Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier: E8/Ry7ruyxD4UpENktNi+FhD7gCAbOcn74/W+tlZV1A=
Subject key identifier: 14:61:0E:4E:60:CA:D2:43:AC:21:F1:9F:32:B5:8E:BF:60:09:72:1E
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 64EB4F0E6C502BC721E3EC1AD6720DB9C5DBC63A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 399641
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:eb:4f:0e:6c:50:2b:c7:21:e3:ec:1a:d6:72:0d:b9:c5:db:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=14610E4E60CAD243AC21F19F32B58EBF6009721E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:33:f9:9e:41:7d:b0:29:5e:be:b3:db:af:
3a:fc:2b:74:d0:b1:13:c8:e7:d9:39:81:ba:c0:83:
50:f4:4e:91:fb:ff:35:18:b6:6e:9a:ab:ec:15:0f:
c4:54:58:8f:e2:7c:f5:35:98:29:96:88:6d:74:23:
30:2b:cf:a8:e9:f5:9f:e7:39:70:bf:25:6e:aa:f2:
b4:f6:44:e1:9a:4f:52:3a:8d:cf:4b:6c:c1:19:fc:
27:2a:30:8e:27:c3:8f:36:41:f3:13:e2:d6:74:0d:
29:f3:44:27:73:33:52:9d:f0:9e:d0:77:ea:21:d6:
7e:e6:75:f4:ce:be:8f:9f:d0:cb:bd:e1:c0:ea:e9:
ac:94:27:89:91:e1:9f:75:b6:e2:8f:85:ae:5c:c8:
ec:94:38:28:2c:d8:b3:e2:83:f5:f2:dd:a1:49:16:
25:6f:49:2e:2b:e6:05:1b:b5:65:b5:d1:8c:2c:15:
e8:a5:0a:85:3e:73:d6:8e:27:9a:4a:3f:36:57:90:
d6:a3:7e:5b:f8:ef:b7:bd:76:7b:71:ee:05:02:d4:
ce:e5:da:92:49:2c:df:e1:a5:33:b2:68:13:e6:60:
25:47:ef:e8:ba:15:16:8e:c7:87:5d:c4:ec:cc:b5:
4e:23:0a:64:01:d2:fc:06:96:9e:e2:24:64:ed:af:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:0E:4E:60:CA:D2:43:AC:21:F1:9F:32:B5:8E:BF:60:09:72:1E
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ec:72:5f:87:d3:68:40:0f:09:ba:8d:20:32:34:ad:69:85:
f7:77:1c:10:02:ed:df:66:1c:d8:f3:39:c9:04:74:0a:d0:7f:
31:60:f0:60:db:5f:c6:b5:17:01:14:e3:e0:b1:a3:ed:a7:1b:
e0:42:aa:59:e4:7b:b3:5b:c1:2a:7e:01:0b:55:2d:e9:7d:f6:
37:0d:8b:3e:9d:ca:d0:1c:95:d2:e9:c4:6f:74:18:64:79:a2:
ee:d7:13:73:45:46:65:84:53:47:ae:84:1f:2d:fe:c7:c9:ce:
7b:1e:b5:25:74:bb:7e:dd:fa:50:e3:2d:4c:be:2e:50:62:cd:
48:4d:74:3e:44:63:8f:b3:78:0c:5d:96:b6:3f:1b:02:ae:4b:
29:35:42:5f:94:42:2e:d7:44:6c:ba:96:05:e5:35:34:69:0f:
58:e0:6a:f3:5d:95:d5:9a:3b:d3:5d:28:90:c1:2c:e3:50:63:
b4:ec:9e:ec:68:0b:06:aa:4f:80:d3:59:23:a4:da:ce:46:ce:
6e:46:1b:dd:75:3f:a9:57:69:06:45:af:28:2b:e4:06:2f:b8:
b8:67:d6:78:2f:cd:05:7f:8a:44:9d:1c:9f:b3:d5:13:8c:8e:
7a:6c:66:66:8d:14:e3:38:78:9a:23:a1:22:50:10:96:f5:90:
44:96:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org