Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: bBb/E6tfEYqyaf6soROQoKEIJRlS3Ggd9VoHtdkh2ig=
Subject key identifier: 2B:61:B1:16:B8:49:56:BD:AE:85:88:8B:B4:35:21:85:9E:89:DF:22
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: F70972A14FCF0D02C2D4E56792C6165CE4E7F7
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 51167
IP address blocks: 185.245.183.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f7:09:72:a1:4f:cf:0d:02:c2:d4:e5:67:92:c6:16:5c:e4:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=2B61B116B84956BDAE85888BB43521859E89DF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:55:95:b0:75:8e:14:9e:95:ef:4d:32:2a:
b3:13:0f:2a:40:8d:6d:de:1c:37:5a:e0:57:11:33:
31:9a:9f:ab:7a:67:6c:0c:d3:b2:92:1b:7e:0c:78:
7d:0d:87:b5:6a:aa:57:26:e8:fe:82:00:1a:50:fa:
e0:b2:ac:2f:32:12:c4:ae:5b:c8:01:44:e4:97:87:
02:49:52:82:73:0a:98:4f:28:7e:3a:a5:5c:dc:33:
d7:68:86:7c:10:58:38:99:cd:1c:c9:a3:2c:22:99:
53:7a:25:9a:3d:39:93:53:fe:e5:61:9b:fe:f3:7e:
ac:5c:c3:fb:c0:d8:5f:70:32:8a:98:cb:f9:49:df:
28:21:82:e9:e5:ed:b0:d4:5c:0f:7e:22:07:d2:93:
fc:0e:9f:c9:ea:52:07:97:f9:9a:fa:f5:59:9f:0f:
d8:05:53:3f:66:2e:b1:44:42:ca:4d:04:48:90:b5:
2b:7f:7c:c5:4c:77:b3:f6:4a:f7:6b:e8:72:b8:13:
9c:f0:e9:7d:c6:2f:d4:b6:20:5f:3e:9d:74:58:3c:
55:02:b4:b1:8e:01:04:45:6d:6b:9b:49:eb:55:ee:
e3:60:cf:39:09:8f:b8:f4:9e:54:ba:f2:75:dc:92:
e4:ef:9e:34:40:1c:32:54:ca:0d:2b:46:73:a6:74:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:B1:16:B8:49:56:BD:AE:85:88:8B:B4:35:21:85:9E:89:DF:22
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:3b:57:f3:f8:d8:c2:59:fc:a4:ac:43:ed:71:2e:f9:fd:
49:d0:7c:90:9c:b9:42:2e:e9:9e:e2:3f:fa:94:11:4d:41:15:
cf:12:15:f5:30:c3:0e:67:68:a3:9f:ba:08:f5:9b:e7:1a:a0:
b5:fa:5c:c0:db:17:dd:31:cd:e1:fb:c7:0e:01:81:51:ca:5a:
d0:9d:f5:d2:88:9b:1d:94:c1:43:b0:d7:bb:a0:9d:2d:5c:98:
f0:d1:6a:05:ec:c1:b0:0b:90:b7:74:c4:01:d3:1e:83:77:aa:
47:66:a7:f8:73:cb:4d:77:96:38:b0:50:5c:34:ce:c6:8a:0d:
fc:22:5f:a3:ef:7d:8d:cf:99:fc:8e:a0:a3:48:c1:f1:ce:e9:
0a:a1:b3:31:07:2a:90:bf:96:4a:39:b6:73:91:38:cc:c6:f5:
30:ee:4a:2b:44:57:f5:e9:d4:d9:ac:00:74:df:2e:2f:f1:8e:
cd:59:af:30:d2:5c:76:d9:ef:cf:ad:78:5e:14:ee:37:e2:9d:
29:44:1a:a1:7d:f6:05:00:13:c4:df:54:c8:7e:ab:b0:08:e2:
4e:4e:14:d4:07:9c:21:b1:eb:24:e4:0d:b9:a1:5a:8b:55:3a:
b7:5a:6d:c8:05:c7:aa:93:e5:58:84:9b:98:ae:24:f0:63:da:
c9:be:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org