Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
File: 3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: qb055qgyMzgsa7Dfjm5KS9O0PW0cpyhUrOGKlF/m0jE=
Subject key identifier: 5D:8A:93:09:9C:94:F6:BB:CA:D7:72:8E:D8:39:5A:6E:EF:39:F8:33
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 66438FFAE5B49BA501B3A8EA231C9BEE52261298
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 51167
IP address blocks: 185.239.211.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:43:8f:fa:e5:b4:9b:a5:01:b3:a8:ea:23:1c:9b:ee:52:26:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=5D8A93099C94F6BBCAD7728ED8395A6EEF39F833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:7e:90:14:9c:c6:95:9d:34:89:62:52:25:
1b:45:84:32:76:09:b6:c0:9e:9c:49:45:6f:10:13:
82:1e:0b:ea:1b:c9:c1:2c:b0:6d:c6:b2:bf:9e:34:
9f:21:b1:7f:e7:28:d9:74:85:2e:dd:9b:2c:0d:27:
47:8c:33:a0:2b:e5:17:6e:04:db:f7:a6:b9:ab:bf:
b8:8f:80:f7:62:27:e0:67:91:94:c2:df:fd:40:5c:
5d:2b:a0:9b:8b:ba:73:46:6d:36:c8:c1:ba:ba:f0:
84:f7:cf:57:f7:d3:2a:1c:c3:e2:a0:9c:c4:3a:72:
a5:c4:fc:52:ae:6e:c2:ef:d7:2d:0d:06:1d:33:5f:
27:a5:0c:8b:ed:92:20:6a:a9:03:fa:00:f5:1b:30:
9b:88:1d:74:c7:26:f0:f3:00:e5:71:a6:bc:29:e5:
a4:51:87:8b:7b:27:67:ba:5d:75:67:e5:54:cd:ca:
b8:21:f0:7d:38:b5:1e:fa:b4:9a:29:38:14:7e:e5:
10:9a:4e:98:68:f4:5e:57:d9:79:47:61:7a:31:2f:
b0:a4:7c:be:8e:aa:29:75:76:b5:05:55:6b:d4:ec:
80:54:4f:fe:89:55:af:35:a0:b2:e8:46:6e:2d:33:
e6:a1:70:b9:21:4c:18:91:49:19:26:b2:0d:95:9e:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:93:09:9C:94:F6:BB:CA:D7:72:8E:D8:39:5A:6E:EF:39:F8:33
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b9:8d:14:5e:48:88:db:d6:a6:18:9a:fd:be:81:f8:85:ed:
e4:cd:ac:99:d3:8c:9b:42:bf:45:da:1d:a0:8f:1b:db:85:20:
1c:cb:6f:dc:80:24:4c:c3:f3:03:f1:b9:ad:5f:16:14:83:f4:
84:84:48:ae:f7:4c:a0:55:26:35:96:d4:fd:d6:bf:50:c5:c1:
76:2f:ab:3c:78:35:e0:ed:e4:6f:7e:44:bb:bd:00:2b:b4:32:
d7:e1:44:13:0c:66:5d:61:7b:41:93:82:51:8e:2c:ba:81:67:
f2:27:85:93:8a:55:13:0d:2b:27:b9:27:ce:8d:91:7e:c6:28:
ba:61:75:27:81:79:e1:8e:7b:b0:6f:3d:e5:2a:57:77:50:37:
eb:d1:2c:21:d4:be:78:c7:71:af:96:65:71:a3:6f:28:95:be:
cc:21:60:ed:a5:e5:90:0e:81:61:1c:b7:95:f2:0b:e0:53:67:
b0:bb:15:28:f2:93:1b:22:fd:9f:78:9d:31:67:8b:ea:b8:62:
c5:17:18:a8:f7:63:24:25:85:af:18:fa:20:dc:ce:08:4d:09:
ee:a6:1e:16:1a:2e:48:33:3f:c6:ad:0e:ff:fc:76:b1:73:63:
8c:87:54:8b:11:02:19:87:eb:21:c2:2f:1f:d9:01:2a:18:b8:
6b:71:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:41 2025 by rpki-client