Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
File: 3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: BI3B6gg0G/dwdECoOF6rIvpdbUu5gD6/IegghfZ0dAc=
Subject key identifier: 05:AF:9C:9E:B8:A7:DA:53:BD:48:A4:80:2C:1C:DE:58:E4:9B:78:7E
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 0ADBF2F77B95FC9872375228FE04C448032000B7
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 47583
IP address blocks: 185.245.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:db:f2:f7:7b:95:fc:98:72:37:52:28:fe:04:c4:48:03:20:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=05AF9C9EB8A7DA53BD48A4802C1CDE58E49B787E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:93:65:02:fc:8c:44:31:b4:d9:1b:12:cd:
4f:41:0e:ff:8b:e9:82:be:12:2b:f5:b7:17:0b:66:
67:89:ff:43:42:67:65:a5:b8:1a:d4:61:b8:e8:5c:
c4:b5:15:42:28:1b:67:cf:e4:90:03:48:62:b4:ca:
b4:5e:fb:ef:75:1e:d1:19:51:dd:de:e5:10:b4:0a:
23:a4:08:45:d1:1d:31:42:a7:3c:e0:d3:05:c3:bb:
fb:4c:19:63:ae:96:c6:42:ba:61:bc:5d:fe:70:03:
59:c3:0c:1f:b8:d7:45:7e:8c:84:d9:1d:c2:d2:e2:
c9:b1:83:12:04:8b:26:82:59:dc:d6:bc:87:17:c7:
ec:93:ab:44:cb:7e:62:f4:15:d7:bd:e9:59:17:2a:
30:5b:3c:e7:14:a9:e8:61:ed:64:27:60:c8:ec:13:
e1:c0:a8:b7:3d:06:ac:b1:72:e8:d0:8d:ab:21:13:
59:77:7b:a7:2b:bb:af:d1:ff:c0:ab:1f:08:49:5e:
9f:a9:aa:2f:59:6b:e4:14:45:f9:b9:ff:cb:3a:4a:
67:cf:22:e6:20:19:60:3e:cf:d8:87:e3:4c:73:39:
8e:24:8f:74:5c:51:37:d5:ec:63:9b:40:e3:67:b2:
19:2c:ed:c4:4a:0f:19:c1:fd:ec:9f:c4:16:a2:ed:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:9C:9E:B8:A7:DA:53:BD:48:A4:80:2C:1C:DE:58:E4:9B:78:7E
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bc:3e:a3:35:76:06:d1:14:e8:37:f6:b9:07:8b:bd:f0:d6:
73:80:d9:51:54:54:85:54:e5:cb:2c:de:63:e3:29:c5:9e:76:
69:d7:c1:37:97:de:84:34:46:d5:24:0c:1c:c8:12:b1:25:76:
3c:7c:e8:c6:25:c0:4a:33:d2:29:74:1e:ca:dd:73:b3:0a:fc:
65:99:53:3f:e4:94:d3:56:d8:5f:e1:11:20:e8:90:da:c9:5d:
e3:33:ee:88:b2:a6:2c:17:4e:b2:a7:2e:3b:ce:8c:83:5d:d0:
95:61:b3:8d:f4:74:fa:d4:42:c9:82:81:41:89:ed:aa:6a:8d:
8c:5b:cc:ea:74:8e:51:5f:80:a8:1e:5c:4e:4b:5e:b7:c8:16:
31:35:93:7f:e3:e3:7f:44:10:67:a7:11:78:b5:df:52:a9:b9:
e1:ce:93:ca:09:51:43:e1:29:98:04:4e:ea:41:1b:6a:d9:7e:
f4:36:7a:ab:75:89:3a:45:28:09:eb:00:65:c7:ab:b0:66:ff:
ad:98:39:56:83:7f:5e:f0:0f:12:ae:59:2c:04:42:2c:55:18:
67:b9:35:1a:8b:a6:a9:63:41:30:d7:a1:e9:f4:d6:d1:11:22:
b0:ee:91:b9:ac:d9:77:a6:cf:4f:8a:e8:07:ce:f1:66:f2:1a:
b1:de:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org