Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: wxlHJVy6dxfzZVyZ2rQgR9oCN9Ht6IluU/km3YIwaY0=
Subject key identifier: 67:81:81:9F:60:89:E1:C9:DB:D9:7A:A3:D3:F9:A0:B6:7B:FA:7B:06
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 3A57E3EA06145F71185D21F9163A319EE5D69378
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:14 +0000
ROA not before: Mon 27 Mar 2023 08:22:14 +0000
ROA not after: Mon 25 Mar 2024 08:27:14 +0000
asID: 136787
IP address blocks: 185.222.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:57:e3:ea:06:14:5f:71:18:5d:21:f9:16:3a:31:9e:e5:d6:93:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:14 2023 GMT
Not After : Mar 25 08:27:14 2024 GMT
Subject: CN=6781819F6089E1C9DBD97AA3D3F9A0B67BFA7B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:0c:31:32:46:6f:e5:df:b5:66:b0:98:35:
fe:ca:ce:ba:c3:ab:40:27:5e:6d:df:4a:a3:32:08:
b2:e5:ea:ea:62:73:06:c7:61:0b:af:de:01:ef:9d:
f4:3f:ba:4c:bd:ac:86:1f:d4:6b:83:44:7a:4c:ec:
0c:d6:97:21:4e:9e:49:c8:b8:6e:bf:52:d8:c0:0b:
39:e4:49:38:42:f2:35:95:b6:19:36:7b:fd:9c:8a:
41:54:db:5d:be:e0:9a:62:7c:63:5e:c7:50:fa:1e:
8c:30:cb:cb:9a:7e:3e:91:a4:50:c6:a0:c5:00:b3:
5c:44:c5:a6:c6:1e:74:f5:63:a0:56:5a:e0:24:ff:
0d:1e:6d:ee:e8:88:2b:9d:d7:a7:66:50:49:82:7e:
df:15:92:e3:0f:dd:5e:56:df:41:f7:c7:af:57:f2:
4f:61:88:e1:10:21:6c:6f:72:50:dc:e8:24:a8:64:
d5:a8:26:db:0c:45:9d:2e:e7:30:7e:e4:f6:3d:d6:
d2:0e:34:ef:2b:aa:7b:e5:7b:6c:1b:8b:9c:5c:cb:
48:fa:fa:cc:e5:40:8f:38:6c:b6:6a:73:42:2f:a9:
08:14:ef:47:f0:ee:35:d1:8f:bc:29:fe:70:bf:56:
f1:48:90:8e:cd:1c:6c:a0:ed:4d:fd:07:b9:a7:4e:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:81:81:9F:60:89:E1:C9:DB:D9:7A:A3:D3:F9:A0:B6:7B:FA:7B:06
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.240.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e3:53:92:16:02:8d:e8:78:a0:7b:93:cd:85:d8:f4:2d:b6:
e7:c2:5d:53:b6:5a:e7:bd:86:09:82:c1:42:d1:ae:32:0b:34:
a2:a0:1e:68:cf:9f:62:5f:4c:5c:f0:ae:d4:f0:8b:ff:24:d7:
ec:eb:48:00:02:f2:64:dd:6c:bf:10:f7:b9:23:4c:bc:03:96:
56:62:bb:4a:ba:7a:66:7c:9c:7f:6d:48:f9:cf:fb:05:67:a6:
8e:ae:98:f2:d8:7b:13:70:05:42:5e:d2:d5:55:7e:4b:5b:d9:
1b:3c:30:d7:96:69:26:c9:19:b7:03:b3:8c:4b:d7:c7:65:ff:
36:a1:88:1e:1a:3c:a5:34:cf:bd:33:89:7c:41:10:5b:5a:5e:
99:30:1f:61:73:4c:78:95:4f:22:0c:be:18:73:c0:36:f9:a3:
25:cf:69:ef:0e:17:f7:f4:d2:d4:78:ca:4b:3c:bb:a7:e0:86:
2e:7d:06:2d:f5:07:26:82:19:16:2d:d6:91:5f:54:5f:83:1e:
fb:8a:00:7b:ec:1b:be:56:ca:5d:28:81:03:97:60:a8:e6:89:
41:21:e7:c9:6f:75:41:c7:09:46:cd:e3:be:6d:c6:94:e5:13:
01:df:8d:17:d2:1d:41:08:a6:ac:b6:13:f7:2a:ff:55:31:b9:
aa:48:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org