Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: osZrsGPFoheaE9Ee/LcmKhs3adLDgQ2A/qRqIt7CUE0=
Subject key identifier: 40:D6:6D:DB:CC:C8:23:FA:52:43:76:84:69:0F:98:7F:25:09:3B:82
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 56018C80E228DEF8E232D5F2C15200B8D879FBBC
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 147049
IP address blocks: 185.213.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:01:8c:80:e2:28:de:f8:e2:32:d5:f2:c1:52:00:b8:d8:79:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=40D66DDBCCC823FA52437684690F987F25093B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:47:fc:4f:a1:68:d8:b2:a9:03:23:c9:6c:
0c:b0:58:12:be:12:dd:79:48:42:7a:ff:43:86:7e:
78:c3:35:2b:74:b7:c4:ae:60:6b:3d:73:95:12:17:
e3:af:8d:a6:ae:20:47:3f:a0:01:7f:ce:b7:6f:24:
8d:ec:12:6f:6e:4b:a2:b7:a3:1a:21:ad:1f:76:8b:
42:0c:0e:b2:c8:7c:ed:f8:62:de:c2:0a:09:ad:4d:
95:2e:33:24:64:38:69:5d:50:1e:bc:c5:ef:31:51:
79:0c:78:79:1e:13:ce:42:eb:04:d9:9b:fe:9c:e2:
40:f6:0a:ea:76:9c:fe:fb:d3:bb:11:6a:e1:1e:ca:
bf:9c:0f:a1:e5:d4:01:08:da:b9:e8:e6:3c:5c:ae:
d1:ef:01:4a:7f:2b:45:48:fb:03:82:2b:4d:98:e2:
23:c7:0c:25:4d:ba:bc:8d:a6:a5:a5:37:9e:f2:46:
6e:44:ee:20:64:2b:a7:3a:2f:f0:01:79:7e:ae:3a:
0a:03:18:c1:a7:be:66:14:1c:9e:2e:96:b5:ab:84:
ae:58:21:8e:56:ac:a8:06:ca:e3:46:88:bd:1d:ba:
df:dd:dc:c0:d6:8b:db:58:dd:30:23:00:6d:14:ae:
97:90:56:ad:eb:7b:9c:88:71:c6:98:9c:54:90:4f:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:6D:DB:CC:C8:23:FA:52:43:76:84:69:0F:98:7F:25:09:3B:82
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.82.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c7:13:76:7d:3c:25:c3:ac:b5:8d:29:9d:92:7e:2a:85:b7:
1f:63:5d:00:d6:5c:91:98:c7:63:a9:ca:72:5b:a9:59:09:c8:
84:52:56:cb:91:44:4b:2e:0d:39:4f:21:8b:95:4e:b3:9d:6d:
1c:77:0f:54:d1:19:fd:d8:51:f5:92:2e:c0:33:e8:ab:4f:c6:
cf:33:f9:47:8f:fb:1e:ad:95:18:de:ff:a8:10:a6:90:5c:2c:
2e:7a:22:fb:04:d2:f0:b5:c0:16:2a:04:c5:c2:30:50:87:24:
49:a2:dd:c5:30:c4:ca:e0:57:bd:07:cf:1d:70:74:97:b3:d8:
9c:6b:86:56:0a:a7:7c:3d:ae:3e:ca:19:2e:1c:81:8a:4c:fc:
4a:bf:f4:39:b3:19:b5:32:52:34:c2:95:40:6e:15:8f:c7:ef:
6d:61:f5:99:0a:99:9e:62:22:cb:d4:5c:83:1f:be:3f:53:b2:
2c:4a:f7:a1:bf:8f:e3:d5:10:54:5c:29:e1:6e:57:e1:54:43:
85:8c:32:38:69:9c:ce:77:ea:d8:fd:ea:2d:66:dc:05:fb:20:
dd:2f:c4:94:30:b6:0c:e7:86:a6:f0:3f:91:77:a4:8c:b3:52:
15:ab:7c:be:22:1e:d0:df:52:32:67:4a:fb:0a:54:28:3f:f8:
02:3e:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org