Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier: 72ghh1SIFcHmY7JB/SIjlLjprEs+LGwR9M6Glg5TXus=
Subject key identifier: AE:9C:0C:30:B2:63:5F:1A:8B:C6:E7:C1:C8:38:60:EE:3D:63:2B:09
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 191010F676CF308DFA59B85E6A5DF2431C6DAC78
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 213122
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:10:10:f6:76:cf:30:8d:fa:59:b8:5e:6a:5d:f2:43:1c:6d:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=AE9C0C30B2635F1A8BC6E7C1C83860EE3D632B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:60:a3:bd:f9:60:d9:0f:a9:b6:ea:fd:29:
ef:73:da:04:68:43:1c:eb:c3:a9:a6:36:17:d5:a6:
b7:c8:b8:53:ac:27:a3:ff:ae:57:3c:cf:0a:10:3d:
f5:35:35:ba:d7:ff:c5:cd:27:6d:60:aa:c1:35:af:
89:8b:76:00:be:32:89:24:8d:f0:59:ec:21:b6:2d:
d7:a6:53:23:93:eb:e0:05:52:6c:c6:6f:dd:2b:c6:
ff:3b:6c:41:7e:1d:8e:50:86:af:56:2c:a5:59:82:
57:97:b1:ae:d8:1d:6f:67:eb:ab:22:86:d7:e1:fa:
82:fe:46:66:46:3e:ca:b0:81:ee:8f:80:5e:9f:a6:
f8:a0:fa:2c:2b:7b:66:76:e9:ca:1e:a5:d2:68:31:
d7:a9:a9:a0:71:a7:38:f7:66:97:3c:ed:ae:46:3d:
cc:67:ca:da:d1:bf:97:1f:22:f6:90:2c:03:ee:f9:
64:26:b2:47:13:96:69:5b:37:90:ca:4a:53:53:ad:
df:6e:bf:73:76:64:bf:8b:16:02:10:2f:03:30:28:
fa:87:72:84:e1:bb:85:ed:e5:c4:f1:70:ec:74:fe:
2a:f5:44:cf:f6:97:9a:eb:73:1e:b7:7f:7d:b6:34:
93:d7:31:ce:e4:ce:6e:c6:9c:a9:64:8f:09:0e:77:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:0C:30:B2:63:5F:1A:8B:C6:E7:C1:C8:38:60:EE:3D:63:2B:09
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:af:dd:4e:4d:04:0b:33:91:fb:8f:e3:95:69:8b:1e:f0:8b:
ff:4f:d3:fc:9f:f7:04:0f:4d:3b:de:1f:fb:97:d1:3c:57:9e:
34:e7:05:6b:99:f9:33:1d:4d:a5:47:e5:5b:d1:8b:8d:03:f1:
bd:c2:d8:d5:ae:da:16:4d:80:25:06:ae:5a:e7:5f:ff:cf:3f:
04:e3:3d:07:d1:e5:b2:d8:8d:61:c0:70:1b:dd:f3:f8:59:bd:
df:76:38:e9:01:f4:4f:c2:04:75:02:b8:50:a0:f3:49:90:2e:
4c:b3:0b:7d:fc:86:e6:64:25:ae:ec:b1:29:0a:76:30:89:8a:
26:2e:e1:f6:63:29:d9:5b:ec:29:bc:27:f2:75:4c:98:46:69:
a2:e7:53:f5:3c:38:a5:27:45:5c:c8:e4:61:68:0f:42:65:2d:
d9:0b:19:39:ae:c8:27:9d:ed:5d:31:a3:05:3c:b2:72:02:36:
5e:20:89:74:63:2a:6c:d7:1b:66:17:d7:e1:58:42:2c:4c:63:
1d:4b:3e:79:81:57:c7:af:5a:1c:21:cd:6b:d1:68:54:0f:d3:
c5:72:c1:49:f5:32:b0:72:7e:71:73:a8:3d:48:86:2d:7c:ac:
70:2e:ce:ba:b3:1f:58:62:d7:b2:99:46:2e:71:f1:9a:cc:1a:
39:ba:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org