Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e2030.roa
File: 3138352e3232312e3133342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: YEOy0oNVLDxlSqPJjwktnNBBKVOMJYugWnesz21aSuc=
Subject key identifier: 3B:BD:98:ED:25:22:92:9E:2A:49:E0:A8:73:FE:4D:60:6F:05:63:E3
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2F690F6653C1A5A6FEBEA7BB3E0C4B19879D0FDE
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 0
IP address blocks: 185.221.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:69:0f:66:53:c1:a5:a6:fe:be:a7:bb:3e:0c:4b:19:87:9d:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=3BBD98ED2522929E2A49E0A873FE4D606F0563E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:0e:ed:04:3d:cf:e3:ad:90:a7:34:04:0c:
24:78:75:72:12:a3:19:6e:06:c4:ed:dc:a3:f4:3e:
68:71:b0:e6:9d:5e:e7:75:94:f1:e8:eb:b3:2d:47:
b9:14:06:e2:13:4b:66:04:28:79:39:42:e9:2c:cb:
7f:31:18:d6:29:61:23:a7:dd:16:4d:cf:d3:5b:d9:
15:a6:5c:6c:79:13:d6:07:cb:70:ee:3d:b4:65:c6:
55:a1:13:6e:09:a8:35:82:f5:c8:2b:ec:d1:24:3f:
b3:3c:a9:d3:d4:a6:e0:40:70:d6:97:04:61:f2:ea:
d1:5d:02:4d:ca:99:57:e4:21:7f:e4:b3:93:99:0f:
7e:67:ff:ca:6a:2d:cc:d0:ed:e9:1a:3c:b6:77:76:
df:ad:a1:65:a9:63:d2:c4:f2:13:7b:fc:51:26:08:
52:92:24:4d:d6:9e:5c:c2:de:08:dd:4b:8b:eb:ff:
46:91:33:35:f8:92:a8:af:09:51:f9:20:45:fd:7b:
d5:ae:45:47:1a:d8:34:e3:49:16:61:4e:5e:47:8d:
02:14:82:e9:70:26:a9:43:45:85:b5:cb:e2:30:00:
dc:3e:bd:cc:d0:db:d5:f2:77:09:f7:54:28:5f:ff:
9f:d5:80:6b:5c:fc:d3:24:ad:ec:c5:dd:3f:f4:3f:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:98:ED:25:22:92:9E:2A:49:E0:A8:73:FE:4D:60:6F:05:63:E3
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.134.0/23
Signature Algorithm: sha256WithRSAEncryption
23:af:bf:18:5f:1f:b4:25:16:d0:38:b8:9a:09:6f:11:b5:b5:
fa:61:c0:a7:5b:5c:05:4a:0e:6f:9f:8a:b4:d6:0c:c5:a0:41:
70:87:c6:88:3f:ca:1a:20:d8:04:f5:c4:b6:5d:34:b6:8c:41:
05:f2:54:78:f5:7c:b9:df:1c:00:5b:12:02:b6:f2:f9:ac:ac:
22:55:4a:1a:9a:f3:ea:ea:2b:e1:79:80:f6:84:ad:23:a1:bf:
71:06:01:08:b1:90:04:ac:b6:59:ee:10:de:da:ed:11:b1:b5:
ae:c6:ad:ca:42:8c:42:cc:7c:38:e8:e5:2f:3b:f5:55:38:61:
2e:a8:3e:6e:71:d8:c5:3c:a1:b5:b9:ea:b4:31:fb:25:22:e5:
94:20:f9:87:11:d0:ca:bd:2a:eb:32:6b:e6:10:8c:21:72:88:
66:8e:bd:d1:76:3b:3b:84:29:47:4d:10:c8:18:21:d2:c2:8b:
85:49:be:02:34:7b:05:f5:bd:62:2a:8e:6b:58:9a:4f:5e:c3:
8a:60:a6:6c:31:fb:da:ba:5a:7d:95:9a:ca:1b:a6:2a:9b:47:
ab:f4:23:6d:2e:2e:a7:25:c5:a5:84:89:b7:85:49:ec:3a:4d:
3b:7c:ad:fb:c0:c3:54:5b:7a:c7:1c:96:8f:dc:2c:60:0b:99:
da:37:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org