Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
File: 3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: q/uNWeIJt+JAePctGk+7nWPhPN0wQBeZCmP3fwIQkKc=
Subject key identifier: 28:5A:42:CC:45:3D:C2:51:74:2E:5A:C6:D3:DA:67:82:CB:A9:48:DA
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 1B249D2C60CB22C86C2E861B998113CEB82FC3EB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 136787
IP address blocks: 185.207.249.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:24:9d:2c:60:cb:22:c8:6c:2e:86:1b:99:81:13:ce:b8:2f:c3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=285A42CC453DC251742E5AC6D3DA6782CBA948DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:30:25:13:06:86:f5:8c:d1:e1:9f:ae:ea:
23:61:6f:14:29:01:33:94:e0:40:bd:28:0f:e9:0d:
66:ed:be:02:c4:3a:c6:76:93:4b:f4:2e:d3:63:83:
79:89:b5:04:91:b5:51:df:fd:97:bb:20:9c:11:21:
e5:c0:12:f8:86:21:6f:55:14:82:58:22:c0:14:b6:
c5:5a:32:6e:b2:b0:0b:f4:46:2d:4f:ce:78:c1:39:
cc:4c:83:84:e8:d5:20:4d:1e:81:df:33:a6:e2:15:
6c:a6:d9:f4:b9:46:0d:f0:ee:b3:21:c7:60:c1:a8:
c5:89:3a:7f:36:c7:08:5c:84:ac:93:ee:2f:bb:56:
58:be:b2:ba:01:61:98:e6:b5:1e:35:a7:d8:0d:b8:
d0:7c:50:4c:c2:6c:bb:2d:57:d7:3b:ee:56:ad:dd:
93:bf:ca:a7:32:7c:8f:58:03:2c:4d:35:78:16:b9:
b0:54:99:42:d1:6b:17:56:6d:1f:7f:0e:63:87:dd:
96:16:f2:57:9d:85:2d:6c:0e:a3:0e:37:3a:76:79:
2e:aa:02:1d:4f:36:63:6a:6f:84:96:e0:3f:aa:73:
a4:2f:88:cf:33:af:89:30:9d:b0:f2:c1:40:84:0e:
cf:cf:67:8a:18:1d:53:18:fd:be:1b:cd:4c:3c:0a:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:42:CC:45:3D:C2:51:74:2E:5A:C6:D3:DA:67:82:CB:A9:48:DA
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2e:49:72:11:72:65:87:e9:90:2b:5c:c0:b0:89:32:de:53:
3b:1f:67:2c:a6:14:70:63:73:fc:2b:3d:d6:3b:6a:9b:34:40:
a4:5b:2b:61:7c:70:a2:f7:98:0b:d4:28:0d:13:da:1b:e0:b4:
ff:00:8c:aa:3f:61:4a:7c:68:26:ac:3f:c9:49:10:bb:12:df:
ca:fe:2f:08:13:fb:68:c4:bf:0b:7d:3e:41:75:42:0b:10:de:
0f:30:c6:49:32:df:22:0d:81:c5:87:c7:d7:73:ff:31:6e:3b:
78:45:1f:4f:85:79:9e:40:d9:8d:64:42:94:ff:3a:92:ea:ba:
63:3b:81:3f:49:6a:35:36:35:3e:35:61:12:08:89:c4:65:5c:
da:81:be:59:a3:a1:e4:81:49:21:64:78:2f:77:c2:c8:b9:e1:
91:af:c9:6e:9a:a5:44:19:65:59:c8:bc:67:9e:fc:3d:9d:62:
e5:ef:af:16:29:94:d3:6d:10:e1:87:ad:45:7e:05:fb:c4:e4:
8b:7e:04:2d:5e:d3:90:7c:45:55:42:10:dc:31:13:aa:af:16:
8a:39:7b:3c:00:32:a0:95:16:d3:ed:99:86:d6:3a:3f:78:c6:
ba:28:bc:da:38:60:7e:5f:db:1d:ad:70:de:0a:9c:82:00:6d:
51:41:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:40 2025 by rpki-client