Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: 1s1eyJew8U+FeOXb55mnQJe4LB1WI3J326jfEgBIVYs=
Subject key identifier: 8A:1C:A4:0D:DC:B2:FC:AE:69:5D:62:E6:DD:53:36:FC:95:40:64:5A
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5F5149FB80C69A829B8D21900BB8F65A4267EBCE
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 203380
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:51:49:fb:80:c6:9a:82:9b:8d:21:90:0b:b8:f6:5a:42:67:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=8A1CA40DDCB2FCAE695D62E6DD5336FC9540645A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:51:29:f4:44:70:18:eb:94:5b:12:a4:02:
78:dc:9b:10:07:19:7b:f7:da:be:21:96:97:4c:78:
5f:dc:f7:bb:8d:29:ac:9e:9c:a7:4c:82:d8:53:5b:
14:aa:d0:bf:95:ae:48:45:11:c7:b8:81:53:b1:eb:
9e:d5:9c:8c:29:85:eb:ae:7b:4c:d4:ed:99:5d:31:
c1:e8:ba:07:3d:a8:a6:62:bd:52:cd:64:37:21:8d:
4c:68:19:52:2c:dc:69:85:6e:08:6a:ef:f8:0d:8e:
7d:51:1b:5b:5b:84:f4:29:7a:97:f1:20:97:82:a6:
e2:65:06:32:9e:f0:7a:82:8a:4f:76:03:b5:4f:5f:
5f:10:08:85:fb:a8:f2:0a:59:a4:f4:9b:51:fa:99:
f3:00:14:75:18:95:d8:13:fb:0e:4a:ae:0c:f5:59:
9d:23:06:a1:ee:72:b2:3d:af:a0:8e:89:e8:12:8e:
27:2c:a8:d8:80:4f:46:40:b6:fc:b9:f9:83:bc:a9:
6c:9c:b7:c6:5c:78:bc:ca:47:bb:90:4c:65:45:69:
44:cd:54:9b:a9:8d:47:3f:10:42:bb:e4:01:78:45:
c0:f3:ec:48:81:e6:c3:8f:e5:c0:d4:f1:98:3a:ec:
3f:f3:73:f5:5a:34:6f:6e:e5:3d:d1:de:0d:9b:69:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:A4:0D:DC:B2:FC:AE:69:5D:62:E6:DD:53:36:FC:95:40:64:5A
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6e:0b:cf:f1:63:c8:7b:91:ee:52:3c:09:1c:d3:fc:d1:ea:
25:d8:b4:36:27:66:8d:92:15:bf:18:35:a2:28:0f:44:c3:4e:
a3:60:06:4a:6c:05:dc:c2:85:48:52:55:7f:b3:40:4c:9c:43:
ca:86:8f:da:c1:72:1f:de:f3:49:9f:7f:be:60:6d:21:12:10:
76:70:4d:6a:ef:19:83:8a:1e:e5:09:90:85:80:bf:95:a8:cd:
da:41:c3:1e:1f:eb:b4:1a:8e:c4:a0:c3:8f:d8:77:91:32:2f:
7e:32:04:db:e1:73:6c:75:15:a9:90:e4:1e:da:68:8d:b6:be:
62:b7:c1:b8:9d:47:a7:6b:a0:86:c0:07:81:c7:41:e5:f2:bb:
4d:b6:fe:2d:a2:f1:e0:bb:fa:d2:93:73:49:cc:3c:17:69:c9:
d0:aa:24:2e:ef:0a:a0:35:74:75:d9:8b:90:ce:c5:01:27:52:
10:63:db:f4:01:38:f4:52:11:78:ce:d5:35:2b:a1:65:4c:eb:
07:dd:9a:be:ad:50:dc:0b:86:f6:1f:c2:78:25:58:b1:72:3b:
f4:4e:a2:19:b5:b3:ad:9a:d3:4a:0b:b8:fe:a0:a7:0d:ce:b3:
65:00:56:52:17:7b:9a:bb:de:5e:67:0a:49:95:0a:55:df:69:
ed:f8:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org