Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
File: 3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: iSfDxnBiIkdYUAI552rFW+gZ7Un1oVL8XsgHnkXG95o=
Subject key identifier: 8F:24:42:64:43:5D:27:BE:19:D2:B4:7D:9D:86:B4:75:07:45:7F:DF
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 41383A019434507CF27265136FB1988BC5C2365D
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 62240
IP address blocks: 185.187.243.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:38:3a:01:94:34:50:7c:f2:72:65:13:6f:b1:98:8b:c5:c2:36:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=8F244264435D27BE19D2B47D9D86B47507457FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:64:c5:21:69:a7:90:b6:31:b5:b8:fc:eb:
61:a0:c0:e2:f7:f8:51:3a:23:1b:cd:05:a3:ce:ba:
b9:c2:e5:9c:79:08:d1:b3:7e:5d:5a:a5:8e:ea:f4:
c6:bc:62:37:23:5e:bb:5a:03:62:a5:b8:51:65:5e:
e5:16:e2:f6:01:3c:42:14:0c:4a:82:44:d9:d3:e4:
7d:39:8f:59:31:ce:71:95:c2:4b:38:d8:eb:00:b3:
d2:21:f6:52:28:8f:2c:1a:1a:2a:2d:66:8b:f4:d8:
f3:65:21:86:31:6e:6e:52:74:cc:ba:a3:70:a6:a7:
b3:2c:0d:72:26:dd:68:50:e0:df:36:e6:2a:a2:26:
2e:54:2a:e6:82:e2:ae:27:37:c7:21:53:30:9e:2c:
52:78:26:e4:67:fc:58:30:14:b6:e7:b2:10:a8:0e:
9b:ce:ba:d2:1f:54:70:76:75:bc:7f:7f:2a:0d:1c:
06:c1:45:e8:7e:70:ae:7c:8c:92:45:54:66:4b:ea:
9b:2b:66:b2:2e:e2:12:93:97:c3:27:17:a0:2b:c0:
67:a3:d1:73:1a:c5:d1:e9:e9:f9:5d:08:1c:57:13:
97:af:41:b4:8e:03:bb:17:5d:e0:aa:f7:6f:31:ab:
ef:aa:70:b2:ac:e9:6b:10:b4:28:94:29:3b:f2:b3:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:42:64:43:5D:27:BE:19:D2:B4:7D:9D:86:B4:75:07:45:7F:DF
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.243.0/24
Signature Algorithm: sha256WithRSAEncryption
02:eb:75:83:f0:4d:2a:cb:55:b8:c7:68:e0:c8:99:66:64:15:
d5:3a:9b:34:72:1b:ac:23:00:cc:b0:fb:50:50:1f:00:bd:65:
6b:8f:93:55:b0:ef:fc:72:3a:c0:f6:c9:72:5b:13:e6:ee:59:
26:d0:5f:95:ff:11:df:c9:8d:12:d3:36:fc:01:af:4d:35:71:
db:ec:dc:ad:5a:50:be:8f:10:cf:d9:b4:25:1d:5e:39:69:e5:
d3:10:eb:4e:9b:30:04:e0:28:45:a2:81:01:3c:f7:32:56:2c:
4f:4d:f2:16:88:40:7b:7d:83:96:5b:38:7d:84:78:96:c6:55:
c6:af:1d:cb:b2:4b:aa:97:67:63:0a:ee:36:18:76:33:ad:30:
71:84:6c:ef:bd:8b:0a:6b:3c:be:4a:f6:a0:7b:16:92:6e:82:
b0:b0:fc:c5:f6:a6:45:47:a2:85:b1:13:fd:19:2e:ed:7e:79:
5c:4a:75:f5:07:53:91:d3:ce:25:a7:55:2d:45:8e:c0:53:1d:
4b:db:95:09:bd:f6:88:08:8e:a1:41:ef:75:35:49:8b:17:69:
e4:86:20:4e:e7:10:e9:ee:9a:ab:8b:15:0f:8c:ba:5e:e5:4f:
d9:8a:87:4a:45:5d:ae:2d:e0:2c:35:d2:6c:5e:5f:2b:c3:e0:
44:c7:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org