Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa
File: 3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: zDLX2zP5RMO9yXbgCGdGOCm1HI9RQY9gH1Wh+mGJP98=
Subject key identifier: 52:6D:4D:9B:18:46:1E:68:72:F9:DB:A3:66:21:EC:E9:9C:F3:E5:49
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 41C8D7DA673B26FE63AC216590CC6889633A2326
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:14 +0000
ROA not before: Mon 27 Mar 2023 08:22:14 +0000
ROA not after: Mon 25 Mar 2024 08:27:14 +0000
asID: 51167
IP address blocks: 185.225.232.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c8:d7:da:67:3b:26:fe:63:ac:21:65:90:cc:68:89:63:3a:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:14 2023 GMT
Not After : Mar 25 08:27:14 2024 GMT
Subject: CN=526D4D9B18461E6872F9DBA36621ECE99CF3E549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:1d:bc:b7:1d:30:f0:fa:dc:24:cd:62:c7:
26:9f:6f:f9:9f:c1:ff:25:5e:9b:e6:43:c5:2f:44:
2e:4b:b1:69:d9:87:a9:ce:9f:b8:44:b8:74:3f:30:
93:89:b6:11:a4:35:0b:d3:07:58:cf:da:5f:17:50:
0c:56:af:74:ba:55:a6:f8:e6:27:13:7e:71:4b:a3:
de:3f:cd:42:29:30:2c:89:84:8a:77:0e:b2:a7:13:
78:bd:87:25:bc:84:dc:38:61:5a:42:76:57:4d:a6:
3f:64:2d:8f:1d:8c:d0:92:c5:bf:fe:88:cd:44:8c:
8a:b1:0b:fd:69:8a:51:be:35:ec:45:7b:52:99:7d:
0d:ce:4f:7c:04:6b:e9:10:03:22:66:86:50:2d:bb:
53:6f:5f:a9:e2:23:03:af:ca:7c:c8:8e:39:0a:d5:
14:06:63:84:9d:65:04:19:76:d4:d8:0c:a0:3b:00:
4f:b3:77:e4:55:0f:d1:64:78:d6:2b:84:bf:f1:02:
aa:8b:49:55:ec:c8:f4:6a:5f:3a:9b:f7:de:65:0e:
66:ce:b2:20:53:2f:63:11:40:4f:65:ef:6b:50:fd:
93:92:07:73:c1:be:d4:40:74:fc:84:ec:a5:b6:f3:
54:a5:6c:df:f8:48:f8:76:00:c8:52:d8:06:44:ee:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:4D:9B:18:46:1E:68:72:F9:DB:A3:66:21:EC:E9:9C:F3:E5:49
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.232.0/23
Signature Algorithm: sha256WithRSAEncryption
74:08:40:31:6f:8c:1c:5a:12:13:a0:2d:4a:89:76:b0:80:5f:
85:d5:57:db:dc:88:8d:86:46:c4:00:77:bc:31:61:81:da:4f:
82:ed:23:fd:2c:b4:14:fb:5e:44:b9:a6:7d:90:ee:c4:c1:36:
d8:81:34:3f:95:75:31:2a:f8:24:a2:da:d3:7f:d4:8e:be:ab:
0d:db:39:f8:f9:c8:fb:23:49:4b:93:aa:2d:74:c3:8f:a6:bd:
28:99:f0:8a:4f:6e:b9:c9:66:0f:a7:94:c7:70:46:4c:dd:55:
ce:17:db:38:50:38:1d:9a:3d:89:48:bc:60:57:23:02:82:fa:
42:51:e0:63:b5:ad:56:56:69:30:5d:de:fb:bd:06:b8:c6:32:
21:d4:15:64:72:fd:db:c9:4e:b3:01:da:f9:42:40:96:a4:2a:
8b:db:e6:72:56:5c:26:99:ec:31:0a:6d:88:82:98:c2:e4:b3:
a7:d1:68:3b:4e:c6:ef:ff:47:b1:43:66:be:cb:92:31:8e:90:
46:5e:87:58:3f:d0:99:c5:dd:18:6b:90:79:73:13:c4:89:b7:
2a:46:10:d1:8e:35:4d:31:e8:10:22:03:52:74:af:4e:eb:9d:
58:ef:31:b9:31:67:79:31:b9:6b:5d:88:a1:01:db:0d:08:d3:
58:bf:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org