Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa
File: 3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 32+XY3xyU8USVI/zejQxsIfW5Bl9EzjuvDMzHt664s4=
Subject key identifier: 4C:CD:FD:8C:FF:06:C5:F1:CE:D7:DB:A6:DB:4E:3C:7E:36:10:05:9A
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 116E4AF5DDAF4BFA693F9E2B408E5EAB3ECE0033
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 136787
IP address blocks: 185.199.102.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6e:4a:f5:dd:af:4b:fa:69:3f:9e:2b:40:8e:5e:ab:3e:ce:00:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=4CCDFD8CFF06C5F1CED7DBA6DB4E3C7E3610059A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:34:8e:e7:39:b6:4b:47:02:43:94:72:f2:
a2:65:46:5b:2b:ed:e8:18:24:8b:10:94:a2:54:26:
09:28:b1:a6:cf:e9:c2:d0:5a:02:1a:0f:62:bb:5b:
6a:be:36:e4:f1:af:f0:25:56:db:d0:2c:96:ba:27:
c3:b2:65:6e:bd:d4:2e:e5:a5:80:c9:ef:7a:91:fd:
65:73:78:c4:99:d9:f8:63:32:cc:d5:58:9a:da:f6:
84:e0:fd:b6:ae:eb:43:06:3e:1c:56:26:41:f9:d9:
92:18:f1:9d:23:bc:c3:1a:8b:f7:16:d9:d1:3b:67:
2b:54:09:26:f2:9d:f0:be:bb:b5:7a:50:68:06:b0:
fc:8f:2e:60:18:31:48:8b:07:24:44:49:4b:eb:65:
34:ec:fa:6c:42:31:a2:6e:9a:02:53:12:70:55:9d:
aa:11:79:34:5d:25:44:13:8b:31:5f:d9:ed:2a:c6:
11:25:bf:81:90:f3:25:f8:93:c2:26:71:4a:70:2c:
fa:c3:2b:63:11:50:4d:c8:7e:5f:14:01:67:22:67:
01:70:df:dd:9d:57:9f:ac:25:61:43:38:29:ab:e6:
ac:6f:fe:e6:83:18:af:6c:79:07:a0:17:96:ea:fc:
41:f0:fb:25:ef:07:c1:d8:a0:99:b2:a5:03:0d:69:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:FD:8C:FF:06:C5:F1:CE:D7:DB:A6:DB:4E:3C:7E:36:10:05:9A
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:23:27:a1:93:85:09:a8:4b:ba:fd:59:ae:02:99:2f:c7:ee:
38:ca:ee:de:13:49:4d:66:27:ee:06:dd:36:38:aa:86:83:88:
fa:0f:e4:7f:7a:f6:88:ea:49:87:64:e6:28:26:2b:59:9f:f0:
0b:66:c4:5a:ac:65:f6:f5:42:1b:27:b1:11:59:bc:43:d3:5e:
d7:ae:be:11:3d:76:8d:26:95:08:8c:b4:bd:a3:e0:f0:79:7f:
b6:7a:73:06:93:b7:6a:c4:fd:a2:28:a0:3a:58:50:a0:88:5d:
53:b8:b7:81:19:74:07:30:91:ae:e6:46:a1:2e:f0:cb:26:53:
29:64:58:47:7d:b3:e7:a4:aa:3e:e1:60:09:f9:a5:a1:36:02:
7a:dd:ae:ca:21:b6:e7:10:ab:f0:11:bd:91:ea:76:7f:96:8b:
56:09:6d:03:4e:1e:7d:89:90:29:c9:ed:fe:c6:9c:c3:24:ae:
9e:35:a6:d3:71:ec:e8:a3:d5:bb:6e:65:7c:f9:1e:77:08:ba:
99:ad:c4:68:7d:3e:a1:b9:6e:a9:dd:da:ed:98:81:67:43:4d:
f3:c1:c8:9f:8b:7a:4c:17:04:4c:54:d4:89:82:05:60:8e:3a:
8f:1a:f6:09:b7:a0:d8:db:37:1b:6f:c4:67:fd:ce:32:09:10:
3f:c1:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:26 2025 by rpki-client