Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
File: 3138352e3231312e372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: LXOJFxirtH0CkpgW92e2oLhpEi3rYyvNBche0z3Gxds=
Subject key identifier: A1:DD:EB:BA:4F:7D:E2:E6:BF:4A:00:C5:41:A3:6C:39:13:8A:D8:59
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 4570AAAACF61BE7E4879D5E2116C7FF2B3D6714C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:24 +0000
ROA not before: Mon 27 Mar 2023 08:22:24 +0000
ROA not after: Mon 25 Mar 2024 08:27:24 +0000
asID: 47583
IP address blocks: 185.211.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:70:aa:aa:cf:61:be:7e:48:79:d5:e2:11:6c:7f:f2:b3:d6:71:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:24 2023 GMT
Not After : Mar 25 08:27:24 2024 GMT
Subject: CN=A1DDEBBA4F7DE2E6BF4A00C541A36C39138AD859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:99:06:90:9c:78:9b:39:1a:03:a6:94:dd:
aa:6b:c3:af:1d:05:02:01:b4:b0:de:63:d6:98:7a:
c0:97:af:2a:59:66:8d:11:7a:61:da:94:ca:96:ff:
92:92:60:6b:4b:06:64:44:5c:44:c7:cf:42:d7:70:
6b:3c:ed:f1:50:24:4d:e9:01:a3:db:96:7c:e4:5d:
36:8c:01:82:47:3f:d4:94:4a:47:8b:8f:82:f4:ed:
2c:03:08:56:e1:e5:6a:41:f1:f3:32:61:c0:6a:b3:
bc:b0:5c:13:c8:e4:61:41:b8:aa:e3:e7:99:b4:65:
43:32:03:0b:fd:e3:f2:87:cd:72:48:13:06:de:73:
a3:3a:79:aa:86:01:89:11:d1:c9:da:97:84:66:d9:
10:8d:2e:d7:1e:e9:b1:09:b9:29:ad:f7:c5:e5:e2:
e2:8b:c2:50:63:8f:76:1a:72:66:31:b3:68:42:de:
9d:70:2b:ab:6a:98:f1:cc:b9:55:40:60:a0:47:07:
b0:a9:92:3b:7b:29:73:e8:a4:d2:cf:ba:71:7a:84:
26:d8:ee:96:25:92:e2:bf:91:61:c6:fe:eb:2b:bd:
5e:f3:7d:94:1d:a1:34:04:53:1b:53:f5:cb:9a:9c:
50:33:18:60:2e:9b:6e:d0:62:65:2e:71:da:4e:f9:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:EB:BA:4F:7D:E2:E6:BF:4A:00:C5:41:A3:6C:39:13:8A:D8:59
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d7:af:ae:a4:29:ab:83:b8:9f:0a:f8:1d:52:c7:97:dc:28:
3c:30:92:14:53:00:21:e9:a9:75:81:5e:49:6d:5f:ea:83:71:
61:1a:47:c8:7b:a1:e6:2e:5b:40:7b:bf:00:d5:b8:0a:ac:ca:
0e:04:51:cb:b9:f4:71:dd:cd:ea:08:9c:d8:99:47:3b:26:95:
87:fb:f5:0e:17:4f:77:10:37:1c:9d:92:f1:d2:02:60:95:42:
4d:df:19:ab:e1:49:f7:12:76:a7:20:80:71:1e:05:44:49:6a:
40:97:f9:54:df:f2:cd:88:4e:90:af:0a:84:40:72:09:f6:a3:
d8:e1:44:3c:b2:b7:d1:3d:4f:09:57:7d:ad:f0:bb:83:12:22:
bf:ce:a4:22:43:c6:c3:6c:36:67:af:8d:87:83:a3:13:0f:6a:
f2:1c:e5:e1:5b:71:5d:e8:8e:81:ff:52:10:67:63:af:68:52:
d9:53:da:06:87:44:85:80:71:2a:57:81:00:96:d9:18:1a:7b:
6c:fa:43:7c:79:a5:ce:3e:e8:2a:a3:15:47:56:1a:b1:87:6c:
0d:4d:3b:67:5c:78:fc:39:e1:e7:d3:59:83:9a:92:a0:e8:04:
6e:55:18:d2:3d:97:eb:78:a4:ce:7b:f3:47:a1:ed:c0:e8:0e:
ac:51:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org