Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: g1fj8vAxzY9aczLYraVJDtoeiHrfQ4x1lwlnjwsYIBM=
Subject key identifier: 85:69:34:BF:9A:2F:4A:16:39:AD:F8:DD:36:89:D8:6E:52:F7:B5:B3
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 75D8417CCA3B5699EBA54438DBFEB1E9B473B0F8
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 19437
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d8:41:7c:ca:3b:56:99:eb:a5:44:38:db:fe:b1:e9:b4:73:b0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=856934BF9A2F4A1639ADF8DD3689D86E52F7B5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:c4:04:67:c1:57:ba:c5:7b:d9:38:6b:68:
3b:f3:40:96:d6:b9:41:58:cf:e5:d7:00:c3:78:93:
0f:22:14:45:c0:a8:cb:e2:0b:9d:40:aa:08:27:0b:
37:c9:98:c1:03:da:a3:ca:42:2b:1c:db:06:72:9c:
56:26:92:f6:4f:45:09:0d:4f:53:86:86:fb:44:76:
3b:9a:34:82:aa:55:fd:0a:fe:3c:3e:a5:fa:a4:18:
7f:da:23:5e:5f:39:3c:4a:50:d7:89:89:78:89:1e:
e2:ee:b5:c0:6d:df:fc:1d:b6:e5:bf:33:3a:6e:89:
3c:6d:3c:09:d1:ae:fb:d6:61:8b:69:37:e7:d0:0b:
77:9e:4a:9d:83:5e:21:9a:e3:f4:c6:88:7c:de:66:
e2:35:fe:03:d7:d3:1c:c2:bd:66:ac:76:d2:73:33:
e3:57:c1:73:7b:ce:90:b9:6d:30:dd:4a:01:de:72:
75:2d:67:0c:eb:32:c5:67:03:e4:e0:a2:7c:df:93:
c0:c0:e9:4f:02:e8:99:a0:e1:62:59:46:d4:22:e1:
7b:10:65:e4:50:c1:e2:92:24:6f:74:02:59:18:fc:
9c:9e:1b:4a:7c:75:3b:5f:b1:b3:35:4f:ca:dc:d4:
da:01:b2:5d:66:a3:a1:de:1e:30:66:0b:51:e0:30:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:34:BF:9A:2F:4A:16:39:AD:F8:DD:36:89:D8:6E:52:F7:B5:B3
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9f:b5:77:38:54:74:62:0a:5e:4d:19:0b:3b:4b:d7:22:8e:
bb:58:01:a4:af:fe:06:5c:a1:68:a1:e8:cd:32:ce:88:00:92:
10:1e:f1:ec:46:7a:fc:f9:75:fe:33:31:fe:91:da:4f:e1:46:
6e:c7:cf:12:cc:9a:f2:43:86:36:b6:17:0b:10:fb:78:cd:e2:
c6:d3:f7:7e:1c:f1:e1:5f:23:a7:08:43:b0:3d:ab:39:b3:49:
07:66:e8:10:92:28:f7:2b:79:f6:b3:d0:a4:ea:02:3b:a1:6e:
82:c9:5b:20:b2:85:8e:45:9b:bb:77:13:15:ac:5e:71:0c:52:
34:2d:a2:11:b7:63:0f:cc:08:b2:b3:4d:8b:fb:f8:05:ef:63:
ec:39:80:fc:85:ba:20:1f:9f:cb:5a:06:ad:0e:75:23:06:52:
a2:f6:92:d0:a3:b3:2b:49:f1:50:9b:6a:d2:72:3c:2a:a6:65:
f8:6b:16:94:ab:6f:6e:c5:00:b3:9e:54:df:1f:2b:cc:b3:4f:
e9:5e:47:9a:74:83:b8:65:3a:ea:2b:5c:28:4f:57:7b:b3:f1:
9a:c4:f5:e3:77:bb:8f:01:e5:5b:fc:32:d7:ef:a1:ac:ac:8d:
88:d9:fa:db:19:a8:92:18:c4:97:9a:5a:ee:fc:83:1d:c8:ff:
7f:c3:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org