Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
File: 3138352e3139332e36352e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: jBxgQ+5tpWvJQHWew8ab36xYMa4cAb11DjDO6b8vWZo=
Subject key identifier: 90:F3:9C:0E:1C:D3:5B:3C:87:C3:73:7B:BF:3D:AC:D2:96:8E:E4:44
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 1FDA594DA35676F917EE07ABB4685FF6D7BA385D
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
Signing time: Mon 27 Mar 2023 08:27:21 +0000
ROA not before: Mon 27 Mar 2023 08:22:21 +0000
ROA not after: Mon 25 Mar 2024 08:27:21 +0000
asID: 49981
IP address blocks: 185.193.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:da:59:4d:a3:56:76:f9:17:ee:07:ab:b4:68:5f:f6:d7:ba:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:21 2023 GMT
Not After : Mar 25 08:27:21 2024 GMT
Subject: CN=90F39C0E1CD35B3C87C3737BBF3DACD2968EE444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:06:ef:c3:fe:16:f2:d1:d4:81:e6:90:f6:
84:2a:ac:f4:69:38:ca:c1:d1:f0:dd:e5:14:55:8e:
39:b4:9d:c8:38:95:0e:21:46:0a:ad:67:13:c5:e2:
5a:7e:3a:6d:2c:54:75:e7:b7:8a:ba:59:77:4b:c3:
ac:7f:a2:ac:c7:ef:30:81:59:7d:01:64:dd:9c:42:
c3:79:9b:54:f1:44:fe:3b:4b:f1:b4:b9:10:f7:f1:
77:9a:7c:c0:94:c2:fb:4e:48:81:2f:1e:92:42:66:
8c:0a:59:3e:8a:d2:72:a7:3d:c3:24:9b:97:17:35:
01:47:a6:03:8e:8b:89:ea:65:17:86:29:df:bc:f8:
44:f4:72:9a:6a:05:17:eb:2b:ba:75:6c:d3:93:3d:
90:d2:9a:b7:25:55:98:9f:20:d3:e0:6d:06:a1:6a:
95:0d:c0:35:4e:e7:7c:b8:7c:bb:a1:85:ef:9e:ce:
e2:b1:51:56:86:55:bd:f9:e6:23:ec:45:92:3f:d9:
78:cd:90:c8:51:99:bd:e2:6a:5b:cc:fd:85:1b:78:
ec:39:37:76:4f:61:33:15:f6:8b:c6:9b:27:de:e5:
f1:09:af:aa:7b:1c:b5:48:f1:13:65:2e:b9:d7:35:
00:17:8c:50:4b:86:67:0a:ea:4f:8c:ee:12:1c:a5:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:9C:0E:1C:D3:5B:3C:87:C3:73:7B:BF:3D:AC:D2:96:8E:E4:44
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.65.0/24
Signature Algorithm: sha256WithRSAEncryption
94:19:ee:25:38:29:51:68:d0:ba:2c:4d:92:7a:db:52:39:53:
fb:ef:02:8d:3c:54:54:9e:c7:bc:19:cd:00:f0:b7:2e:43:83:
d6:f9:40:42:26:50:82:5d:7d:2a:3e:73:6a:14:ee:eb:7e:c8:
7f:81:e0:97:39:c1:72:60:c3:76:6c:63:c2:69:54:6a:4f:40:
35:bc:8a:21:78:54:c9:93:71:72:e2:7c:41:bb:b5:78:21:91:
5c:e9:3d:ca:04:11:91:bb:34:84:aa:10:97:f1:69:91:6b:70:
24:69:8b:cb:8f:21:e7:20:3d:9d:0e:84:f1:35:83:40:ed:30:
69:ba:87:fc:2b:b0:b6:a3:50:5b:1e:3e:bb:69:46:a2:5d:5d:
f7:db:f3:63:7a:8c:ac:8a:e0:e0:50:66:5a:9f:08:61:cc:ea:
40:72:01:f9:94:04:91:5b:ea:58:46:b1:e4:18:00:d8:54:da:
4e:74:5e:72:77:1a:1e:3b:60:55:4f:1f:23:a6:74:d4:2f:4d:
08:ce:f8:0b:c1:c6:45:27:0d:0b:33:fb:a8:f9:77:6c:c6:52:
ee:07:45:44:39:a4:69:1a:fc:e2:d2:05:12:d1:f2:fa:70:d4:
0a:2b:73:3d:3c:27:70:87:46:2d:5e:f0:d7:8a:74:9c:39:ea:
a6:13:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:44 2025 by rpki-client