Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231362e37352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: hItYACFhOtF3Aujl1LSSC10MS2LYRR833587Z/kv+f4=
Subject key identifier: 2F:6A:1A:A2:A0:9A:20:5C:B6:B4:FB:16:FD:25:24:CF:55:71:64:DA
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 47F3BF07E214639BFE88D32817CF0E88A8955925
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 51167
IP address blocks: 185.216.75.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f3:bf:07:e2:14:63:9b:fe:88:d3:28:17:cf:0e:88:a8:95:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=2F6A1AA2A09A205CB6B4FB16FD2524CF557164DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:7c:ad:69:46:85:da:32:26:c7:eb:df:63:
96:4e:e1:ad:bb:71:93:c2:fe:a3:aa:ef:12:06:b9:
42:5d:2e:26:7f:4c:07:f8:a3:cc:5a:6c:9d:47:e1:
3d:f7:98:44:ea:0c:52:76:d3:7b:08:a6:7f:c6:e7:
d6:b9:f2:1c:e9:fc:19:63:fb:7c:62:52:a5:23:1a:
fb:4b:64:87:64:4d:a0:86:37:35:ae:49:49:d6:eb:
76:42:1b:5a:c6:58:ef:9a:00:d9:1c:a8:cb:87:89:
d1:fa:a2:f4:68:6a:68:01:a8:55:96:91:80:df:75:
bd:b7:4a:8f:55:bf:ea:7f:cd:2b:29:e1:78:f9:27:
85:e2:64:e1:0e:ef:8f:59:65:50:b6:90:c3:dc:ba:
87:08:22:87:b7:ed:e2:a7:13:c3:68:35:bd:a0:fc:
82:d7:fa:39:e2:35:95:8f:3f:76:10:7e:94:f8:f0:
c1:e9:36:cc:39:96:73:20:2a:4e:86:1b:54:f5:90:
1e:f6:c3:e0:d5:76:b6:c3:08:ce:f5:c4:aa:95:b2:
96:02:c4:f2:eb:e4:ec:8a:64:eb:9f:ce:7c:92:ad:
9d:35:cf:56:b9:03:52:be:b3:a1:2b:5f:29:74:b8:
29:15:a1:38:5b:b3:be:a2:fd:49:a1:bf:dc:53:bf:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:1A:A2:A0:9A:20:5C:B6:B4:FB:16:FD:25:24:CF:55:71:64:DA
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:43:c7:74:28:13:d4:ca:50:ff:8f:16:3e:e8:6f:31:5c:f8:
e9:d9:3e:a8:3c:80:cd:7a:53:ad:0a:d9:fe:7f:e8:a9:99:73:
e1:a5:0b:c9:bf:92:30:7a:e6:95:ec:57:93:da:e7:ec:89:7d:
aa:fe:ff:c6:4d:72:b7:12:6f:0f:20:7c:94:4d:5f:30:10:c3:
72:b6:04:2b:58:61:45:ff:a9:69:54:ae:f5:46:7d:5d:36:a5:
c7:f8:8a:a0:ab:7f:02:1e:b5:8b:99:16:22:0f:0a:07:7e:5e:
a4:73:b1:7f:71:b7:42:17:3a:75:11:2b:3a:de:4e:25:19:26:
14:ab:0d:e7:48:6e:6f:15:b1:30:00:2a:6e:cd:a7:34:fb:31:
13:fd:b2:e0:9a:f4:76:87:06:2e:6d:30:65:89:a4:f3:24:3c:
cb:95:63:77:c6:8d:f0:74:fa:1f:c0:f7:82:f1:7a:f4:d9:28:
62:f6:8a:d3:61:9d:d0:2c:72:b1:55:c6:6d:71:1f:50:b9:42:
b3:02:f0:fd:38:3e:1e:dc:c3:3c:e4:5f:f3:f4:15:ef:14:20:
00:e6:d2:69:23:8f:b2:9f:3d:35:73:9a:69:51:74:75:52:b2:
b0:fd:6e:04:51:aa:a3:89:f8:7b:dd:97:5c:4f:d8:fe:8b:06:
f3:e1:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org