Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: OaRw+9zFLGIG1tRLzzFEeKC1j9bQVk7TQTGacvVXXzw=
Subject key identifier: B1:E4:6C:FF:E5:43:94:BE:13:80:87:3B:B3:1B:1C:B9:D5:5B:5D:2F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 25F61BF805468DA5512BE97909332A9B342DFE82
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 51167
IP address blocks: 185.217.125.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f6:1b:f8:05:46:8d:a5:51:2b:e9:79:09:33:2a:9b:34:2d:fe:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=B1E46CFFE54394BE1380873BB31B1CB9D55B5D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:48:07:60:48:3d:5d:26:e5:b5:13:04:1a:
39:6d:7a:ad:ac:74:98:fd:8e:08:18:0b:ac:ef:eb:
b0:95:32:59:42:54:44:06:33:4c:67:0e:c7:64:31:
07:4c:42:2d:8c:03:48:f3:a3:7d:e8:c5:ac:41:2c:
9b:70:25:eb:39:ec:1c:6c:25:6a:68:6f:4e:22:90:
6d:51:b3:11:55:14:0b:08:65:46:1c:dc:89:4f:c9:
1c:15:1a:56:a6:a5:1c:f4:6d:b9:69:75:81:b7:64:
bf:4d:a0:e9:fa:50:99:13:5c:58:dc:5e:e4:b9:89:
a5:27:b2:39:35:95:3d:dd:38:4b:bd:e6:03:22:ee:
c9:52:94:c6:14:49:cd:76:52:17:da:47:ff:1f:71:
7c:ee:2f:ab:d4:67:f8:f4:67:97:5d:da:de:34:b1:
59:10:0e:a9:01:56:ce:76:39:5c:22:c3:bf:95:65:
f1:5d:83:c4:84:86:35:47:12:3d:81:02:a3:99:5e:
37:a2:67:fd:91:8a:72:9a:a7:45:d5:ff:ef:03:85:
66:36:d8:61:0d:cf:e9:5f:61:26:28:0d:04:2c:a2:
f5:d8:2f:90:53:d5:e6:17:fb:f4:8b:33:c3:69:e1:
7d:47:62:43:89:f3:1f:90:fb:8e:98:01:4d:86:d5:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:6C:FF:E5:43:94:BE:13:80:87:3B:B3:1B:1C:B9:D5:5B:5D:2F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.125.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a3:5c:23:e9:21:8c:e6:3b:34:3a:53:51:e6:9f:67:18:92:
4e:20:0c:2c:d6:55:b2:85:17:1f:6b:35:d7:05:87:c4:0f:8f:
88:98:48:07:fb:59:87:3c:c3:25:ba:00:32:e6:38:7c:5f:c0:
8c:78:22:48:79:73:72:f1:17:b1:8b:dc:2f:b1:fb:4b:da:81:
d3:e8:69:94:82:60:86:2b:fe:b5:dc:18:9d:ce:16:93:7d:ca:
66:16:78:54:c2:42:d8:62:8c:27:b5:ad:ed:34:03:3a:15:3e:
7c:63:d5:79:5d:bb:1a:66:df:14:38:65:9c:b5:ba:82:d2:01:
ad:4c:0c:e8:a8:b1:68:64:84:96:4e:c7:df:3f:cf:db:0e:d8:
b9:11:52:20:0f:7c:1c:8a:a5:7d:98:77:93:9e:8e:a8:10:6c:
54:e2:7a:90:fe:76:95:99:f5:6c:50:1d:33:f9:a3:09:ce:ee:
33:22:d9:fb:77:5e:40:00:fe:b9:97:13:8d:9f:32:13:da:e6:
5b:d5:09:d5:dc:9b:d1:70:20:dd:a5:2f:bd:4c:9f:94:64:b6:
3a:3b:5a:30:c3:7c:dd:94:67:7b:cc:bb:dd:54:fb:ed:ea:f0:
c6:1f:ca:9e:d7:00:18:50:0b:ee:72:3d:ea:c9:95:39:05:ff:
f6:53:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org