:f1:e2:2a:31:6f:e7:
0c:6e:bc:2a:2d:6a:02:ae:eb:b8:bf:18:0e:ed:60:53:5c:e7:
fd:cc:33:e6:7c:93:02:b9:97:16:9b:27:9f:82:c5:93:60:8b:
2f:b9:79:61:b6:da:fa:95:0e:0f:b0:c0:e7:c2:7c:bf:f0:3c:
96:f5:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org