Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
File: 3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: OUxwrz0BL58rPWl/gX4jrH12TwoTeQetPHhg7D5kIik=
Subject key identifier: A9:92:24:2F:07:38:48:19:66:19:FE:28:15:8C:64:AB:9F:84:D4:30
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 473117AAD6B783843760C3D56FBD35F7C2DCB79D
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 47583
IP address blocks: 185.229.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:31:17:aa:d6:b7:83:84:37:60:c3:d5:6f:bd:35:f7:c2:dc:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=A992242F073848196619FE28158C64AB9F84D430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:5f:e7:02:05:b8:62:44:bc:59:58:5f:5e:
19:a8:c4:cb:4d:82:f3:c5:d5:28:93:2c:24:06:d1:
ea:3c:6a:81:ec:c7:16:3f:9d:5b:99:4b:53:48:4b:
d2:ce:33:c8:55:a6:75:36:e4:e5:d6:2d:ef:55:0d:
b5:da:85:6d:ce:a7:b2:38:d8:7e:65:38:59:1b:42:
8d:bc:ad:6c:e7:68:55:23:0b:73:99:8c:69:16:a0:
3c:74:ac:65:ad:5e:b8:85:21:58:37:70:4e:fe:e1:
e5:8a:75:3f:04:04:86:b5:84:2b:2b:c3:11:1a:78:
6f:ac:8f:c7:d1:53:88:67:b1:4e:81:40:80:3d:f6:
cb:56:8a:b8:36:f8:f9:a9:97:87:5d:13:42:39:69:
5c:0e:57:45:3f:84:25:a7:8d:90:bd:ed:96:25:fe:
b5:75:8f:50:c2:60:08:01:3e:da:49:00:62:6c:81:
90:dc:ff:4e:c5:98:f0:c1:55:7d:3a:c5:7f:b1:b6:
6e:32:52:72:c4:28:83:0a:d7:47:da:64:b5:34:6d:
6e:bf:86:4e:d8:8f:b1:25:c3:95:c1:1f:43:19:21:
ed:84:c9:85:01:62:66:2c:df:e1:83:49:a1:f6:9f:
21:31:a2:a5:e0:8b:ad:f0:ec:ae:3c:c6:9e:59:fa:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:24:2F:07:38:48:19:66:19:FE:28:15:8C:64:AB:9F:84:D4:30
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
94:49:af:73:02:88:94:6e:28:f3:b3:46:21:7f:1b:69:87:24:
a0:07:51:11:8e:b6:de:be:b1:c7:72:ff:a5:03:d5:e2:9e:07:
36:07:79:9a:02:cf:8e:63:fd:4b:d9:c5:57:98:02:cd:73:9a:
b5:0a:95:c1:30:6d:5f:4c:1f:91:89:c6:81:8d:52:22:0d:9a:
e5:c5:5d:53:12:f6:15:8f:a7:32:c2:6e:15:04:dc:a6:c9:a9:
d8:19:8c:84:ea:1b:67:a4:ad:14:f9:92:53:76:6a:23:54:d1:
fd:c0:41:27:ee:8b:de:e6:e6:7c:cf:21:d6:59:b3:51:40:5f:
39:f0:3b:6c:8e:f4:5a:77:7c:ae:89:ac:66:a9:2e:98:e5:79:
a2:0d:e1:d8:21:75:74:f5:c7:2e:ea:8b:bb:09:d2:0b:5a:44:
8b:78:c4:11:b6:67:9f:b6:17:47:b9:a0:ef:56:42:9a:52:a0:
b5:d4:48:80:04:25:cd:03:11:9c:c0:4f:61:74:af:24:27:d3:
44:df:8a:93:af:10:71:df:07:25:2f:c2:01:6d:8b:ab:f6:31:
34:40:f2:ee:3a:61:e5:7a:83:73:67:b8:0a:c8:3c:a7:13:33:
4f:81:be:42:ec:61:46:d9:a4:4b:52:be:29:a0:e4:9a:cb:e5:
29:f9:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org