Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa
File: 3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: lrWt2Jx44usNpDZ1LCY3z5vHzN0H1jcyZ9p+KYJ/KiU=
Subject key identifier: AC:57:C9:0D:9B:16:75:8D:0A:AE:E4:30:78:40:C7:38:37:19:D8:5D
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 67D2EC1C035CF8C09DF2D6DF7A962BDC2952EBAB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 141039
IP address blocks: 185.219.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d2:ec:1c:03:5c:f8:c0:9d:f2:d6:df:7a:96:2b:dc:29:52:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=AC57C90D9B16758D0AAEE4307840C7383719D85D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:66:00:18:36:40:0d:43:8f:4e:07:a6:99:
c5:7a:22:34:c8:70:2c:16:8c:a4:04:33:c8:56:03:
44:f0:9f:cf:fe:db:ce:24:27:52:b8:be:2a:6f:cb:
2e:db:8a:a6:d3:40:c1:7d:d7:98:d3:c5:5f:bd:2b:
69:03:42:2a:38:bf:d6:07:c3:00:d5:13:12:d4:c6:
e0:0c:81:00:72:05:a2:c2:f8:8a:a3:53:6f:43:07:
3a:6b:c7:b8:d4:54:14:e2:39:ca:59:f5:4e:78:98:
32:59:41:48:45:22:57:46:11:41:17:24:84:b8:f7:
72:0a:b4:33:2c:e5:04:e3:2e:17:27:c9:91:a9:3b:
d6:c8:1c:50:ea:bd:0b:a7:62:ab:07:9a:11:35:78:
cd:16:84:21:cb:49:b5:26:bb:a2:f6:83:d2:39:cf:
9b:bb:6f:26:0d:05:69:78:a5:55:55:50:7b:c5:26:
c6:06:fc:87:09:07:db:d0:01:ad:be:10:74:ef:a8:
22:c3:e3:35:df:76:57:aa:bc:3a:63:eb:64:a3:0a:
7b:77:ef:c7:0f:1d:26:29:8d:0e:5b:ca:fb:c2:a8:
4f:cf:3d:ef:d6:f9:3e:fd:19:4d:ca:6a:65:8a:02:
0a:da:cf:9f:cc:dd:7c:3d:b9:ff:35:8b:b4:b3:e1:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:C9:0D:9B:16:75:8D:0A:AE:E4:30:78:40:C7:38:37:19:D8:5D
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134312e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.141.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fe:50:41:7a:35:23:2b:0e:df:15:86:3b:11:e1:4e:3d:e1:
c7:5e:d6:c9:28:1a:8e:33:f3:75:17:ce:84:3a:e5:44:4b:bb:
a6:e7:cc:03:ef:08:9c:99:fb:cc:a3:f9:b2:2f:c9:ff:5c:7c:
c7:cf:09:c5:4c:38:ed:91:d4:0e:0b:32:43:20:5c:7a:a3:8e:
be:c9:7b:8c:e8:b7:ae:68:5a:fd:1c:75:2e:85:6a:24:29:e3:
34:89:97:df:38:0d:60:36:7a:47:4c:1c:cf:4c:12:57:1f:ab:
2d:a3:4f:41:c2:59:4c:5e:e4:50:9c:0c:9c:de:07:e6:a2:df:
4f:88:33:32:89:9b:a3:94:ac:19:cc:49:bb:8b:16:d8:01:6d:
9d:18:92:c8:dd:ed:1a:5f:79:2e:ee:48:e4:15:84:76:06:88:
a4:99:b6:be:e7:6f:29:3b:dd:10:3f:6a:6d:33:9b:19:49:c7:
d9:ba:62:d4:48:f5:45:0b:a2:22:2b:d9:ce:d9:fc:85:11:36:
aa:d1:18:14:9a:58:e6:fb:d1:91:7c:82:c9:6f:66:5a:b7:63:
8a:9e:e4:1c:80:30:d9:25:01:93:af:5d:10:8c:2c:da:54:87:
54:94:57:28:42:54:2c:b8:3e:a2:0a:d4:aa:d3:22:d1:ee:65:
d6:66:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org