Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
File: 3138352e3235302e33362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: sgYZNtmgkI66H63G0N4q+XMEZbpmQn00uhfmsfPjRcw=
Subject key identifier: B1:44:4C:54:93:EA:5A:AB:00:D4:7B:BC:4C:4E:A7:DD:18:52:29:80
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 44CA7EFB40AAD41E9A1519352B25B6AB9EC2EF59
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:22 +0000
ROA not before: Mon 27 Mar 2023 08:22:22 +0000
ROA not after: Mon 25 Mar 2024 08:27:22 +0000
asID: 51167
IP address blocks: 185.250.36.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ca:7e:fb:40:aa:d4:1e:9a:15:19:35:2b:25:b6:ab:9e:c2:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:22 2023 GMT
Not After : Mar 25 08:27:22 2024 GMT
Subject: CN=B1444C5493EA5AAB00D47BBC4C4EA7DD18522980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:58:30:b4:3a:c4:f6:52:fa:26:dc:50:38:
cf:01:da:f3:1b:18:58:7d:e3:fb:ba:b6:f6:be:15:
6c:7e:6e:09:d1:49:51:40:fe:9d:69:5b:63:91:41:
2d:bd:06:99:5a:02:4c:2f:fc:f1:d7:06:01:46:d8:
4c:9c:6b:40:ec:2f:02:6f:69:23:33:0c:82:43:0e:
23:00:80:91:34:e2:89:a8:75:cd:c8:4a:70:32:f0:
d9:d5:21:b5:2c:9f:0b:a7:71:88:48:47:9a:5f:19:
67:13:8a:36:bb:42:1c:00:c9:e5:5a:7d:a1:17:99:
7a:8a:91:da:60:6e:ad:de:b3:c2:35:44:a1:3c:68:
4c:7e:e4:b2:89:4b:59:01:e0:e0:51:2b:d9:ea:bb:
27:5f:48:65:54:6c:c7:1c:96:76:8f:61:10:05:79:
ea:7c:fd:6f:cd:73:f3:37:29:6e:14:9a:2e:13:69:
fe:9f:9a:2e:76:34:71:85:76:b7:5d:03:17:d5:e8:
d9:cd:9d:4b:1e:fb:f7:9b:20:c6:db:72:3d:e5:35:
7f:84:70:f6:43:03:e0:73:69:d1:ab:4c:7b:9e:0b:
8a:a1:45:2d:4a:cc:dd:8a:60:ad:2e:8b:01:4c:b1:
18:63:3a:5d:41:50:6a:d9:e4:2c:23:9d:27:db:00:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:4C:54:93:EA:5A:AB:00:D4:7B:BC:4C:4E:A7:DD:18:52:29:80
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:29:29:d2:39:a3:54:82:18:2a:c0:de:89:05:fb:36:da:87:
1a:5d:8a:06:dd:16:d1:80:62:fc:14:1c:56:6e:43:eb:9b:4d:
98:06:17:1d:32:ca:30:ce:df:63:9f:98:f4:fc:a7:04:14:6b:
67:fd:93:bc:33:d0:57:23:79:a3:53:7b:db:7e:97:2c:83:be:
c5:fd:6f:f1:12:0d:1d:a5:c3:3c:45:c1:9b:a6:4d:98:2f:e9:
96:33:17:d4:d6:24:c5:f4:c4:92:eb:c2:cb:64:86:72:d4:68:
d7:e3:74:59:96:c8:47:80:56:5b:94:4b:f6:39:7d:96:68:dd:
56:1d:45:72:c2:98:71:18:5c:04:ac:1a:fc:d9:9f:b1:1a:7a:
3a:ab:3a:66:b0:fc:c6:61:29:d9:fe:47:a7:5d:a5:43:42:4e:
f6:46:a5:f3:43:96:69:ef:48:0b:22:21:f6:ba:6b:dd:d1:83:
f8:46:73:ee:bf:cb:56:11:c8:2c:60:0f:a7:f3:ce:b6:4a:5f:
a0:aa:f6:72:3f:a0:b6:6a:06:07:71:56:a4:c5:d7:5a:ff:bf:
d0:59:73:c9:e5:c9:43:f7:0e:56:3a:05:d1:9e:2c:6d:02:ea:
a8:24:05:54:97:db:12:9f:8a:c5:3b:3d:4c:eb:9d:fe:a6:dc:
0e:f5:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:22 2025 by rpki-client