Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
File: 3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: NMfnRtuWlgHMqjT9wevAkbl9RyiC7H8LEXy3lzMgoiA=
Subject key identifier: 63:DA:D3:D9:21:46:33:CA:C3:A3:B1:86:C7:BA:EF:BE:58:85:90:99
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 7E79FE762710951F8EF4DE455D8047AF357BDD2E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 47583
IP address blocks: 185.214.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:79:fe:76:27:10:95:1f:8e:f4:de:45:5d:80:47:af:35:7b:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=63DAD3D9214633CAC3A3B186C7BAEFBE58859099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:26:3f:e7:00:89:4d:94:10:81:be:0f:03:
53:2c:30:10:91:de:22:53:98:99:16:10:78:77:60:
cf:ad:53:dc:8e:17:e1:0b:29:7a:f9:dd:41:0a:9d:
14:c4:54:fd:f7:e7:77:22:7a:ea:3c:d6:0c:65:f7:
2b:84:88:8d:98:ba:e2:b7:10:e4:bb:ee:05:9c:69:
fc:a2:6c:8e:97:f5:13:02:dc:90:77:a1:8f:ae:1f:
e4:99:f3:94:32:08:95:88:c7:c0:43:fa:ed:b0:5b:
08:c8:f7:91:37:7c:80:43:1b:96:ce:ee:79:b5:a9:
86:16:3a:38:3d:de:7e:e7:b6:fb:39:97:01:45:08:
e0:da:09:54:ac:3d:1b:68:26:58:bb:9e:e2:02:c4:
60:4d:a8:0b:dd:66:b3:9a:82:90:e0:0b:c0:ad:c0:
9a:8e:48:d9:18:ce:0e:8a:f2:c5:f4:3d:be:5f:a2:
1f:e8:a1:57:66:3a:b8:30:fb:23:d2:9d:17:64:38:
ff:30:24:d4:ca:ca:0d:85:74:b4:13:78:90:03:7b:
2a:33:17:17:ea:b0:0c:6c:a9:6e:71:67:35:84:7e:
b5:83:37:a7:f2:0e:62:79:56:cf:d5:32:5a:ea:bb:
98:87:6c:b5:90:26:e8:71:c3:2c:ee:95:09:39:5c:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DA:D3:D9:21:46:33:CA:C3:A3:B1:86:C7:BA:EF:BE:58:85:90:99
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.132.0/23
Signature Algorithm: sha256WithRSAEncryption
97:1f:22:cb:ad:85:57:dc:d3:0d:46:8c:27:1d:ac:ed:b7:64:
ec:69:cb:74:28:a1:79:05:e2:36:cd:89:8a:5e:e7:bf:3d:51:
21:d4:89:2d:43:8a:24:6c:ec:b2:43:e6:95:a0:9c:0d:de:1d:
8f:a5:99:d2:10:be:f8:3b:32:e6:7c:c9:7e:c7:cd:d5:47:94:
f5:29:90:ba:fc:90:c9:13:33:23:be:a2:4a:94:53:b1:33:29:
c4:31:31:14:0c:1c:5d:1c:5d:01:28:09:74:74:bf:da:24:61:
a0:9e:f0:e9:ae:63:92:ec:e1:3d:43:3b:1d:70:03:be:05:5b:
5e:60:ef:1a:ad:36:e9:48:b9:44:f9:2b:7e:56:0b:97:32:ac:
d0:70:92:8a:50:a9:0b:f3:9a:c7:70:6f:5f:8c:f7:55:a6:3b:
73:4e:53:77:2c:6a:45:ea:49:26:45:f0:86:9e:57:46:12:28:
ff:43:0f:2f:ec:80:20:f4:28:8d:44:21:20:e8:b1:8a:9f:ce:
99:01:c2:67:ea:4b:6e:16:13:db:c3:c5:05:ab:db:1d:f0:f4:
55:12:e0:9c:9f:4f:c7:9b:af:79:34:c3:68:fe:f5:98:b0:eb:
7e:cf:37:23:a2:cb:db:9f:01:d0:bc:62:3c:e3:fa:ef:23:b1:
ee:fb:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org