Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
File: 3138352e3231332e38312e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3962X5vf52ja7AiV4m7cI6BpT+1LNwuQcYauhheC+Wc=
Subject key identifier: 05:4E:24:BF:CB:CB:72:20:9D:28:F0:A0:32:AB:1E:7E:15:82:1C:2F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 65DE9136BAD293707DCBF0014ADD5F640129A293
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:20 +0000
ROA not before: Mon 27 Mar 2023 08:22:20 +0000
ROA not after: Mon 25 Mar 2024 08:27:20 +0000
asID: 47583
IP address blocks: 185.213.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:de:91:36:ba:d2:93:70:7d:cb:f0:01:4a:dd:5f:64:01:29:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:20 2023 GMT
Not After : Mar 25 08:27:20 2024 GMT
Subject: CN=054E24BFCBCB72209D28F0A032AB1E7E15821C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:f7:ae:a2:d6:4a:06:b1:5a:e5:32:a9:6c:
af:92:f9:b1:19:8e:13:b3:28:e0:b1:7d:f2:26:c3:
4c:0f:d0:94:a8:e1:d3:7f:7e:2c:57:c8:71:d8:cd:
af:d1:70:09:65:e0:dc:6c:52:e3:33:15:09:f1:10:
7c:c1:97:a5:ae:35:19:e9:6b:5f:b1:bd:2d:2d:ff:
44:04:e2:d2:ab:1c:8d:2d:65:4d:3a:33:21:23:2c:
15:7f:b9:9f:78:f0:05:11:2d:e6:51:53:a9:1c:24:
c3:d8:bd:b8:10:82:51:98:2a:13:9c:ee:6a:f8:8c:
80:22:fb:cf:63:4a:c5:68:56:d0:eb:ac:4f:01:1f:
8a:4c:7e:60:b5:09:71:a3:77:39:a3:22:8d:f0:e7:
99:ab:44:ee:08:b1:7a:d0:c9:aa:61:0f:fb:ec:69:
5b:28:89:c7:86:dd:e2:bd:24:37:87:8f:a8:c8:79:
94:80:f1:8f:7d:1c:e4:6c:6a:17:c2:df:71:14:89:
72:cf:8b:56:55:d3:d7:80:9a:c8:e8:1f:42:e5:97:
77:cc:24:d0:ba:7b:7e:6d:78:82:72:96:9b:ff:83:
9b:e3:a4:03:3d:03:78:b9:0f:8d:f2:13:3c:5d:96:
f7:1b:bd:bb:5c:63:15:db:2e:9f:01:1e:fa:71:f1:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:24:BF:CB:CB:72:20:9D:28:F0:A0:32:AB:1E:7E:15:82:1C:2F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9a:c4:94:2f:21:00:21:f2:97:27:85:62:53:e6:64:24:ae:
aa:ec:e3:89:3e:78:70:05:64:15:56:8e:4b:8a:ee:2a:ec:26:
3f:71:f3:d5:11:06:2a:b5:f4:32:a4:f5:bd:c2:51:8a:fd:88:
39:68:88:be:ee:09:50:a8:b3:f3:c1:86:47:77:9f:18:b7:2a:
69:e7:74:78:d7:2c:25:93:3b:f3:cf:27:20:ce:12:70:e6:dd:
68:8c:40:78:2c:e5:f3:21:f5:6b:95:e9:b0:76:48:5c:0f:84:
e6:67:ac:59:c8:69:f8:59:f9:4d:a8:02:57:43:0e:20:6a:44:
c1:90:bf:be:1f:10:0a:1b:64:3f:b1:c1:d4:30:81:96:e2:9f:
ab:24:4b:0a:f8:95:36:73:a9:46:22:ff:6e:f0:db:5c:3d:3a:
d4:34:cb:7c:4a:c7:18:04:90:67:15:3d:39:39:8e:f0:84:a3:
f3:7f:cd:3d:22:f9:53:6b:8f:52:ff:bc:36:7a:74:c6:eb:58:
b8:2b:3c:37:b5:ad:c5:c3:06:8e:dd:2c:c3:47:36:3c:9a:bb:
7c:36:cb:0c:48:f9:08:e9:42:26:b7:51:98:b7:f7:49:65:1e:
fc:3a:3e:9a:fe:f6:92:08:86:2b:4d:c8:d4:70:19:f9:af:32:
25:ac:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:07 2025 by rpki-client