Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
File: 3138352e3235302e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1Ex9ZBGQBloDZn2VuNwWqUh6mElnP1J6tFWJ6F45fUA=
Subject key identifier: 8D:07:64:3C:30:C5:54:8F:F3:E2:1A:34:71:BD:AC:07:8A:60:35:C7
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 28F53D61FBFD714413D5C154FC7110C61ABC3020
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 61317
IP address blocks: 185.250.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f5:3d:61:fb:fd:71:44:13:d5:c1:54:fc:71:10:c6:1a:bc:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=8D07643C30C5548FF3E21A3471BDAC078A6035C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:50:a4:4c:53:44:d3:5a:6f:b3:4c:5b:8b:
c0:69:27:4f:bf:01:fa:a1:ed:ae:6b:08:ec:c4:a3:
be:25:18:d9:e7:1e:a3:60:ab:a2:e9:59:fb:42:89:
8b:18:58:c2:94:7d:c3:62:43:d9:9a:dd:5f:8f:4e:
0b:6e:f8:6e:d3:a6:60:08:d7:96:ce:2c:65:c7:e8:
7d:c2:48:10:16:d0:9e:ed:55:92:14:c1:1c:27:08:
15:47:53:61:df:08:51:da:04:3e:20:e5:7f:4a:43:
56:9e:85:a0:d4:f3:ac:91:da:75:30:0a:e6:54:20:
f6:1c:d8:56:d9:1a:75:f7:4d:78:a5:22:ce:45:b0:
51:cb:7a:f3:41:66:c2:02:fc:98:cf:b2:8e:2c:87:
e0:62:8b:82:4e:5d:05:07:fc:a9:2a:3a:84:b6:60:
92:f1:80:20:8f:a2:3e:e0:d8:74:06:ad:de:f7:00:
a9:dd:df:9c:1a:18:95:4d:d8:35:bd:d9:84:37:cd:
0b:b6:44:a5:c2:e3:6b:fa:0b:9e:7b:58:1e:f3:9d:
81:2c:c3:07:d7:cd:63:03:e5:aa:d6:4c:a8:56:e3:
9c:10:58:02:5a:98:3f:6e:33:6d:08:92:64:52:e1:
8e:b6:f9:60:31:3b:d9:45:8c:29:aa:96:52:f3:80:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:64:3C:30:C5:54:8F:F3:E2:1A:34:71:BD:AC:07:8A:60:35:C7
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
77:65:16:42:aa:fc:84:5a:0f:0e:3d:12:b7:4b:84:12:a7:4b:
fa:de:ee:3e:03:85:dd:2e:6a:2d:d0:a8:9a:d1:4e:46:46:4c:
4f:77:ac:ab:df:03:8e:51:cd:22:02:81:54:43:d3:87:e2:26:
29:da:fa:bc:4e:a7:22:ff:5d:1c:c8:ec:8d:76:6b:a0:52:96:
4c:b2:17:5b:50:3f:c9:38:af:59:87:77:10:fc:46:29:58:1c:
82:d9:19:ae:55:3c:0f:b3:0b:8e:14:13:7d:5f:2f:79:48:03:
33:7b:f5:c5:b4:13:04:12:63:d7:7b:86:c5:15:e5:9d:e3:0e:
d5:61:1d:e8:e7:44:ff:39:08:65:c0:e7:aa:b0:5b:43:da:da:
f1:62:e2:a0:24:a6:d4:a5:5a:14:0e:0e:52:10:3c:33:0e:2c:
1e:7a:d2:ed:f3:d1:d6:d8:22:5c:f0:d2:20:b8:73:bb:6f:d8:
4b:e0:27:c5:76:e1:af:38:25:b1:51:c5:9d:4d:20:75:28:40:
16:a0:e8:11:f4:08:4f:e0:fa:0e:c6:6e:6d:8d:b6:43:c4:3e:
69:9a:e3:72:3a:ae:f3:ce:36:9a:6a:5d:e3:46:a8:3e:11:75:
16:99:be:c9:8c:66:6f:45:c2:24:99:2a:41:c4:9f:76:5a:46:
0d:cc:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:18 2023 by rpki-client on console-fra.rpki-client.org