Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
File: 3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: xayJYF0OW28XD5XExXCark0v3Du/quHGL1dpXTH2Nxg=
Subject key identifier: 6B:58:FE:E0:C1:70:7D:5B:3D:EB:55:BB:A7:CD:07:39:CD:AB:BC:A1
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 4BD2AD91A0E6AEE05F9B62DDFC7C183932AD24EF
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 141995
IP address blocks: 185.250.38.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d2:ad:91:a0:e6:ae:e0:5f:9b:62:dd:fc:7c:18:39:32:ad:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=6B58FEE0C1707D5B3DEB55BBA7CD0739CDABBCA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:21:c9:d5:ae:35:5d:24:6e:93:00:31:9d:
72:37:3c:0a:62:9a:1c:70:62:02:18:fa:a6:b3:7e:
76:1e:4b:bc:41:fd:cb:d5:82:12:a6:6b:a6:16:6e:
71:e4:d8:6e:89:89:14:e8:25:6d:14:14:4b:50:4a:
68:92:58:48:3c:0f:40:39:f7:8c:cd:34:7b:95:0c:
03:47:ce:91:d1:3e:6c:2b:30:91:d2:9c:6d:eb:13:
1d:ab:63:a0:60:83:ce:78:ee:95:15:72:48:0d:a1:
d4:3c:3d:7f:4b:35:ce:5f:20:11:4b:09:64:ac:7f:
a2:47:f2:f8:bf:ad:a2:de:8e:33:a8:39:74:8c:c0:
41:13:98:1f:2b:fb:2e:82:2d:0b:ce:86:68:ef:a0:
ad:d9:d1:9e:bc:a0:f7:69:30:3c:b4:fe:88:4b:3a:
fe:a7:6b:c9:c4:6d:31:56:da:59:9d:3e:83:ed:13:
30:7b:8c:12:3a:98:10:a7:54:f0:96:df:40:33:dc:
81:6b:3b:e1:95:e3:0b:56:0f:70:c1:2a:4d:ff:b8:
f7:a4:fb:22:98:ed:9b:17:d6:98:21:5a:5e:99:60:
bc:13:b0:91:0e:fe:4b:1f:d5:dd:b6:00:40:87:26:
61:66:e9:52:4a:3a:85:9c:ab:c2:cf:b7:68:b4:47:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:FE:E0:C1:70:7D:5B:3D:EB:55:BB:A7:CD:07:39:CD:AB:BC:A1
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:90:59:2e:39:e4:a0:39:03:06:b5:23:84:3a:2d:f6:ee:
64:bd:42:5e:10:84:33:27:79:40:d8:47:a0:1c:f7:95:39:24:
d0:9a:dd:1b:87:c2:4e:72:03:ef:90:a6:9c:3b:fb:47:6c:93:
1f:3f:46:c2:68:15:ed:99:75:20:06:d3:9d:9f:ec:49:f6:02:
53:2b:fd:3f:76:33:d3:30:3d:67:c4:5e:43:ae:96:49:f4:77:
59:0f:eb:52:e8:45:89:5f:53:77:28:dd:15:0f:0c:f7:6a:12:
23:ed:5c:73:dd:7a:6f:70:09:65:f8:1e:82:77:0b:45:24:42:
ce:41:22:e3:3a:cb:64:8e:f2:5d:4a:7c:7c:1e:de:43:3d:a0:
74:52:48:18:81:c9:2e:9e:57:27:ab:e8:a6:79:52:f9:76:56:
29:8f:1b:87:be:33:5e:97:c6:97:36:7c:da:53:35:16:4c:0d:
0f:7a:ca:3e:f5:a9:6f:9e:cf:11:0c:2b:83:ec:7b:25:97:56:
4e:37:de:32:51:df:4d:17:68:f0:0a:95:cd:8a:55:0c:5e:1d:
5b:23:3c:af:96:21:87:6d:75:87:20:b2:1f:2a:25:f5:7c:03:
93:33:c6:de:f3:d4:3f:05:d1:2e:1c:19:9b:2e:16:71:14:76:
cd:2c:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org