Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rm0yIzIr9IiVh1ASCcXNWjxN6Pd4KSlwJ7MSxzkQ5L0=
Subject key identifier: 6E:61:E4:85:48:CC:81:E1:DF:C4:25:A4:48:03:CA:22:CB:CB:2A:AF
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5AA65DD5593D174DCD351E6DF349C5866DB2DBD8
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 136787
IP address blocks: 185.199.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a6:5d:d5:59:3d:17:4d:cd:35:1e:6d:f3:49:c5:86:6d:b2:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=6E61E48548CC81E1DFC425A44803CA22CBCB2AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:d4:f9:7b:6b:6f:ae:dc:f9:9a:8b:ee:f2:
60:30:8d:c0:82:0c:e8:8e:24:f7:3a:35:aa:10:18:
ab:2e:ac:c7:7b:40:1b:7c:a8:39:4b:a3:68:38:23:
6b:a2:b6:ab:00:3c:b4:33:3e:3b:aa:46:1b:3d:fd:
a9:07:9d:fb:1a:5d:b9:b2:14:55:ed:29:5e:ab:2f:
ce:32:38:05:10:4f:d0:be:23:35:70:81:50:b9:a8:
44:49:d0:89:11:b7:0c:d7:0b:12:6b:25:34:53:d9:
b5:bf:df:79:8c:f5:06:1b:d3:6e:a5:f3:f2:4b:51:
ad:60:8e:16:63:c3:c6:96:f7:6f:91:40:70:71:95:
3f:80:3b:ad:af:e7:87:7b:27:c5:90:23:d4:c0:e2:
fc:a1:dd:1d:38:c9:c1:4f:7c:9f:02:a3:83:d9:c3:
19:58:9d:6b:c9:0b:dd:b9:70:c7:68:86:16:d8:a1:
ca:10:4d:0e:47:f5:cb:f5:e6:ec:c0:5a:59:6a:75:
4f:6e:1c:bf:cb:b9:aa:6f:d5:ba:84:8f:62:ad:92:
e3:7c:94:95:d1:0e:3e:2b:93:b2:a9:09:aa:0b:e0:
26:3d:c7:81:2f:0b:ef:05:e8:63:ab:fd:13:e3:bf:
3e:72:34:fd:21:e5:29:32:5b:db:66:0f:60:ca:12:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:E4:85:48:CC:81:E1:DF:C4:25:A4:48:03:CA:22:CB:CB:2A:AF
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:48:e7:70:0f:a6:30:72:ad:6b:64:a2:fb:11:f3:e7:13:04:
6d:9f:3c:6a:52:39:d5:96:b9:95:15:ce:7e:fe:7d:0c:dc:cf:
fa:d4:50:56:55:42:f2:d8:b6:7d:04:70:24:93:4d:4e:d4:91:
6c:ac:9d:e1:37:00:78:78:46:eb:98:6e:1e:17:17:2e:49:5a:
34:53:7b:c8:4c:fd:35:0a:e4:c8:0b:f5:3b:c0:fe:82:e9:66:
ba:f3:f9:a5:39:1f:08:18:c0:40:42:3c:5b:6e:8f:ca:67:d4:
25:b5:b9:5f:21:98:da:17:26:7d:ab:e7:34:6e:02:17:40:2d:
48:38:2f:20:04:86:e5:ac:cf:7c:ee:7c:30:b8:9c:35:01:cf:
af:52:9c:d0:f0:e4:71:51:63:7e:79:17:d4:51:23:c5:1e:2f:
5f:65:ef:c4:a9:77:1c:f0:31:d1:fd:2f:21:70:63:c6:f8:2b:
e4:21:b2:39:5e:92:b5:6e:6b:10:9b:e4:c3:5a:b6:e3:08:2c:
48:c3:2f:a7:72:55:c1:3f:7f:c2:80:32:f7:ff:3a:bb:b2:67:
18:e1:75:b8:35:66:72:91:a5:87:2e:12:27:92:f4:46:b9:a2:
62:4d:68:98:f9:39:31:0f:7d:2e:85:b0:66:ac:33:76:69:ec:
14:4a:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org