Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
File: 3138352e3233342e36392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: MTka5cQQhYw3j+yWy/LY6/a/eP76G9+BYlvV4fU3erI=
Subject key identifier: A8:9D:2F:C7:A8:4F:2F:18:EC:88:6D:38:DB:95:5C:79:EE:90:08:FA
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 015B778A17ECCE1DEC7495DCC06E915BD0B60F7B
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:14 +0000
ROA not before: Mon 27 Mar 2023 08:22:14 +0000
ROA not after: Mon 25 Mar 2024 08:27:14 +0000
asID: 51167
IP address blocks: 185.234.69.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5b:77:8a:17:ec:ce:1d:ec:74:95:dc:c0:6e:91:5b:d0:b6:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:14 2023 GMT
Not After : Mar 25 08:27:14 2024 GMT
Subject: CN=A89D2FC7A84F2F18EC886D38DB955C79EE9008FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:99:da:8d:51:f8:e5:68:01:7c:f7:c6:e0:
5f:0d:6a:10:ee:7d:83:cd:c4:51:3d:bf:25:2b:43:
06:b9:ab:ac:ea:42:97:f9:f1:3b:eb:78:2f:9b:9f:
68:af:d7:68:a7:ca:e7:42:fa:cd:fd:70:27:44:fa:
49:e5:df:01:66:7e:24:6f:41:6a:14:39:57:17:46:
0b:2e:17:1c:f4:00:cd:86:fa:ad:d5:ab:ec:58:b1:
85:85:87:7b:67:4d:19:84:dc:2d:22:39:c6:f5:fc:
96:49:09:42:c2:64:05:67:40:ca:b2:c7:ad:38:c8:
64:56:78:75:67:9a:d6:d8:4a:22:31:cf:78:0e:fd:
f4:07:7b:55:01:4d:1d:dc:71:bf:39:f6:c8:31:a9:
2a:da:e1:60:44:2a:05:d7:9f:ad:6e:6b:74:4f:38:
32:0f:f2:e1:87:a0:f6:ff:53:b6:f8:ef:7d:ad:6d:
ef:77:41:09:de:8e:75:d8:50:87:e4:05:73:8b:e3:
62:49:39:e9:67:8f:64:6d:b9:4d:08:fc:55:07:a9:
bb:84:c6:5c:c8:aa:a3:62:38:93:f1:31:75:a4:0a:
78:44:54:e1:50:4f:f7:39:e5:19:42:37:61:48:f3:
06:b2:67:46:6f:3e:89:fe:dc:a8:56:53:1c:0c:7f:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:2F:C7:A8:4F:2F:18:EC:88:6D:38:DB:95:5C:79:EE:90:08:FA
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ce:aa:b3:ed:92:6d:55:ce:98:05:b6:9e:5c:0d:b1:76:61:
3d:3c:c9:61:3c:c0:0b:76:a4:90:20:11:42:d9:e5:38:72:6f:
18:1d:5f:b5:0a:50:0e:10:06:e4:32:43:b1:69:e6:f8:0a:70:
8d:19:69:37:c7:9a:5d:5d:d4:2e:25:19:d9:95:77:04:c9:5f:
ba:3a:73:c4:e9:f9:c9:6c:39:2d:13:62:23:b2:e1:a1:4e:ca:
a9:8a:c1:b8:03:8e:a0:c1:27:8a:45:ba:8a:de:03:7c:d3:82:
37:95:e0:8b:00:2f:b4:bc:ca:a5:bd:bb:74:f0:cf:8b:e5:17:
36:d3:db:b3:bf:af:e3:62:10:ad:69:16:02:51:9f:40:56:bd:
2b:e2:3a:b4:de:94:55:d4:54:d7:c2:36:48:94:e2:c6:07:ab:
98:43:d8:83:8e:dd:fd:f9:96:a2:85:90:64:0b:b7:08:8e:fc:
3f:45:dc:23:2e:30:c6:7d:b2:5c:a3:be:7a:32:9c:7a:9d:94:
c7:33:f5:50:45:b4:e7:85:39:f9:88:0f:dd:4b:e1:4a:dd:f6:
5b:e6:a5:47:a4:c7:a5:24:29:ab:46:74:80:2f:6e:a9:a8:63:
67:b2:68:79:2e:fa:87:50:15:ce:09:a4:99:69:b8:46:df:f6:
de:be:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org