Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
File: 3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 4ogltrHM2+K0xNiIY73rdse6CSbi0iMiL8veoKh2aOg=
Subject key identifier: 13:94:80:9D:EA:A2:CD:2C:64:AA:5A:97:06:09:A7:D7:97:9B:94:ED
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 53C6C93F289457E0F04E9A65A918621B2AC3BF3A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 51167
IP address blocks: 185.197.194.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c6:c9:3f:28:94:57:e0:f0:4e:9a:65:a9:18:62:1b:2a:c3:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=1394809DEAA2CD2C64AA5A970609A7D7979B94ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:8a:b0:a5:a5:85:03:50:d6:29:3e:6e:c0:
9a:a1:29:ba:62:8e:55:b7:87:04:b4:92:cf:06:65:
a0:cf:e6:44:32:af:41:6a:82:86:4f:2f:9a:44:7c:
b7:da:2e:d6:e4:63:11:90:91:1c:7f:a7:62:a3:cf:
8e:2c:3c:ef:ab:08:ea:46:43:d8:68:da:a6:86:1e:
9e:e9:e2:51:85:84:33:af:c4:00:90:18:7d:b0:2a:
0a:50:82:87:d1:64:a6:57:c4:62:e2:23:af:af:2f:
2b:be:23:51:4a:85:a4:be:55:f9:c1:d3:70:6d:7d:
8f:b1:80:4c:96:74:09:67:07:5d:26:7b:05:42:38:
7e:d8:b1:55:78:9c:b7:ac:fa:74:f6:84:03:56:57:
2a:e2:c5:e1:b7:79:4d:0c:e7:ef:1a:8e:8a:67:09:
ed:f4:8a:ec:28:f1:2f:ee:99:c8:71:85:ad:91:df:
69:81:48:f1:40:4d:91:71:59:0e:05:1e:7d:75:50:
e7:10:d4:f6:5e:5d:67:de:1d:fb:12:d8:9e:44:28:
ba:e2:b4:41:e6:e2:4b:b7:30:91:69:80:22:ba:53:
6b:d9:9d:97:cf:eb:9b:30:22:c7:34:69:45:bc:e1:
24:9f:44:01:b4:f4:8f:8f:91:3a:d2:47:12:42:59:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:80:9D:EA:A2:CD:2C:64:AA:5A:97:06:09:A7:D7:97:9B:94:ED
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.194.0/23
Signature Algorithm: sha256WithRSAEncryption
99:74:86:c7:c7:67:6f:7d:c4:48:fa:9f:b7:c5:96:4b:91:bf:
e4:f1:c9:40:96:d1:d1:9d:de:11:a8:93:ab:e0:e9:bc:78:47:
73:ec:dc:fc:4c:22:bf:59:5d:0d:5c:86:24:92:d3:ea:1a:dc:
91:d7:ce:6f:30:61:d9:f0:56:5e:b4:31:43:09:c0:d2:86:64:
39:56:53:93:af:96:12:d2:ab:e0:79:c1:31:52:3a:e2:1b:76:
e5:bb:35:cf:57:59:17:43:18:2d:93:33:17:2b:2c:6d:b1:e0:
b8:3b:6f:bc:3f:2a:6b:9d:b7:f3:14:35:42:b0:27:92:44:f9:
a4:54:ff:c4:10:ce:7e:4d:43:ca:04:3c:b4:e2:6b:fa:11:8e:
e6:e0:ea:be:94:fe:39:46:e9:1d:88:e4:50:c1:6d:cc:8a:fd:
af:e9:01:5d:ae:3b:4d:5e:14:89:c6:53:59:8f:c8:a1:2f:74:
b7:b5:04:d3:23:a0:19:27:9d:26:a7:0c:aa:a8:ea:79:99:e1:
53:73:fa:65:1a:d3:12:d5:04:c0:e9:40:d0:11:72:04:fa:a2:
f3:ec:7b:74:03:ce:2c:75:67:a8:e9:87:e3:0e:12:ad:33:66:
b2:1f:50:b6:d0:31:1c:8e:50:14:9c:72:07:9d:90:cc:73:dd:
6b:b8:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org