Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fEdMZZnoco+8PlyNPqv2C0E+kzGPlDXquSlWfHNtyU8=
Subject key identifier: 5A:B6:8E:0A:C1:D4:2D:F3:C5:70:3E:52:E7:BD:5B:D9:AE:22:DA:11
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 372BAB6AA334552A846CC9AE14B6BDBB25487088
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:26 +0000
ROA not before: Mon 27 Mar 2023 08:22:26 +0000
ROA not after: Mon 25 Mar 2024 08:27:26 +0000
asID: 136787
IP address blocks: 185.203.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2b:ab:6a:a3:34:55:2a:84:6c:c9:ae:14:b6:bd:bb:25:48:70:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:26 2023 GMT
Not After : Mar 25 08:27:26 2024 GMT
Subject: CN=5AB68E0AC1D42DF3C5703E52E7BD5BD9AE22DA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:99:df:d0:0d:89:0e:15:1e:a9:7d:44:b2:
56:ff:fd:45:95:c2:da:47:32:dd:ce:8e:67:43:28:
74:28:4d:65:df:00:f5:e2:04:48:d6:f6:36:f0:83:
85:d1:5d:56:27:32:63:3d:99:f9:41:f9:4d:2e:f8:
54:35:9b:e9:f1:32:e4:b1:39:ef:c2:44:c6:17:51:
c6:4a:cf:b3:e3:32:82:23:b0:df:4c:81:14:e3:34:
36:34:cc:fe:df:43:e9:89:89:57:16:73:0d:be:be:
72:49:be:a3:78:ba:a5:9f:1c:e1:1f:ce:f3:0c:da:
a8:13:52:72:16:ec:de:1d:1c:5a:5b:40:2a:f8:50:
20:d8:1a:f0:60:ad:53:1e:47:0b:0b:59:bb:2d:f9:
fe:63:6d:0f:02:3b:1f:76:11:5f:b1:18:e4:6f:46:
43:34:8e:db:ab:2d:2b:bb:56:b4:76:96:26:e8:12:
21:e2:24:b0:02:1c:9c:ef:2e:51:5b:60:aa:a0:4e:
f2:eb:4c:ac:a2:09:98:13:ea:89:8f:75:d8:52:e6:
0d:9c:b0:45:2c:d0:1b:09:80:42:ca:1b:2c:81:2d:
f9:c3:66:35:71:b9:10:29:12:2e:3c:ea:15:07:50:
6f:e1:3c:69:00:28:5a:d8:5a:59:4b:b9:e6:46:c0:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B6:8E:0A:C1:D4:2D:F3:C5:70:3E:52:E7:BD:5B:D9:AE:22:DA:11
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
86:41:c5:6f:09:c8:78:09:ee:66:30:72:36:c2:f4:ca:2f:7a:
b8:e7:37:fd:f5:cd:c0:4e:5a:a0:32:c3:f3:a8:91:3f:9e:64:
4c:aa:8e:7a:15:e3:a9:52:1b:1d:f2:f8:78:8a:a1:58:4c:bc:
e6:2c:e1:ca:37:cf:d5:aa:1b:a5:98:27:c2:ff:87:c8:f7:25:
9c:7a:34:e0:8b:6e:5c:2d:8b:ff:e3:55:6f:29:ec:06:10:9a:
40:20:e5:58:f4:be:b5:4e:72:16:5d:3a:87:f9:6a:8b:bc:3c:
b1:25:d8:36:22:2c:02:e0:0f:f1:b2:3e:63:ac:ee:e4:8c:f8:
47:37:68:8e:07:08:8a:b3:b8:2d:0d:00:3d:78:e6:03:a6:84:
08:92:8e:76:fe:17:84:d5:60:a2:9b:fb:9c:6b:67:04:37:e2:
c8:9b:de:f6:2e:01:49:15:06:87:ed:fe:f0:10:19:5c:07:8c:
8a:3e:1a:06:4d:70:12:41:45:53:dd:5e:5c:93:ea:9a:06:77:
d6:26:2c:89:44:83:31:ea:a2:b4:a8:92:07:cd:b8:28:87:c3:
dd:31:5a:1f:29:3f:15:6f:41:5e:55:75:bd:39:70:02:08:93:
be:b7:e9:4d:0f:d3:be:76:b7:cb:68:82:2b:75:27:dd:bf:56:
bb:e5:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org