Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
File: 3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa (raw, json)
Hash identifier: FfobeXrs+gkcyDzrLwMzV+WpWU2FWZ3v0zk9OefzkKA=
Subject key identifier: D2:0C:28:46:D7:BD:7F:1E:0D:6F:0D:61:A7:99:68:12:B7:5C:1C:77
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 3635F9C161E621ADDF72050863197269C0091BA7
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 141995
IP address blocks: 185.227.134.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:35:f9:c1:61:e6:21:ad:df:72:05:08:63:19:72:69:c0:09:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=D20C2846D7BD7F1E0D6F0D61A7996812B75C1C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:d4:90:d5:6c:2b:7c:c5:50:ba:d3:31:ae:
0c:0f:20:0c:c0:2b:23:29:f1:85:51:07:e9:8c:61:
6a:b4:eb:a2:2b:6f:9b:7e:cf:b3:1a:a5:08:fa:83:
9d:8b:a0:d8:65:f4:b9:70:27:70:1f:e2:3a:c9:4d:
3a:fc:38:34:40:1f:f1:dc:c7:ff:16:16:30:61:7d:
48:4b:03:01:30:c6:d6:40:df:f9:24:68:39:f4:21:
21:35:11:fd:f3:34:d8:92:a4:11:3e:3d:77:fb:ea:
aa:c2:35:93:8a:53:0e:a8:1b:98:8f:1b:e4:99:cb:
0a:20:5b:a8:16:db:b8:03:ce:8a:02:9a:87:b7:76:
e9:9f:5d:79:48:6a:c5:9f:f0:14:cc:9b:89:a3:ef:
3d:bb:89:b9:80:a4:e2:a8:b3:92:8a:53:5c:df:ba:
8f:77:a1:8e:9d:4d:6f:c6:95:c4:fa:04:fb:4e:97:
30:a6:9d:fc:2a:2e:95:2a:c3:65:6b:bb:a4:8c:e7:
d9:c6:f4:0b:8c:16:0f:97:40:ff:2b:73:1f:c9:02:
d6:db:1f:6b:b0:fd:fd:51:fa:2a:4e:f3:d7:5d:da:
1a:fd:91:91:53:01:0e:0c:e6:b8:fe:98:0d:7f:34:
d8:17:3f:d8:81:a5:e5:88:08:ad:d9:8c:50:6b:27:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:28:46:D7:BD:7F:1E:0D:6F:0D:61:A7:99:68:12:B7:5C:1C:77
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.134.0/23
Signature Algorithm: sha256WithRSAEncryption
68:b1:01:43:be:cf:3c:53:ea:d0:ef:ee:84:06:8a:1d:ab:49:
06:df:30:3c:a3:ce:23:50:30:45:b4:78:78:2d:ec:ec:f4:e6:
e5:24:c3:9b:84:61:01:67:81:fe:f0:6a:6a:e5:41:ed:e9:33:
93:1d:26:10:ac:03:1f:3b:fe:c5:87:ad:2f:e3:96:af:af:46:
a5:df:54:ad:7b:6e:bd:69:24:c2:f3:c2:3d:0c:7a:ba:f2:da:
fd:91:24:cd:8b:11:a7:7e:e8:ac:54:a0:ce:1b:53:cb:4b:5b:
1f:34:cd:ba:e3:3d:5c:28:e7:9c:8f:20:1a:b4:07:ba:57:77:
8d:16:b1:1e:fe:3a:e1:a2:19:b1:70:e9:0c:e5:bc:83:7c:ef:
84:2e:ff:22:2e:22:96:24:bf:3a:e8:88:c8:22:51:c1:4b:03:
6e:0b:c4:c9:82:a3:de:f9:5c:9b:5f:5a:9b:93:97:89:1d:0a:
41:d9:0d:e7:5c:96:4a:7d:cc:a2:20:73:89:65:2e:fa:79:37:
db:04:5b:c6:2e:30:dd:67:27:99:08:53:49:cc:59:4c:42:fa:
d6:aa:46:9c:4f:eb:e6:3b:20:9a:52:63:d1:70:7e:ea:01:6d:
f2:de:be:bb:a3:94:6f:9d:ed:d2:56:fe:46:b1:a9:50:2d:46:
55:1c:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org