Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa (raw, json)
Hash identifier: JgumQ5kk8y+pzCCZd6F+lAOlUNNMtGGNMjW/iBQhK0Y=
Subject key identifier: E0:8C:54:CC:9F:C2:EF:42:25:06:B8:6B:28:50:00:71:DA:FA:8E:1B
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 7975E6A34DC176555B75C10A79C3B6BC4013AF6A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 212520
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:75:e6:a3:4d:c1:76:55:5b:75:c1:0a:79:c3:b6:bc:40:13:af:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=E08C54CC9FC2EF422506B86B28500071DAFA8E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:f6:1f:14:b9:8f:7a:11:39:66:93:54:c8:
92:41:a7:bb:6d:d2:c6:b9:bf:53:b2:08:96:18:5e:
a2:d4:d1:af:46:57:f7:dd:6d:10:19:10:91:80:4d:
19:2f:d3:87:8d:82:d5:31:e8:44:59:11:1f:b2:28:
76:10:0b:8d:94:a6:89:a1:98:b6:21:57:ce:99:f9:
b7:cc:ac:3e:9d:79:eb:80:0d:7b:95:4e:ae:7c:70:
94:9f:ef:22:6a:87:37:80:c1:bb:bc:15:cd:dc:de:
e9:dd:7a:15:b8:51:33:a8:e4:41:18:64:96:9f:5a:
4e:53:a5:66:5f:89:23:aa:43:19:52:b1:b7:8a:5e:
83:07:86:28:1a:c6:02:2c:dd:45:cc:cf:6b:3b:f7:
d6:00:52:4f:42:73:25:03:4a:c0:65:32:9e:b4:ac:
a5:e0:d1:a1:2d:33:9f:97:81:9e:97:db:76:b1:c8:
b6:67:c2:22:77:1d:86:0b:df:05:a9:b4:60:f8:5c:
cb:74:78:3e:85:38:e1:63:38:54:6b:96:bc:a8:f8:
35:c9:5e:6f:4d:49:28:35:d1:69:a4:d1:62:58:9a:
92:c7:d9:ba:8d:e4:96:85:38:16:5a:ad:61:0f:08:
6f:44:0e:99:14:bc:6d:38:27:db:02:6a:a2:42:3a:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:54:CC:9F:C2:EF:42:25:06:B8:6B:28:50:00:71:DA:FA:8E:1B
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:36:52:c0:aa:43:b3:59:83:dc:a1:80:00:3f:df:c5:b7:38:
a9:4b:7b:17:15:ff:69:27:7d:ce:e1:e5:78:57:40:45:21:d9:
8d:b4:b7:26:57:c6:d3:24:2e:f7:24:95:fd:6b:d7:42:46:a5:
ed:31:0d:57:1d:fa:20:b4:e4:21:d4:d2:c7:99:5e:b8:72:9f:
9c:9f:f0:c5:74:2a:22:08:8c:8f:26:2f:a3:6d:9f:a4:7b:90:
d5:bc:ff:b4:a6:a0:bf:1b:4f:e7:1a:a7:5a:7d:5f:5f:99:4b:
ed:cd:e0:de:b8:06:3e:83:8b:a4:3a:ca:59:95:a0:91:a8:e7:
b7:85:43:e4:19:88:20:50:de:09:24:99:ee:f9:2a:de:a8:d7:
6b:89:28:ab:d9:a0:55:17:eb:4f:f9:d7:42:de:19:de:87:df:
fc:19:47:8a:70:d3:c3:4d:31:c5:9a:fd:16:83:48:05:b8:8f:
2a:fc:d9:3a:a3:9b:3b:52:1a:13:13:e8:88:19:22:49:e9:5a:
2e:60:31:66:aa:30:4d:46:fc:e9:8b:86:c3:52:b3:da:9f:cc:
01:2b:91:9e:ef:5a:70:0a:38:a8:01:02:8e:81:01:de:65:3e:
f6:47:1c:ab:a0:f9:71:41:98:1a:9c:14:ef:e2:99:7d:ed:68:
02:61:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org