Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ESI2sw9ue6844bxOiD5q2C6GoWU90dFvd4C3/XWzoqg=
Subject key identifier: 3F:B6:91:71:48:BE:0D:F5:D3:F6:CE:6E:C5:1E:B7:CB:AF:00:B0:03
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6ABC0BFF4C4FD0B609952672807259990FA55191
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 11:13:01 +0000
ROA not before: Sun 11 Jun 2023 11:08:01 +0000
ROA not after: Sun 09 Jun 2024 11:13:01 +0000
asID: 136787
IP address blocks: 185.237.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bc:0b:ff:4c:4f:d0:b6:09:95:26:72:80:72:59:99:0f:a5:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Jun 11 11:08:01 2023 GMT
Not After : Jun 9 11:13:01 2024 GMT
Subject: CN=3FB6917148BE0DF5D3F6CE6EC51EB7CBAF00B003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:79:b2:6b:96:6a:85:c2:db:81:e5:49:ba:
ba:ff:52:37:d2:4f:bb:e5:86:d8:51:1b:29:da:ff:
df:68:4c:82:ca:48:c0:ef:85:0d:22:33:04:1c:c7:
90:65:07:40:1c:1a:e3:f7:37:10:61:56:d3:7a:b6:
a9:8d:6e:a4:16:3d:4c:5a:04:9e:b1:e3:1f:e1:7d:
c9:52:d3:9a:44:c5:15:a8:2b:f8:66:51:1e:3c:c3:
da:ef:49:af:56:b5:7e:b4:8d:85:55:2d:d8:2d:9b:
65:83:42:1d:cc:21:86:48:99:b3:af:46:28:12:96:
9b:cc:88:70:6b:47:75:75:74:36:8c:ec:eb:d5:00:
b4:7a:d6:e5:da:35:ed:d7:81:57:ae:2f:ba:59:a7:
46:8b:84:34:e1:4a:50:2a:ce:c7:45:4d:69:a8:4d:
19:95:ee:be:14:70:3e:84:cf:65:4d:ed:e1:eb:a3:
2c:89:b1:76:65:99:0a:b1:42:58:57:94:41:9f:d1:
9a:3e:e4:51:da:44:4b:d2:a3:00:3d:0c:41:cd:c8:
1c:21:08:92:de:9f:df:75:6d:08:70:ee:fb:d9:c2:
26:14:8a:6c:00:d7:8e:19:4e:7b:d2:7c:ee:97:b4:
37:87:93:06:8a:0e:34:eb:68:12:2d:8f:6a:f5:74:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:91:71:48:BE:0D:F5:D3:F6:CE:6E:C5:1E:B7:CB:AF:00:B0:03
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6a:b6:ba:e3:6f:63:a1:b1:97:ee:2a:dd:40:b2:5e:24:24:
d8:d3:8d:5e:66:15:05:84:30:16:9f:12:88:b0:b2:1a:5b:74:
39:9a:0f:ef:37:6c:a9:87:00:f8:91:08:4e:0f:c9:de:03:b9:
ca:c5:1b:60:7a:5c:03:b4:e7:16:1b:46:ce:3b:f1:f2:c9:b5:
0b:e5:4d:78:1b:2d:a0:ab:dd:5b:ad:ff:14:c3:a2:e8:a9:b2:
cc:95:b9:b1:d9:08:0d:2f:4a:4c:ce:f7:b8:55:80:0e:4e:c1:
91:c6:83:ba:1d:91:21:9d:6d:48:37:ef:69:2a:6d:bd:0b:80:
a2:f1:08:57:af:57:5b:04:22:cc:96:e9:40:d3:89:00:c1:23:
97:1d:44:9c:34:65:76:e3:5a:6c:9a:72:25:1c:b8:ed:6e:4a:
3b:05:7f:6c:d3:d6:0f:83:f2:1c:4b:48:b4:65:bd:8d:26:9c:
3e:de:08:77:df:ea:ac:26:61:52:e6:1f:e4:00:7c:8e:d2:80:
45:09:05:1b:af:1a:af:5d:07:16:f3:ad:08:ab:ff:7c:3a:77:
c3:7a:aa:d3:a9:4d:5f:e7:11:0e:e4:5b:af:a3:06:35:cd:04:
dc:0a:0a:cd:30:10:d3:4b:fb:5b:3d:55:98:92:b8:ef:e8:54:
25:e6:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org