Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
File: 3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: y9DJ4Hn6jWoEo62L+BBWA+9bD1owl/TFfqgeQR70uOY=
Subject key identifier: F3:94:A1:6F:B5:6B:3C:CE:33:CE:DC:DD:48:4E:9C:01:29:00:A5:C2
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 66E08ED13255F24F617E00F17453E670D6AFE70B
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 51167
IP address blocks: 185.202.238.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e0:8e:d1:32:55:f2:4f:61:7e:00:f1:74:53:e6:70:d6:af:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=F394A16FB56B3CCE33CEDCDD484E9C012900A5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:60:84:00:f3:38:9e:04:cd:ee:88:bb:9a:
a3:ec:27:56:da:e4:86:70:15:77:5c:24:8a:b5:ad:
79:d4:d9:40:bb:92:82:08:83:70:05:99:02:8b:e9:
1c:76:47:c6:0d:7a:9c:c1:12:2f:14:20:bf:e4:e9:
4b:01:1e:1b:3b:48:0c:86:6c:99:34:be:49:e5:f0:
9e:fd:bc:2e:70:f0:57:bf:05:4d:cc:cb:ba:95:2b:
8e:3f:9a:2c:10:d3:fe:30:b7:97:21:8e:79:7f:b1:
5d:00:bf:84:db:9c:ca:34:29:1a:7e:c5:73:0a:35:
2a:6b:0a:a4:67:2d:aa:21:b3:2c:07:35:59:9f:4f:
29:64:13:09:d8:85:c4:d4:a3:ca:5e:92:4b:7f:58:
9b:7d:b4:2a:61:f3:73:e2:42:ca:05:b0:73:b1:90:
b6:e4:74:9e:ae:81:f2:79:9f:b3:25:81:74:f0:9e:
4d:b9:bf:e7:c0:09:fd:e8:ea:f1:16:63:e2:0c:82:
08:59:9f:53:9c:ba:19:93:c6:d8:62:89:22:97:18:
68:3e:fd:d4:34:6e:66:d6:a8:2c:27:41:a7:8e:88:
cb:d2:5a:ab:8b:a9:a2:71:df:4e:dd:f5:82:6c:62:
da:3d:ee:48:56:92:20:8a:bc:83:9a:0e:8b:37:ed:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:A1:6F:B5:6B:3C:CE:33:CE:DC:DD:48:4E:9C:01:29:00:A5:C2
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:2e:74:1c:91:21:5c:25:e2:f7:dc:c1:1b:fc:f5:ff:4d:47:
f4:5c:5c:12:fc:3e:d7:77:e6:bc:76:07:28:ae:94:ef:34:59:
a7:46:74:08:96:2e:d1:50:44:5d:64:ee:46:30:8b:31:9a:16:
a6:85:46:37:91:28:f3:f7:71:4b:b1:45:80:b2:df:ff:87:30:
75:dc:d6:cd:cc:64:cf:95:9d:86:81:6f:df:54:aa:25:45:88:
49:da:52:02:f2:fe:ef:aa:96:bd:94:2b:de:eb:48:3a:1d:0e:
60:66:82:0b:e7:a9:d2:4b:8a:cf:86:fd:ee:84:03:46:52:d4:
1a:4b:c4:a1:c1:6d:74:af:ee:44:93:26:32:c9:fa:81:14:21:
5c:ee:70:1f:2c:bd:40:1d:dc:2b:44:5b:0c:f0:76:1a:74:55:
a0:09:dd:94:41:53:17:db:92:5a:2c:43:16:04:94:58:42:6e:
e5:03:9f:55:8f:4f:fb:d5:dd:b7:2a:fe:93:2c:00:14:12:aa:
35:1a:35:89:73:8c:16:6a:46:53:5f:9f:fb:58:5e:fd:23:69:
52:db:5a:dd:fc:c0:e2:b5:df:76:3a:45:03:59:b7:90:b4:d3:
68:da:c7:3f:61:fb:09:e8:61:39:a0:43:c2:8e:32:d5:36:0b:
74:ff:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org