Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: qr7P8uQOzFFyjet4l1SdPOxRZFYhXhEWzCz8uT+zSqU=
Subject key identifier: F9:09:9B:1E:6E:6A:51:BF:4F:15:33:DC:5B:9D:9A:A1:A8:03:99:20
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 64F0C8FC54E47C8816F23B4111E3E087949C409F
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 19437
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f0:c8:fc:54:e4:7c:88:16:f2:3b:41:11:e3:e0:87:94:9c:40:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=F9099B1E6E6A51BF4F1533DC5B9D9AA1A8039920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:53:24:e7:48:e6:c8:7e:01:a7:89:22:3a:
8d:f8:33:5e:15:bb:6e:ea:fd:d6:a4:e9:75:a2:2e:
7e:89:65:21:b6:01:0c:cf:4e:84:16:74:5c:82:25:
12:08:4f:5d:60:b3:d8:89:81:8c:a9:13:8f:d8:1d:
6e:29:47:28:c6:e8:29:34:b4:22:16:98:17:cc:10:
c1:a6:b8:0c:fe:0b:b3:8d:ba:7e:39:81:b1:1b:73:
82:18:d7:45:74:7e:f6:08:5e:be:07:aa:7e:96:36:
8b:0b:82:ba:d4:17:2c:59:fb:59:79:c6:40:b1:4e:
43:78:19:46:08:4b:fa:f5:20:56:00:a7:48:51:c0:
88:b4:4f:98:88:92:3c:12:91:81:f1:c7:45:ed:04:
a9:75:be:de:e0:32:21:57:74:ff:a3:e7:a4:d4:99:
97:62:49:ee:3e:89:13:94:fb:86:cb:31:d8:e8:00:
a5:60:8a:dd:05:06:63:73:88:44:e2:2a:e3:57:14:
7d:27:61:a0:be:b6:b3:81:9c:16:a5:b9:93:f5:87:
1e:bc:16:3d:44:0e:07:d4:bd:c9:75:af:20:15:09:
12:c0:bc:90:cc:cd:e9:23:69:5d:ce:56:2f:a5:08:
72:37:de:c5:80:cb:6d:07:38:63:4a:e2:f9:6b:f9:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:9B:1E:6E:6A:51:BF:4F:15:33:DC:5B:9D:9A:A1:A8:03:99:20
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
88:86:1c:ef:ea:40:53:3e:8c:b6:59:3e:09:09:c5:ac:44:32:
69:79:77:fa:d6:fa:8e:64:c5:f5:4a:67:c8:29:6d:32:20:39:
b4:c1:51:e5:c6:47:f3:cb:7b:48:71:49:68:a0:64:43:22:ce:
ae:79:d2:ce:33:14:50:2d:3d:37:58:1e:e9:9e:62:a8:b7:25:
e4:c2:6e:7b:43:dc:54:fc:c1:d8:cb:9c:eb:81:94:a6:58:15:
76:28:8c:16:98:c0:c1:4b:65:5a:20:ac:32:a1:44:f1:84:f1:
93:bf:05:4f:b3:62:05:35:16:98:71:05:4d:b6:c4:20:e3:4e:
75:d0:51:6a:9c:46:07:57:f1:99:f1:cb:55:ff:38:84:c8:ad:
78:29:0c:c0:10:33:e3:58:9c:cb:bd:81:47:7a:b5:72:d2:18:
6a:05:10:4e:f5:5a:e6:43:b2:ce:01:2f:a5:30:28:15:9b:01:
1f:b4:4e:0a:b2:93:a0:ff:36:ed:e6:7f:8f:0d:c2:c9:c1:65:
04:eb:cb:1f:13:49:b6:b5:e1:69:19:08:7e:2c:38:9b:f6:4d:
63:38:d6:f4:8f:f6:01:53:93:aa:ac:e6:63:25:ae:b5:cd:da:
c7:50:1d:ed:21:a9:00:30:c3:f1:27:d4:71:08:e2:17:fc:0b:
56:7d:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org