Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: RP+I7Mg8Sg1e2WRHCkfmfyEtex4zHyr5//gQlUAZsM0=
Subject key identifier: 29:3A:DC:45:6F:5B:C4:2D:18:C6:A1:8E:63:9E:5A:3D:EF:95:46:6E
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 637A7E41D4A036FC6AB7B8B375CE579D1C8A0073
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
Signing time: Mon 27 Mar 2023 08:27:20 +0000
ROA not before: Mon 27 Mar 2023 08:22:20 +0000
ROA not after: Mon 25 Mar 2024 08:27:20 +0000
asID: 43260
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7a:7e:41:d4:a0:36:fc:6a:b7:b8:b3:75:ce:57:9d:1c:8a:00:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:20 2023 GMT
Not After : Mar 25 08:27:20 2024 GMT
Subject: CN=293ADC456F5BC42D18C6A18E639E5A3DEF95466E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:ee:40:1f:5e:8e:53:56:6e:f0:c6:be:3e:
08:2c:8a:95:13:63:5f:94:b9:7a:bf:d1:7b:a4:c7:
eb:90:6b:18:fb:3b:4a:f9:0e:02:11:7f:2a:89:46:
5e:03:5f:a3:ea:48:7d:43:3a:78:59:fa:66:91:03:
fb:df:03:c8:b5:b6:7e:ae:9a:4b:32:2a:d6:d8:f1:
67:26:d2:6e:d3:63:f9:45:35:b9:f8:1e:96:ab:16:
b9:56:6d:27:d3:b9:1c:e9:09:dd:cd:63:42:9c:e0:
f4:a5:b2:b7:6e:1f:b2:c7:b6:70:18:4a:c9:45:f9:
d2:ab:54:82:2d:04:e3:02:1c:47:2a:20:3f:e2:cd:
21:eb:a4:ce:c9:c4:8f:84:73:45:19:d2:e8:54:5a:
ea:35:d0:04:64:06:8e:86:1f:b6:44:0b:ac:c6:f4:
ad:7e:07:74:0f:5a:54:bd:b0:06:6e:41:a5:5f:cf:
95:b8:df:3b:54:7c:c3:e1:c9:ba:3f:6a:12:54:c6:
92:84:c0:94:0d:34:2c:63:85:16:ee:c2:58:a6:39:
b6:07:19:79:b1:2d:a7:9c:2d:04:31:3b:f9:f3:3f:
1a:be:eb:6d:fb:b4:6e:d8:da:52:04:d2:ee:59:6d:
09:d3:d5:e1:3e:c5:e2:f5:0d:9b:88:bd:b8:56:6b:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:DC:45:6F:5B:C4:2D:18:C6:A1:8E:63:9E:5A:3D:EF:95:46:6E
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b9:69:be:f1:e3:27:80:48:53:43:47:01:05:4e:1f:66:7b:
20:8b:c7:70:27:9e:e6:f8:09:b8:14:18:e2:f1:47:99:56:db:
66:aa:d5:82:f1:d7:57:ce:b1:66:e5:d0:4f:15:b7:f2:01:c7:
11:e3:48:c5:c4:4d:8b:53:c3:c3:1f:64:23:14:3f:d9:54:e6:
1f:21:a7:a3:94:f6:4c:76:78:72:72:cb:4d:72:dc:2a:1f:5f:
2b:4f:c2:7c:e0:7a:24:6f:5c:91:8a:d6:eb:2c:f2:29:1b:98:
e8:83:3a:8f:47:e6:3b:2a:85:c3:7a:98:12:82:f8:60:98:b7:
74:d7:1b:fc:4d:eb:54:58:58:27:9f:b2:27:a2:eb:4a:4b:21:
15:b8:ab:d4:24:f5:7f:0e:60:e9:51:5c:78:ee:c6:2e:d3:48:
ae:65:64:cf:2c:cb:2f:79:1a:ff:3f:1a:9f:b6:cb:a4:a9:83:
1d:d4:18:22:f6:89:d0:1c:2b:58:99:d3:09:2f:1f:d4:fc:d2:
13:cd:84:80:cb:f8:88:3e:ef:3f:9c:3e:77:44:77:23:d2:18:
39:8c:9b:cd:05:c6:4c:b4:0d:2a:78:31:27:0e:30:f2:eb:63:
ea:e6:ca:7a:5b:f0:b2:92:1a:3e:a7:73:f5:ca:68:18:0e:08:
7f:d7:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org