Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
File: 3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: qMdAmU4s6PuU+2XYCnnPdY4T6Hx6hGvSSwoySJfQfDQ=
Subject key identifier: 10:03:B3:86:03:57:37:4D:F2:35:C1:1B:43:B7:4D:C2:73:F8:1F:59
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 09C0F23745CA35888016003B409A47E1A1B67FBE
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:17 +0000
ROA not before: Mon 27 Mar 2023 08:22:17 +0000
ROA not after: Mon 25 Mar 2024 08:27:17 +0000
asID: 51167
IP address blocks: 185.202.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c0:f2:37:45:ca:35:88:80:16:00:3b:40:9a:47:e1:a1:b6:7f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:17 2023 GMT
Not After : Mar 25 08:27:17 2024 GMT
Subject: CN=1003B3860357374DF235C11B43B74DC273F81F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:50:95:17:27:e9:59:3c:03:1e:01:c5:ba:
45:9e:42:0b:45:e8:6a:90:e0:d1:1b:2c:3f:a5:20:
92:42:35:3d:9a:c3:af:f7:67:ce:62:6f:ef:0c:c8:
3f:fb:19:e4:18:1b:9e:98:ef:c5:ab:64:70:78:77:
cf:a2:f9:5b:38:79:1b:fb:b0:d8:4f:2b:bd:8c:e6:
8a:09:7c:b6:23:8c:f1:9d:a5:81:58:90:3b:84:9b:
4a:7d:a4:66:fb:cd:15:7c:88:70:f9:60:cc:5c:df:
ac:45:bf:ee:2d:0d:2a:77:46:11:5d:33:3e:e0:fd:
a6:b7:4f:98:52:46:ec:06:e1:f7:ef:53:20:e3:5b:
8f:dc:56:e8:13:92:8a:1b:40:1d:a7:41:0e:60:c7:
6e:94:cc:7e:c4:d9:8a:be:85:f9:b1:26:19:1e:ff:
f8:96:0f:27:c6:05:b9:6d:a5:37:8d:8b:39:5a:78:
01:69:1b:52:c9:f6:9a:71:5c:ab:86:3b:d3:fb:bc:
0c:01:60:1d:9f:0c:41:9b:0b:2a:e3:66:49:72:38:
4d:2c:ef:9d:9b:aa:2a:b9:62:2c:e5:a9:9d:85:31:
2a:93:01:94:7c:b7:8a:21:33:41:8e:47:d4:a2:92:
b2:aa:26:8f:08:0b:2d:17:82:9e:60:72:bc:9f:4e:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:03:B3:86:03:57:37:4D:F2:35:C1:1B:43:B7:4D:C2:73:F8:1F:59
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:93:ae:66:2d:6c:1e:dd:9b:f3:c6:fa:ec:ed:52:2e:f2:53:
b8:9b:38:a3:60:47:a8:79:85:15:42:47:df:18:8e:ff:65:89:
f9:74:45:4d:b5:2d:c1:f5:3a:75:78:8e:8b:2c:fc:71:78:58:
44:ab:36:16:0a:e4:e9:42:82:93:25:99:c4:e2:c3:cf:60:48:
08:e2:35:fc:8c:f5:16:94:ae:8a:48:04:fd:93:05:7b:fe:81:
28:db:f5:a6:22:ce:ce:00:e2:fe:3f:46:88:cc:31:73:87:bd:
93:ec:9f:e9:98:d2:b8:60:ef:1e:91:dd:11:fa:80:0e:7e:4e:
f7:ec:eb:81:74:7a:ee:c3:1b:e9:24:ff:7d:17:7f:05:82:26:
6c:21:68:84:c2:2e:60:ff:ce:3b:85:f6:fd:f4:16:19:ca:5d:
d0:8d:b9:73:8b:67:93:ce:a8:6b:7b:d9:75:94:cd:7a:8f:f9:
a1:6e:cf:15:d2:11:20:87:67:98:fa:80:5f:31:1a:07:5b:11:
b2:43:5a:53:d1:2e:4b:cc:05:6f:ef:04:77:e3:3d:d5:41:d2:
ec:86:4a:f1:f3:0d:cd:d0:e3:8c:a2:95:78:ea:a0:dc:f3:8a:
07:82:10:44:b8:4d:f6:65:01:f2:39:bd:98:26:b5:78:3a:b4:
7a:6b:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org