Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa
File: 3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa (raw, json)
Hash identifier: uVW3rR3lQm52+KRDIseAx8BuJwsKOjTJDtchQYpBxHs=
Subject key identifier: 08:B7:B8:0E:A9:05:E0:16:CC:D3:B6:6B:48:52:99:25:34:47:3B:94
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2EE4F2E6FA8E2DE299CDBAF434527EDD8C2C2E0C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 2856
IP address blocks: 185.190.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e4:f2:e6:fa:8e:2d:e2:99:cd:ba:f4:34:52:7e:dd:8c:2c:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=08B7B80EA905E016CCD3B66B4852992534473B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:71:fa:7a:39:38:94:35:08:d0:30:3f:6d:
6a:91:4c:24:04:01:ef:b0:e6:a2:17:27:83:a5:05:
f4:69:eb:ba:56:1a:2c:6a:87:31:ca:92:54:f1:08:
14:10:a0:23:a9:f1:37:68:0c:cf:4f:b0:65:95:22:
20:a8:74:b0:52:20:17:a9:f9:9f:85:44:2d:ef:51:
3b:b2:e0:52:a4:22:a8:b4:be:33:cc:a2:b6:74:92:
a5:28:6e:63:03:9e:44:18:b0:af:08:00:a8:97:0a:
de:8e:a1:5b:2b:98:f9:74:bb:6a:31:a1:20:b0:8c:
f7:f4:b5:84:33:77:5f:63:e0:c9:63:6f:f2:d9:80:
17:24:8e:aa:0d:30:1a:55:b2:48:7d:8b:f2:5f:6d:
a3:bc:38:1e:2f:6b:e9:b7:a7:cc:e1:8d:a4:3a:59:
bd:19:ea:10:5c:24:26:60:07:67:c7:5b:fa:b0:1d:
ae:8a:67:90:c2:ce:44:8e:ee:fa:e0:23:0e:20:1b:
a3:f0:c2:06:30:48:7d:9c:44:98:a5:26:0e:21:a6:
0c:fd:71:0b:1d:aa:7c:12:eb:13:5b:20:60:d5:f5:
cf:23:21:15:4f:61:46:14:f6:6b:03:a2:81:72:1f:
c4:8d:a6:1e:5d:94:bd:5a:35:a3:02:18:db:35:e0:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:B8:0E:A9:05:E0:16:CC:D3:B6:6B:48:52:99:25:34:47:3B:94
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134312e302f32342d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:aa:4b:6e:04:64:54:5b:f4:c8:39:54:7d:74:5c:86:ae:3c:
fe:85:e3:bd:a6:dd:79:ae:de:1d:01:aa:86:0b:8f:41:59:c3:
b4:12:fa:27:d9:f4:fb:62:a4:86:a6:fb:51:34:7f:2d:bc:40:
50:46:cd:51:f7:40:31:5d:20:cf:95:82:85:22:43:fc:a7:a4:
46:19:22:23:7e:84:c6:0e:d6:51:1c:2a:0f:16:d0:2e:07:91:
92:a4:74:eb:03:95:4f:69:f8:58:99:e1:da:b9:10:3f:54:47:
11:4d:d5:8f:d0:a5:b8:84:fb:a6:3d:50:ad:22:28:71:70:19:
ac:62:50:f9:bd:64:b3:7d:08:d0:4e:eb:b7:6b:bb:58:35:43:
09:e3:53:fb:0a:25:ba:db:48:5d:b1:6e:25:ae:0a:fc:05:c4:
62:79:7c:38:3a:42:73:52:ba:83:26:3d:4b:ff:ae:99:f7:ba:
54:7c:85:1e:1b:be:57:9e:25:7d:98:b8:53:84:f6:15:4d:9c:
2c:d5:27:cb:9f:58:0a:f5:95:b5:f7:e9:19:0d:42:3e:d4:32:
ed:f4:01:b1:1a:ef:4d:f8:a7:3c:56:b6:97:2b:b4:a2:bd:2c:
14:7e:d0:95:55:c0:6c:7a:84:0d:ce:11:17:37:0a:68:dc:1b:
63:57:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:04 2025 by rpki-client