Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
File: 3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: eAlS9qN2lwzh3ZArYCANliGwD9HRxmdHKo8L0rW+OlU=
Subject key identifier: D7:96:40:D1:67:98:6A:B7:F5:7F:8F:87:2C:F5:35:B5:1E:9E:11:8F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 1628C9BEA851E94081609784D5384E49C9F26DB2
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 51167
IP address blocks: 185.218.126.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:28:c9:be:a8:51:e9:40:81:60:97:84:d5:38:4e:49:c9:f2:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=D79640D167986AB7F57F8F872CF535B51E9E118F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:52:75:a2:ed:c9:90:91:35:e0:8c:e6:2e:07:
cd:cb:a6:f3:b0:20:4c:b5:ef:5b:88:b5:c6:9d:9c:
a7:7e:de:5d:de:35:87:c1:35:99:5c:14:43:03:ca:
ce:e4:bd:00:8f:4a:dc:a3:ae:fb:b6:31:de:0e:f0:
a8:8b:de:ce:ef:d3:f2:39:95:fc:0d:3d:0d:19:9b:
31:26:31:23:66:41:9b:4f:d9:49:64:8c:48:92:de:
e7:a2:67:b4:34:3b:5b:92:bc:d6:ed:2e:51:53:3a:
e8:40:80:65:b6:93:a0:c2:c0:72:02:18:d6:ca:87:
f0:89:d4:17:2f:4b:75:c3:e0:2e:09:1b:4c:df:c9:
7b:c6:1c:87:be:40:7c:3c:d9:75:fb:2e:2b:05:27:
b2:20:b8:18:e9:5f:31:e5:5e:ba:c8:fa:26:8b:5a:
73:f9:eb:a9:4b:d9:e3:3c:43:06:9d:2e:80:26:99:
73:5b:93:2b:66:74:4b:83:c2:f1:6f:9b:80:cf:f4:
dc:6e:42:d6:4e:86:7e:f7:18:a8:71:49:f6:7a:98:
37:15:b3:43:50:99:c0:58:2c:89:d7:2c:d7:71:74:
ca:ea:23:6c:95:78:c2:42:57:3d:a0:57:7b:c1:1c:
b7:c1:67:47:29:29:f1:35:7f:b6:04:1a:e4:f7:67:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:40:D1:67:98:6A:B7:F5:7F:8F:87:2C:F5:35:B5:1E:9E:11:8F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.126.0/24
Signature Algorithm: sha256WithRSAEncryption
65:75:d0:d8:33:73:44:34:03:d4:b4:63:08:24:fb:24:68:28:
aa:a4:99:50:5b:b6:d7:3d:61:8b:a3:9d:18:d2:0f:f1:4e:73:
04:1d:61:e9:d5:82:45:30:2d:df:18:c2:0a:a2:c5:b1:6f:58:
8a:e9:b3:34:cd:55:c7:ed:d6:e5:a6:83:57:8d:75:41:83:7c:
61:91:a1:c4:b1:ad:a3:10:a0:aa:1b:6d:23:cb:c2:9b:8f:9f:
97:99:f7:78:94:c3:4f:e4:ff:24:c6:ad:05:47:08:b5:ef:b2:
e6:b2:8c:24:81:62:20:11:cb:9c:20:84:d9:46:14:4e:ec:8d:
96:94:c2:10:88:7e:fe:00:fd:2c:3a:4d:bf:7b:9d:d3:a7:d4:
2a:2e:06:7e:4b:4f:7c:64:6d:47:fe:08:0a:b7:81:ce:35:39:
ba:38:6e:c0:bc:b8:3d:c2:1b:12:88:a7:9a:4f:a1:fd:43:2b:
78:1b:18:5e:10:6a:0d:1c:6a:ca:2f:78:74:f8:5a:47:c7:a6:
8b:a7:7a:d7:7d:cc:37:0e:09:af:d9:2c:ce:17:4e:1b:23:e7:
83:9f:28:c4:43:42:2b:a8:c6:da:cf:8e:72:26:b3:68:1a:df:
76:82:b6:ab:61:2d:89:16:86:25:55:35:8f:2d:e1:d6:1e:40:
f7:54:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:07 2025 by rpki-client