Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa (raw, json)
Hash identifier: a5qXiHqOq3YbtNwqJytGLyQbVJCwFn1+YgAx78tW0vI=
Subject key identifier: 07:98:32:AF:16:64:D4:40:29:5E:98:03:3C:12:A1:91:1E:6D:C0:C6
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 24CA5FA343513BCBB22C53328495CE2831208FDD
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 212053
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ca:5f:a3:43:51:3b:cb:b2:2c:53:32:84:95:ce:28:31:20:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=079832AF1664D440295E98033C12A1911E6DC0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:68:be:56:aa:ac:e4:85:46:9b:b2:eb:47:
f7:1c:e0:26:71:44:a8:07:a9:69:b6:86:51:f4:bb:
83:ff:31:4b:4e:1c:ed:0b:27:f2:fe:27:0c:0e:1b:
bf:80:72:42:53:6c:98:93:42:96:a7:f2:0d:c4:06:
3d:09:7c:da:3a:18:c2:05:e5:f8:67:68:c1:8c:38:
60:d0:03:0a:cc:e3:55:41:ff:93:d3:d0:5f:d9:22:
dc:57:ab:48:eb:c6:9b:96:c0:42:3a:eb:d8:6b:73:
d7:c9:9a:74:71:8b:04:19:a8:f2:fe:51:4a:cb:57:
9f:e9:84:15:a5:12:30:db:37:c8:8d:0e:c0:60:37:
c3:e1:45:71:4a:43:63:67:62:f2:4f:b5:e8:d8:77:
e1:1f:a6:ad:8b:63:ee:83:6c:96:57:1a:9d:14:5a:
3d:1f:7a:92:13:c3:b0:46:4f:38:bc:7e:54:40:69:
50:8d:ea:ef:4e:fb:0a:51:1b:69:19:34:9a:4a:95:
ac:18:d3:e5:3c:11:8a:71:b3:76:43:69:95:b3:24:
fc:ec:fb:69:b0:5e:1e:e4:4e:0f:02:1f:5b:65:af:
cf:35:2d:11:ec:92:6a:2e:51:a9:8e:2d:a8:ee:a6:
a4:28:a7:30:26:0a:16:0b:04:74:ff:7b:56:bc:db:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:32:AF:16:64:D4:40:29:5E:98:03:3C:12:A1:91:1E:6D:C0:C6
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1f:5c:aa:0b:95:e2:18:6f:43:2f:18:c6:59:68:39:6d:3d:
01:32:66:43:3a:81:d1:b6:cb:cd:dd:18:8a:c9:ef:a9:ba:50:
98:f8:73:f6:ee:a3:f6:81:7a:83:29:63:3f:32:9c:ac:6b:9a:
5a:ab:bf:73:64:97:5e:ea:05:aa:66:f7:6a:7d:4a:61:1f:f6:
57:45:47:0b:61:cc:bd:32:45:e0:d8:ab:2c:1d:5c:b9:ba:9a:
02:d7:00:45:d4:ca:86:45:55:54:2a:90:de:83:ad:c8:d2:33:
39:21:b4:00:00:2e:d9:c4:25:7a:1c:d7:08:c4:b3:9c:35:53:
b7:5f:6f:16:b1:e6:25:2b:24:ff:11:07:67:b8:79:ac:4a:ae:
b0:71:82:36:59:b1:d1:76:dd:7c:3e:18:80:80:cb:29:07:51:
89:4b:c3:59:62:1b:99:ba:7c:34:23:45:db:5e:eb:fe:20:01:
4e:1f:36:fa:eb:a8:9a:0d:59:43:8c:ad:f5:24:ca:69:69:73:
a2:d1:05:85:4c:bc:b2:90:59:5d:65:aa:42:7b:30:e7:fb:54:
6c:74:13:6c:69:16:40:99:f6:a1:0e:50:74:43:84:22:85:72:
aa:0c:2b:c8:c4:b7:db:34:4f:2c:34:10:44:8e:e8:9f:49:8f:
23:d0:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org