Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
File: 3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: MXVwNa4H2gwDoPtMIenAP5OFVqps7ivgYER45H5w50o=
Subject key identifier: 0B:2A:FE:6E:08:43:54:78:CD:33:FA:2B:A2:AD:82:E1:F6:3F:80:52
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 3CDABA51E3F7829E146EE17FFDC658ADC81C1064
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 51167
IP address blocks: 185.194.216.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:da:ba:51:e3:f7:82:9e:14:6e:e1:7f:fd:c6:58:ad:c8:1c:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=0B2AFE6E08435478CD33FA2BA2AD82E1F63F8052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:60:4e:88:39:e7:37:01:ce:e4:3e:68:c7:
49:25:5e:22:2f:9b:34:d4:ca:6f:0a:9c:3d:ba:fb:
2e:07:c1:aa:cd:17:cf:48:92:ba:55:4b:60:14:96:
1a:d6:40:b6:a7:77:a2:30:e0:ec:88:ad:12:8a:b8:
85:2b:d8:a8:04:89:68:66:12:55:0b:d6:ac:a9:b1:
e3:2f:b6:35:d2:e7:03:71:b4:3f:90:7f:5a:91:8c:
0b:68:50:80:28:27:ab:36:41:02:d1:a7:75:ae:bb:
f6:61:dd:62:b8:21:f3:a2:a0:22:37:9f:79:89:35:
19:86:10:6e:b8:f8:ce:23:74:1d:80:d6:7c:21:2c:
1b:3e:b7:3b:83:3e:57:24:94:ed:ff:b0:f2:65:ef:
9d:22:2a:51:31:3b:cc:5b:f4:16:35:62:ab:81:a4:
a0:2f:4e:7b:ba:a5:a9:fb:9b:36:b8:c1:80:ba:eb:
72:31:26:0e:ca:a4:1d:92:69:0c:59:ab:5b:ac:13:
d1:5a:56:fb:03:10:ba:87:d4:69:ef:4a:eb:c7:2b:
af:68:42:c1:2b:1e:97:02:45:7c:aa:88:6b:5c:33:
e3:e1:49:66:33:0a:fa:f1:7f:51:87:a5:3d:97:18:
34:b7:15:31:de:2e:3f:9b:05:83:6a:0f:29:5a:46:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:FE:6E:08:43:54:78:CD:33:FA:2B:A2:AD:82:E1:F6:3F:80:52
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.216.0/23
Signature Algorithm: sha256WithRSAEncryption
11:aa:45:21:d0:d7:ca:85:c3:83:db:44:e3:df:18:b0:c3:05:
8d:a8:6d:c4:da:a1:f3:7d:31:4e:1c:66:50:69:d1:9c:fd:33:
b4:1f:6e:cd:ef:4a:c2:a2:1d:d4:1d:b6:ff:1a:d4:19:69:67:
3b:f9:db:06:2f:1a:ce:2a:be:e8:d9:cd:34:97:b3:60:4f:2e:
e8:b2:9a:65:04:4e:24:c5:c9:bb:fd:9e:fa:9b:48:41:53:25:
be:d7:2c:8f:ec:c8:e0:59:07:f6:10:a6:38:98:ff:4c:93:d3:
dc:4c:e3:09:fc:bc:9d:5d:6a:64:06:a1:c4:f2:38:ad:6e:94:
6f:e5:e0:4a:53:9e:a8:25:bf:41:18:51:a6:67:2e:43:73:0d:
76:f4:03:dc:e1:cd:ff:0c:09:c6:e8:f3:a0:d2:5e:86:6a:d2:
c9:3e:7e:c6:cc:ae:cd:fe:7f:13:bb:c7:80:e4:1a:e3:de:ac:
3c:b7:6c:e1:24:a1:74:2c:ba:06:a6:87:75:bc:93:1c:98:95:
28:50:e0:a2:e5:ef:2c:18:17:31:5f:bd:64:41:c5:f3:b9:6a:
6e:b7:5e:e9:7f:6a:a3:cd:2b:4f:fa:37:37:fb:d5:19:22:4a:
01:c7:08:11:89:0c:e7:f7:cd:37:c6:21:25:b3:76:d5:a1:1d:
03:8f:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org