Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa
File: 3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: FOwi0bav2DYgp1Fw8bmjWEFcuYzNIMtvnTPgoZiqV+U=
Subject key identifier: 8A:95:24:C6:1D:56:0B:2D:BF:B4:C3:E4:FC:04:F7:FE:53:9B:29:BE
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 3A0B58C4403A7C82115652DFA0EDDB3E60B885D6
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 51167
IP address blocks: 185.194.218.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0b:58:c4:40:3a:7c:82:11:56:52:df:a0:ed:db:3e:60:b8:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=8A9524C61D560B2DBFB4C3E4FC04F7FE539B29BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:34:5b:ad:7a:41:6f:08:db:cd:97:f9:3e:
97:15:ee:21:e4:d0:05:8c:09:01:24:4d:19:40:50:
fa:1b:e0:fe:4f:04:72:3d:99:10:0e:01:7c:58:92:
d6:98:7c:ea:ad:d2:ea:f6:60:18:07:3f:1e:65:88:
ef:57:ad:28:78:33:68:7c:f0:9e:ba:2b:15:da:ac:
63:ea:fb:ba:6e:ca:1a:4e:fc:2f:a9:84:43:59:95:
4c:f1:c9:f1:69:fb:96:33:1c:21:db:c2:c5:84:25:
1d:68:d8:40:b7:b8:56:58:56:e1:6b:f7:25:c7:16:
67:3b:02:0f:2e:f4:c9:2e:27:a1:bf:bc:d3:36:99:
66:38:5d:b2:08:00:29:7d:ca:8c:de:07:23:6f:b7:
02:05:b9:a0:93:68:af:65:ed:0f:bc:b0:06:f3:61:
1a:99:a9:8a:85:7d:4a:8a:3e:2f:bb:7d:77:3c:d2:
43:55:b5:a9:ae:49:da:ee:9c:f1:20:38:89:aa:0a:
1f:db:1f:e9:f4:12:92:43:4f:d1:b0:1f:54:76:da:
93:aa:de:b2:01:97:45:89:99:90:60:b4:a5:b3:25:
9c:69:0b:f2:9e:a8:53:33:3f:da:05:8f:02:2b:2b:
37:71:9d:14:90:da:2b:08:21:63:d1:95:54:4a:34:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:24:C6:1D:56:0B:2D:BF:B4:C3:E4:FC:04:F7:FE:53:9B:29:BE
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:e0:76:51:36:00:cd:7f:af:e5:21:a2:32:a8:6f:57:2b:ed:
c2:99:60:92:ef:5d:55:95:59:07:c5:af:15:71:3a:2e:c1:70:
8b:9f:36:b4:a8:07:74:68:43:db:a7:da:e5:6b:71:c2:30:3b:
46:eb:7c:2c:b0:37:9f:11:a9:19:4e:83:c5:4f:24:e0:83:7b:
a7:62:75:04:32:a7:d0:19:bc:f0:de:f7:9e:b8:8f:5b:17:71:
bc:14:64:58:0e:d1:a8:ca:45:6d:1d:2f:4d:fa:ef:7b:de:0c:
85:18:de:c9:12:bd:20:54:0f:b4:16:f1:12:66:8e:22:e4:84:
7f:7b:8c:6f:58:60:ac:3f:e6:f2:20:aa:ea:42:b0:c3:aa:7e:
1c:d5:d2:55:66:0c:a6:1f:50:37:73:84:aa:d9:8c:c9:ff:df:
fa:bf:a9:4b:5b:62:1a:af:3d:67:92:a3:92:67:57:4e:14:f0:
c9:ac:4f:1f:29:a3:3c:36:34:e2:a0:3f:3a:e4:3b:3f:0e:ab:
b6:de:97:41:43:a7:82:a9:e9:48:85:1b:1b:cb:8c:86:76:cb:
52:b2:bf:89:68:9a:c5:f6:b9:dc:8d:e8:2a:f8:f8:6c:d3:24:
61:43:ec:4c:ad:67:76:c3:7f:59:68:dd:90:c2:d0:b9:66:0c:
5c:49:51:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org