Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
File: 3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: eVsvMsQyDukaU9cBXEuVZ2+0DqqTa/xTvIrxtHB5uKU=
Subject key identifier: 23:49:D2:41:D9:D5:2D:07:9A:79:81:92:2E:97:98:9E:83:1F:F0:6B
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2AA013AC554EAB4D80A7B0FF5E3D67535C7173D4
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:21 +0000
ROA not before: Mon 27 Mar 2023 08:22:21 +0000
ROA not after: Mon 25 Mar 2024 08:27:21 +0000
asID: 51167
IP address blocks: 185.207.250.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a0:13:ac:55:4e:ab:4d:80:a7:b0:ff:5e:3d:67:53:5c:71:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:21 2023 GMT
Not After : Mar 25 08:27:21 2024 GMT
Subject: CN=2349D241D9D52D079A7981922E97989E831FF06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:58:7f:59:b1:f9:5d:5a:de:13:04:89:df:
15:2c:a7:84:32:69:14:4c:4c:45:cc:1e:d0:bb:bb:
58:91:dd:8b:7d:fd:4d:a0:bf:c7:d5:94:9a:fb:4c:
d4:93:87:29:1f:0a:7b:73:8f:b9:3c:63:3d:40:4d:
af:0e:45:20:51:96:ae:1a:1c:db:d6:96:df:df:25:
95:3d:33:b6:c6:5f:46:03:33:27:31:c3:1f:a2:f8:
ce:a4:9d:d5:72:7c:23:76:2e:a4:58:ef:4a:45:b4:
72:a0:60:23:93:51:0a:cd:48:fa:c6:d1:84:c8:d0:
e2:ef:1b:36:84:df:4d:c2:29:e0:5d:57:ff:8d:12:
e1:26:76:8d:e5:61:f8:1d:71:bf:f9:08:b2:c6:06:
7a:99:3b:db:d3:32:08:67:da:ff:28:e1:73:64:37:
f8:a2:44:5f:cd:c6:dd:a5:84:29:2e:a9:7d:24:cf:
a5:be:c4:62:5e:22:f2:b0:ee:33:a7:97:66:b8:3f:
f8:5e:97:fe:b8:ff:e8:73:f8:0a:87:4e:88:33:69:
5b:3a:bb:cb:ca:fd:91:9b:21:60:36:57:88:19:e9:
96:3c:5f:62:91:9b:d5:b8:a2:66:24:00:9f:37:44:
69:53:a0:77:49:90:75:15:97:72:24:f8:d4:62:db:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:D2:41:D9:D5:2D:07:9A:79:81:92:2E:97:98:9E:83:1F:F0:6B
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:03:a2:4c:82:f8:2e:f0:11:22:46:aa:e3:92:c9:c5:c6:
74:a3:b4:26:4b:f0:96:bf:83:95:02:d5:dd:d3:28:3e:b5:25:
7d:13:d5:fb:0c:98:55:9d:bd:60:3e:1c:67:e5:80:17:83:00:
6d:03:29:6a:e2:10:93:8c:af:e3:57:0d:e0:7f:7d:d1:48:23:
0e:82:23:22:35:81:57:04:23:a1:f9:1d:ba:80:12:e5:ae:7d:
25:a5:71:d1:5c:f4:f8:f5:76:17:2f:1c:be:59:fd:5c:3f:1f:
6e:db:99:f0:76:ed:0a:0e:39:ad:18:c0:9c:33:e4:11:8f:f5:
d4:41:cb:2f:34:6c:82:1b:75:c1:ec:a6:39:0a:9c:d1:d8:14:
8b:63:60:7a:f9:1f:7f:3e:3d:91:89:91:9e:02:36:0b:6e:ef:
d3:cd:34:6b:b4:71:16:a3:1f:9d:68:b9:b1:ee:51:21:5c:19:
2a:d8:05:fa:8d:10:b3:8d:d3:63:8f:86:14:6f:27:a5:17:cc:
0e:c9:58:93:5d:39:c6:a4:40:f4:e9:fc:80:40:62:e2:a0:1d:
8a:5e:10:1b:a3:43:56:af:b3:bb:4f:ca:79:68:14:1f:ae:43:
e3:86:7b:1f:dc:e0:7c:41:ae:07:f5:f8:a1:ef:a9:1a:30:6c:
c4:49:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:16 2025 by rpki-client