Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ufFZvFfDNDxWut0FUwDzgtuvAliFETxhjnrehlOZEO8=
Subject key identifier: 57:83:70:27:0A:16:3C:28:47:A3:6A:D3:26:CD:8D:A9:D2:A9:CA:9D
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 61967442A861FFE81948E086C26A5954E0387E25
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 136787
IP address blocks: 185.193.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:96:74:42:a8:61:ff:e8:19:48:e0:86:c2:6a:59:54:e0:38:7e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=578370270A163C2847A36AD326CD8DA9D2A9CA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:1a:17:84:11:79:56:e9:b2:7f:e5:eb:52:
30:c8:0b:d1:47:71:00:8b:4c:58:29:ab:df:ea:b6:
1c:23:47:59:90:3a:99:88:9b:15:70:c8:9d:0e:12:
a6:cd:b6:87:b2:85:46:c1:c4:03:93:be:fc:c4:76:
da:4b:95:22:05:a9:a1:cf:70:ce:a1:fe:f7:16:6e:
4e:a3:00:62:bc:7a:0f:26:85:1a:20:1c:42:2a:f0:
65:03:23:59:6a:5d:70:81:98:9f:6e:34:91:e7:93:
88:33:de:b3:04:39:3d:f5:aa:00:7a:75:ee:19:ba:
2a:9a:00:fb:4c:e8:e8:da:b1:0e:49:96:75:d3:d6:
3f:07:f0:5b:e6:ba:ff:c4:00:a9:f4:8a:f1:9e:02:
da:31:74:f2:d0:68:62:fe:4c:c2:a7:47:af:92:5f:
d9:06:0c:b2:69:59:be:f8:63:47:d1:93:b0:8e:bd:
e0:18:24:ae:13:23:07:0a:f3:3e:5e:f3:1d:27:01:
1a:f9:6f:10:37:f4:63:dd:3e:c5:b5:8f:a8:a5:52:
e2:df:6a:12:1c:92:b0:ec:4f:ba:ef:c1:63:78:35:
c1:e3:d1:30:56:21:86:dc:79:0d:a5:f2:22:65:7d:
8e:eb:7f:41:f9:2f:9f:5d:65:55:3d:f1:88:42:47:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:83:70:27:0A:16:3C:28:47:A3:6A:D3:26:CD:8D:A9:D2:A9:CA:9D
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2e:3e:36:6e:fb:69:3e:23:63:6a:31:b0:1a:90:10:85:82:
8b:4a:ce:33:f5:25:4e:ec:8a:9f:64:c0:66:ca:fb:f6:45:ef:
80:26:4f:76:31:66:b5:35:13:a3:7a:96:ff:11:0f:aa:48:04:
28:cf:0c:4d:fb:46:9a:f9:62:86:55:ce:15:c8:ab:fb:14:c1:
73:62:83:ca:ee:d6:cf:66:bf:a0:10:55:af:90:f7:1f:02:fc:
f5:f4:90:85:bf:b9:bf:0c:86:43:94:18:36:d7:83:56:ea:86:
a5:90:23:93:81:39:49:35:04:45:31:f7:bb:49:fb:f8:21:e1:
76:f2:f6:9a:91:2c:cf:26:4b:2e:a8:eb:3a:71:d4:72:54:7d:
6d:ee:21:89:c0:18:3a:49:47:fd:bb:33:0e:6e:2d:24:a5:73:
b3:19:3a:61:01:2e:05:1c:fc:d4:ea:35:c6:13:da:68:14:c0:
03:d5:ab:ac:fc:66:4a:28:29:f1:fb:7c:5a:d8:12:f6:0d:b0:
aa:7e:88:a0:60:a4:1e:b4:8d:4c:6d:a0:c4:cf:5c:9c:33:91:
8b:12:7c:f2:e3:ae:69:51:5c:af:74:25:d7:4e:4d:81:ef:b9:
72:ea:8a:ed:8f:01:24:b0:22:f6:2f:45:d9:49:f3:51:0e:80:
07:21:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org