Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: cd4AoLpM7qHpneP/Eo1W2QEG0DrUWAiNSoaMZ+DDaNk=
Subject key identifier: 02:F8:FF:9D:87:A3:4E:46:4E:E1:17:68:EC:BE:FE:10:6D:7E:63:98
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 48798924662E4AF113FA0064CFC7046E53A1DC69
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 141039
IP address blocks: 185.202.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:79:89:24:66:2e:4a:f1:13:fa:00:64:cf:c7:04:6e:53:a1:dc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=02F8FF9D87A34E464EE11768ECBEFE106D7E6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:0e:33:91:9e:e4:de:4a:b0:8e:ff:e8:88:
04:84:f2:4d:2b:66:3a:0c:12:58:ab:8e:14:e1:33:
ab:c5:22:3b:74:68:16:44:c9:4d:ac:1b:80:d2:24:
01:93:88:50:27:e1:93:40:97:1f:2d:2e:d8:45:b8:
ed:1e:45:14:88:27:03:6a:c5:ef:11:93:28:6c:04:
16:a5:cc:15:4c:34:4e:fc:fc:df:51:9a:65:d6:79:
fd:19:09:7a:b7:9d:3b:58:48:d0:80:49:a5:69:b1:
cd:c2:32:e3:f6:21:9c:b2:26:cd:7d:c5:dc:09:62:
ea:0c:de:99:ac:ab:84:4d:48:2d:e7:e5:78:9b:20:
db:a1:48:27:2f:30:79:af:c1:6b:1a:ab:2e:8a:c2:
5b:04:1d:25:84:ca:8f:13:b5:66:15:56:98:92:6d:
12:2d:02:75:ca:3f:70:b0:27:53:6e:4a:1d:9d:89:
8a:52:f9:ce:40:e6:a8:b7:8a:84:54:6c:1b:a9:5d:
76:78:37:bb:38:89:8c:f7:ba:b1:b5:63:54:b8:e6:
00:76:64:23:c9:20:3b:2a:56:f3:33:b0:85:f9:8b:
16:16:c6:ea:29:7e:68:01:85:fb:4b:cf:7c:74:3f:
34:65:45:e9:d3:71:7c:59:d6:c0:c4:e3:5c:bb:b2:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:FF:9D:87:A3:4E:46:4E:E1:17:68:EC:BE:FE:10:6D:7E:63:98
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ba:c7:95:cd:c4:21:a7:53:2f:0b:71:fc:8c:73:cd:c5:1b:
69:e3:2b:13:09:d8:0e:63:9e:cf:6c:a9:00:a4:df:61:81:62:
64:b5:5f:e8:2c:ad:bc:c2:66:aa:fa:ff:2f:3f:13:24:1f:8b:
30:e4:7e:ef:0a:8f:8a:8f:3e:c0:8c:f9:3a:9f:45:b1:e8:45:
63:0d:bc:b9:57:b7:c1:cf:cf:6a:f9:75:4e:8d:70:c7:a7:fd:
2b:28:2d:94:62:36:32:6d:69:17:96:6a:2a:ea:ea:56:a4:34:
0d:5c:11:ff:30:8c:e5:29:29:f5:7a:5b:f6:fd:77:62:17:0d:
05:4d:0d:ec:77:0b:cf:34:56:7a:78:ee:e6:42:76:78:a8:36:
b1:5a:e8:83:14:53:42:8a:35:49:b1:e9:16:68:dc:e7:67:80:
b9:2a:8e:6d:a3:a9:7a:c9:a3:a4:38:a9:9d:12:cc:b7:b8:a7:
0c:57:a5:df:91:e0:a9:0b:3f:15:a3:4f:bc:5e:80:6d:ac:c8:
5e:0c:89:49:d6:59:9e:48:32:05:fb:55:44:c9:33:7c:4c:ab:
7a:4d:42:ca:bc:b3:f6:b8:d9:30:fb:f3:0f:be:08:ef:3e:e7:
70:b9:3c:61:dd:dc:38:f1:f5:a3:0a:f1:ce:56:31:04:fe:3f:
3c:7b:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org