Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
File: 3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: YKit+96tpTTZO5B0eJk3Xf3+yA7LkfjPUMn0wnMBK9w=
Subject key identifier: 33:AD:AB:D2:B7:D1:D0:1F:4C:13:FB:3D:24:2D:5D:D0:D0:FF:0A:1A
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 1068A134DB72FCE38A6962C9053974E9ED250A35
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 136787
IP address blocks: 185.225.235.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:68:a1:34:db:72:fc:e3:8a:69:62:c9:05:39:74:e9:ed:25:0a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=33ADABD2B7D1D01F4C13FB3D242D5DD0D0FF0A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:dc:39:e0:2d:26:f5:10:7f:e4:f5:c0:1b:
3b:9a:11:b0:90:d6:d3:4c:d5:1f:2b:a7:7b:09:2e:
e9:ca:d8:7c:eb:88:e7:6c:8b:4d:aa:60:45:e0:2c:
70:30:1b:0a:17:5f:c5:1c:cd:2a:78:51:aa:74:5a:
c7:48:fb:77:75:b7:62:8c:ae:1a:31:f3:f9:8d:49:
0b:c2:d9:f9:6b:de:bf:14:2d:db:aa:96:03:72:d3:
08:5c:7c:a0:d0:4c:0b:71:aa:1f:7c:75:5f:fe:65:
dc:ef:eb:9f:e8:63:ee:5c:29:d8:bc:a7:f4:f0:e5:
12:4a:b4:ea:21:4c:9c:4d:42:3f:cd:b4:6d:ea:6e:
8a:de:69:c4:49:d9:e1:9a:43:5a:f8:e2:c2:f2:09:
96:44:cc:9e:60:6f:61:7f:a8:e7:a9:37:34:46:8a:
18:37:5d:34:f8:89:be:12:c1:76:92:c5:e5:46:b2:
c5:4c:c1:c3:24:44:17:91:7d:89:5b:8b:90:3b:62:
6e:47:1f:7b:3a:d4:89:76:c4:e6:79:d8:5e:23:fd:
3d:f7:f3:57:f1:9e:ac:c4:12:64:76:3e:cf:71:59:
4a:0c:ed:1f:47:b4:36:ed:be:b0:f5:99:ee:02:99:
c7:14:eb:bf:44:8a:1d:bf:39:d0:e6:b2:43:24:93:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:AB:D2:B7:D1:D0:1F:4C:13:FB:3D:24:2D:5D:D0:D0:FF:0A:1A
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.235.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fc:92:58:f7:3c:c2:47:68:cf:1d:cf:2a:3b:cf:17:12:f1:
7b:ad:33:6f:cc:1e:5f:2a:5d:c6:64:9b:e2:b9:c5:12:d7:6b:
1d:69:dd:df:b0:2d:1d:e9:e5:e4:3e:92:5f:91:05:f1:fc:9b:
0b:3b:d6:8a:b2:9d:ee:80:0d:5e:41:a0:b6:10:fb:a5:a1:45:
23:2e:aa:1f:2a:60:ad:e7:6f:95:11:74:cf:c2:c7:4f:84:24:
99:f3:1a:5b:e6:b7:0c:1f:d5:ec:12:41:14:a1:ad:cb:c0:1d:
e5:e9:b8:fb:d8:5a:79:28:4e:4a:c9:9a:10:b8:4d:d0:6c:87:
46:a9:31:0d:50:2c:c1:fd:7c:db:cd:c7:d6:69:c5:06:6b:f4:
2b:af:ce:b0:c8:b4:82:d4:2f:9d:ef:6f:34:cc:a0:0e:d7:65:
ad:06:60:d1:46:64:b5:d5:73:0e:6f:2b:45:c9:29:df:c2:14:
96:fa:7c:74:5b:a9:44:84:65:0c:fa:2d:7c:cc:73:4a:17:fd:
d2:41:5b:30:22:be:7e:5f:f9:f5:72:b9:a8:5c:5f:ec:50:1e:
7b:61:57:57:1e:22:64:a9:e0:ac:f0:0c:c9:da:45:79:f6:96:
3c:a0:a6:58:1b:3f:f4:e5:ad:10:39:66:af:d5:1a:d6:a9:5b:
55:fd:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org