Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 4y5wPMTVrhryC0NZ3z0Rm4PHN7Oya8AsEMKMsP5j5qI=
Subject key identifier: 21:1D:FA:AA:3D:10:3B:CD:B7:C9:39:28:04:85:07:EF:B7:83:4F:5F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6876FA3A0601CEE641A599486343AB01C35E62B9
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 60721
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:76:fa:3a:06:01:ce:e6:41:a5:99:48:63:43:ab:01:c3:5e:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=211DFAAA3D103BCDB7C93928048507EFB7834F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:a0:c4:f1:9a:61:3b:a1:bb:ee:12:cc:f9:
6f:7f:94:f4:f8:4f:fb:37:aa:58:21:6a:5d:46:41:
5c:23:61:c7:eb:3d:fd:f4:74:d6:c0:33:10:a5:a1:
94:31:80:e4:b5:63:37:e8:a4:10:6d:0f:55:93:74:
92:cd:f9:ef:b1:54:61:89:02:7f:f4:60:83:8c:6d:
77:83:e7:81:f1:b3:28:bc:e8:dd:7d:50:d2:1a:ec:
61:af:4f:86:26:1b:f7:f9:31:a1:de:e1:86:fb:a5:
6f:8f:ea:6a:4e:5b:fc:d8:ab:19:7e:6a:33:74:ba:
b5:2f:2b:e0:34:f9:d4:f7:2a:33:d6:f1:a3:f6:b6:
01:d1:13:5d:54:6b:41:f3:ae:46:15:1e:a5:54:1c:
ab:fe:15:5c:71:b9:fb:f6:c3:84:84:37:78:fa:2b:
29:21:d8:49:97:24:a9:df:91:6b:a2:a7:ac:26:60:
39:85:f9:eb:48:77:dd:01:e2:8c:db:69:09:87:3d:
77:7f:ff:3b:ac:5c:6f:3c:b2:bc:31:3b:a6:ea:5e:
38:c0:44:14:46:1d:1b:bd:fb:90:80:01:92:87:e5:
0f:44:53:0d:e0:58:b9:17:ae:b3:6d:09:55:4a:5e:
7d:b6:21:ae:1a:b7:b1:d5:42:04:9d:6f:c3:0b:b7:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:FA:AA:3D:10:3B:CD:B7:C9:39:28:04:85:07:EF:B7:83:4F:5F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138312e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:75:c2:78:03:5c:b2:65:ad:86:4a:4e:90:44:0d:34:d7:bf:
ff:a1:66:fc:39:75:2f:03:0b:ef:22:ea:e6:76:8d:27:48:61:
e5:be:9c:f5:cc:fb:6c:2d:9a:46:7a:cf:34:67:be:57:63:56:
de:e2:34:5f:de:96:0b:91:8c:1a:a3:8b:04:ae:65:51:33:9f:
8f:57:1e:d5:f9:ee:c4:45:fe:aa:63:26:81:ba:16:e4:10:95:
1e:88:ab:c5:9d:b2:ca:9c:ff:04:76:e9:38:31:a8:a8:a8:0c:
b6:2a:70:37:0a:e7:75:54:f8:ab:cd:3c:2a:91:94:d3:ff:8d:
c2:f3:30:93:29:2e:69:50:da:2a:6d:e1:60:e0:30:d6:b9:d6:
6c:c9:4e:4a:76:9b:a8:bc:32:8d:22:e1:b3:2a:f6:b7:9e:f7:
2f:d1:c6:65:37:f0:87:23:10:5b:e9:e8:25:8a:c6:c5:44:1e:
27:00:d0:1a:9f:ff:49:1d:bb:f9:53:87:82:dd:03:f8:d1:68:
27:fe:77:1a:8f:bf:b9:20:f0:2a:14:bb:83:20:7a:eb:8b:e2:
18:f3:a7:53:43:5f:e1:b6:51:91:ce:e8:97:40:d5:69:8b:bb:
29:09:7d:b1:c2:55:56:b6:89:b0:e4:5d:db:93:55:23:6b:cb:
ca:b6:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org