Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 3HaVq/H0+T36QPp0tWBQaBof+fknoIHL/vrDIm8zEgs=
Subject key identifier: 19:96:59:92:4C:97:87:1D:6F:C6:87:E5:60:FA:1D:63:82:19:6F:9D
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 46F6C49AF546499913176D82A2DF57B21375F81E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 21 Jul 2023 07:18:59 +0000
ROA not before: Fri 21 Jul 2023 07:13:59 +0000
ROA not after: Fri 19 Jul 2024 07:18:59 +0000
asID: 51167
IP address blocks: 185.187.235.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f6:c4:9a:f5:46:49:99:13:17:6d:82:a2:df:57:b2:13:75:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Jul 21 07:13:59 2023 GMT
Not After : Jul 19 07:18:59 2024 GMT
Subject: CN=199659924C97871D6FC687E560FA1D6382196F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:d1:2d:18:88:38:71:9a:5f:c8:c3:ba:30:
2f:74:4c:c9:eb:5d:69:a1:73:a7:53:60:dc:da:12:
fe:38:5e:93:6e:b6:43:43:6c:c3:57:a1:f4:52:15:
ed:04:34:c6:45:3b:53:4f:45:43:26:4d:08:63:ed:
a7:0c:a0:ca:b6:1a:bf:4a:84:d8:17:a4:95:d0:af:
9f:00:4f:87:58:8a:16:97:f5:d5:d5:2a:7a:11:29:
5e:b9:ed:03:7a:3d:df:b6:05:a4:43:be:62:c9:d2:
ea:a1:8d:92:68:63:80:b8:af:de:24:6b:46:c9:94:
c3:68:fe:f5:55:8c:94:10:29:41:54:a0:e3:a2:c9:
30:af:96:3a:ed:a6:e3:82:cb:9f:f1:d9:c8:56:36:
b3:77:cc:05:ae:50:f2:5f:3a:af:c6:69:b0:4d:1c:
a1:e2:36:5c:b8:06:be:ca:b0:f5:e1:7b:50:ea:db:
32:8c:db:6f:02:e9:a1:e9:74:bd:1f:1c:f2:7f:20:
54:11:0d:a2:d3:56:45:af:cb:d3:fe:48:86:c8:0e:
de:fb:63:e5:d1:fd:37:8d:be:0e:80:48:c2:11:50:
30:bb:4e:c8:0d:52:e1:25:5e:9d:6f:6a:f7:7b:39:
1e:56:99:ab:2b:5d:00:5e:20:b5:d3:86:fb:3d:1b:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:59:92:4C:97:87:1D:6F:C6:87:E5:60:FA:1D:63:82:19:6F:9D
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.235.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a8:5f:7e:92:c9:a4:6d:5e:62:d8:c8:3b:1c:aa:95:92:d2:
c4:5d:39:55:90:63:e4:cc:87:ca:b3:9e:62:ef:b4:ef:4e:91:
fb:40:79:d6:2f:a0:fa:fc:4f:7d:8d:a6:f2:f1:29:64:a7:b6:
da:82:6f:54:c8:d6:64:fb:c5:07:49:43:fb:9b:cc:a0:31:d5:
56:68:c9:80:6e:61:05:82:e5:58:27:77:64:f0:95:6c:6c:e6:
8a:03:32:30:90:73:4e:9f:86:2b:44:10:5e:50:da:55:c3:77:
e6:91:71:a1:da:0c:e4:a0:c4:66:48:c2:12:29:40:8b:2f:19:
47:6c:ff:98:b7:63:01:3d:fe:be:d7:fb:21:24:b5:77:72:21:
6f:a5:78:29:50:7f:f2:a1:19:7e:78:03:04:dc:77:c0:ff:5d:
6e:e0:f8:f1:a0:c4:9d:2a:ea:48:57:fc:f4:56:4d:9f:4e:37:
af:fb:77:55:b7:6b:f4:02:cc:35:7b:d7:0e:9f:98:e6:9d:a1:
10:ca:4d:80:75:2c:b2:48:25:04:62:40:e0:cd:a2:4a:9e:84:
23:3a:db:e4:76:0a:8e:71:3a:04:05:e1:98:01:5e:75:9b:4a:
94:ed:e8:50:19:20:42:64:6d:10:0b:1a:19:a3:74:1e:22:7b:
57:cd:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org