Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
File: 3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: K10Bu3RKgPA2jPguiEOeawrRCKktYtp6XqpKSAzrKvI=
Subject key identifier: E3:5F:B7:84:42:A7:3F:53:8D:6B:D5:5B:08:BE:9F:72:C2:9D:E8:B5
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6FE3A381448E45A3285C4F1E0EA70CB57EF726FF
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:20 +0000
ROA not before: Mon 27 Mar 2023 08:22:20 +0000
ROA not after: Mon 25 Mar 2024 08:27:20 +0000
asID: 51167
IP address blocks: 185.202.236.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e3:a3:81:44:8e:45:a3:28:5c:4f:1e:0e:a7:0c:b5:7e:f7:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:20 2023 GMT
Not After : Mar 25 08:27:20 2024 GMT
Subject: CN=E35FB78442A73F538D6BD55B08BE9F72C29DE8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:d8:ab:b6:d0:47:cd:16:35:c0:af:87:9c:
11:52:f8:7e:03:0e:a8:ba:cf:dc:03:66:03:bd:6c:
bb:7c:4d:67:d5:21:21:2f:65:74:12:9c:81:b0:dc:
30:a4:ed:d0:e0:1a:3b:02:6e:df:49:21:62:2e:02:
5c:aa:1c:b4:02:0d:60:a9:30:a6:ce:ac:19:14:98:
fb:3a:04:78:05:51:2c:3e:7b:ce:5b:03:27:3c:fb:
3c:44:a3:50:c1:de:4d:e5:de:54:16:da:9b:60:8d:
07:97:d5:7e:cc:bf:61:59:c2:ec:6e:33:fe:4c:4b:
15:6e:7b:cf:a1:c0:bf:f9:c0:fd:be:6b:38:a4:11:
02:b7:3d:17:b0:29:9a:e6:a1:f6:b5:36:df:5e:47:
22:15:7e:b6:9c:51:ea:11:8b:c1:47:21:59:00:17:
28:76:e0:52:27:df:66:0e:60:b0:c4:9e:93:d4:f0:
e0:0a:e4:e6:d4:ac:3c:a3:bd:d9:cf:cc:4d:cf:4e:
d7:6b:a4:11:c7:2e:98:80:76:c8:d7:4b:48:a3:af:
e5:d1:c2:78:3d:38:b6:7d:c9:e3:08:f6:4b:67:82:
a8:f7:48:f1:ee:c8:02:aa:4b:46:3f:b4:61:e8:b1:
d5:75:99:16:b3:eb:f8:67:0b:08:0f:c7:84:e5:b1:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:B7:84:42:A7:3F:53:8D:6B:D5:5B:08:BE:9F:72:C2:9D:E8:B5
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:08:6f:c1:47:d0:22:db:d4:4b:8d:03:e2:15:34:74:e1:
03:2a:ff:fd:24:97:6a:f2:48:49:64:e1:7f:07:dc:7c:39:a0:
21:94:a5:18:42:13:a4:63:67:00:a4:50:cf:05:01:b3:d2:11:
f3:01:89:a7:8c:87:08:d3:5b:b7:2f:ff:03:fd:e8:55:45:7f:
60:94:ee:57:00:10:19:65:da:52:f1:85:f9:b0:6e:4d:f7:63:
40:6e:1b:3a:7f:03:57:d1:5c:4b:37:b2:08:34:37:2a:11:c6:
52:d1:70:89:7c:1d:94:99:f4:15:6f:92:52:2d:5c:e6:32:f0:
c5:d7:17:95:1b:99:52:5d:62:76:46:c8:e2:7a:2c:0b:41:49:
5c:64:0f:cb:aa:66:7e:c4:e3:a5:71:88:37:c0:d4:d0:37:5d:
7d:7a:3e:3a:6f:a3:3d:85:60:24:0d:8e:9a:ef:0d:be:20:aa:
58:6c:9c:63:ab:3b:28:f7:e6:65:28:0a:fe:0f:55:82:8e:ac:
e1:25:28:93:ec:94:90:af:3d:cc:a2:72:bf:b6:c8:35:36:0c:
6c:2d:74:c3:1f:18:db:af:07:a8:78:91:41:ed:54:bb:36:03:
4b:ec:c8:e9:92:28:aa:09:52:2f:6c:4a:ad:d3:0b:ab:63:67:
c3:e9:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org