Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
File: 3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: NE/67W4DoIe4rbbSVNceYzSEyGwQwwNI0e+IWTIjz/g=
Subject key identifier: B2:7C:74:0C:23:B3:43:B7:A7:80:7E:1C:41:01:4E:3D:99:C4:5E:B0
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5F5F5596B8BC94BAD22CB4D31CF6C0DC3DBF3211
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:22 +0000
ROA not before: Mon 27 Mar 2023 08:22:22 +0000
ROA not after: Mon 25 Mar 2024 08:27:22 +0000
asID: 51167
IP address blocks: 185.239.208.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5f:55:96:b8:bc:94:ba:d2:2c:b4:d3:1c:f6:c0:dc:3d:bf:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:22 2023 GMT
Not After : Mar 25 08:27:22 2024 GMT
Subject: CN=B27C740C23B343B7A7807E1C41014E3D99C45EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:69:de:d9:d2:eb:89:05:38:88:83:4d:8b:
2e:7f:17:85:5c:b1:41:1f:f0:b7:52:a6:84:80:f7:
8d:86:f2:3d:61:86:a1:96:6d:b1:5e:92:8c:ed:57:
ae:9e:d0:42:9c:ab:fb:94:97:fc:9c:2d:4c:10:64:
e0:ae:06:b3:e4:bc:67:b9:6e:0b:a2:63:6f:19:66:
6c:1f:da:02:81:b2:7b:3a:56:3c:a1:00:12:a1:76:
1d:6a:32:ae:f6:5b:9c:0a:9e:a4:65:13:97:76:3b:
ca:78:7f:8e:16:99:35:66:0f:b6:9c:d0:65:2b:4a:
f0:e3:ad:c0:49:c7:12:97:74:0a:1e:56:88:0b:9a:
29:5c:93:7c:71:8b:5e:69:07:89:f3:77:9d:4b:dd:
c9:71:0d:da:4c:31:f0:bb:f2:82:30:2a:06:da:b3:
50:c7:7f:97:eb:80:99:7f:eb:4d:39:29:73:a1:ef:
15:d5:1f:73:44:50:80:c1:f8:da:a1:84:73:2c:ff:
ae:44:50:9b:e3:64:3d:16:8c:98:de:f6:c3:59:72:
50:4c:ab:d5:2e:a8:bc:0d:ff:f6:63:c5:ff:f5:5a:
5c:98:4d:b3:50:91:39:8f:92:e0:cb:23:d3:de:d8:
51:b8:c5:fa:c4:4d:05:25:53:92:b2:54:da:54:bd:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:74:0C:23:B3:43:B7:A7:80:7E:1C:41:01:4E:3D:99:C4:5E:B0
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.208.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:8e:49:9d:76:b3:1b:4b:d1:0b:90:98:7c:98:b7:31:a8:93:
ff:8e:cf:2d:00:89:63:45:6f:4d:ae:33:82:39:8e:70:73:b2:
91:d8:21:a5:1d:a4:c5:5e:6a:78:c6:0a:ce:51:48:72:40:21:
1e:8e:40:d3:b2:d0:c0:84:ee:97:75:86:ae:f7:a3:98:7f:d8:
81:b6:63:d8:45:f2:67:14:a8:58:9a:32:a2:53:e2:36:81:6b:
70:13:bb:c0:6e:68:66:3e:a3:e2:15:89:f9:5d:aa:61:10:28:
43:6f:e3:2a:7d:d1:71:80:77:c2:88:58:a1:94:2d:c6:30:e6:
0c:b4:ed:dc:d4:80:ec:57:ed:1f:09:60:7e:f3:77:cf:b7:cc:
46:94:b4:83:8c:2e:b0:47:90:f4:1d:22:99:a0:a9:23:bc:a6:
8f:4c:df:ad:16:b2:fd:dd:3d:07:d7:43:ae:02:e1:36:92:b3:
03:1c:5a:19:17:80:25:ea:8d:84:98:35:cb:28:9e:a0:94:af:
eb:b1:0e:c0:70:31:dc:4d:06:7a:67:96:8b:24:4b:a0:54:1e:
2e:d7:a3:bd:0d:9b:17:89:3d:b8:92:94:4a:87:9e:f9:60:c5:
89:9b:18:45:14:10:12:ef:d5:1f:be:81:23:7e:68:9d:ab:cc:
97:57:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org