Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa
File: 3139322e3134352e38302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: LAFNsZUJynlZUkn9em9M3xvRzEWrUbz7K9FkoSp+TaU=
Subject key identifier: CF:EC:62:E9:02:CB:17:AF:7F:D0:D8:27:64:42:21:73:2E:0E:1B:CE
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 759BC99E5188CD360EDD845E7F2A1988AE5DED77
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:20 +0000
ROA not before: Mon 27 Mar 2023 08:22:20 +0000
ROA not after: Mon 25 Mar 2024 08:27:20 +0000
asID: 0
IP address blocks: 192.145.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:c9:9e:51:88:cd:36:0e:dd:84:5e:7f:2a:19:88:ae:5d:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:20 2023 GMT
Not After : Mar 25 08:27:20 2024 GMT
Subject: CN=CFEC62E902CB17AF7FD0D827644221732E0E1BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1f:2c:be:44:af:48:63:80:6f:f8:cd:6f:e9:
a3:b9:2b:a4:39:50:c7:bf:95:33:6a:3e:13:44:b0:
a7:ff:dd:68:e5:f6:ea:40:48:4c:f2:c4:31:35:04:
8b:41:e5:fb:75:0c:87:a3:28:63:9b:80:f8:67:0d:
31:e9:20:38:c1:5f:c4:b8:43:ae:23:19:7e:d6:ee:
b4:03:ab:6b:c7:6d:fe:86:fe:1f:0c:bc:2e:aa:75:
2a:2b:88:8d:d0:e8:02:97:d8:d7:5e:ff:16:be:fd:
52:a4:d2:60:c4:86:7c:50:be:69:e9:b5:78:7d:51:
3c:27:51:52:dd:5a:ef:bd:9f:8a:ae:eb:ae:91:63:
af:5b:8d:a2:c6:9c:be:14:55:1a:5e:fb:ba:9f:33:
59:0a:a0:bf:f3:56:df:4a:b5:7f:ef:97:79:82:4e:
5c:de:91:ca:0f:28:0b:02:ab:ed:8e:b3:a1:42:7f:
17:f0:42:0d:10:9b:54:d9:c8:9b:49:69:e1:b1:dc:
70:b9:3e:75:69:61:01:84:55:26:0f:f3:20:85:d6:
13:bf:c0:78:74:b1:a2:b1:b9:8b:56:09:a4:1d:21:
6d:f2:0a:bb:fe:94:76:2d:ff:44:f2:0c:65:0d:f0:
3b:47:3d:38:0a:7a:a1:d7:1e:01:24:5f:2f:c8:fb:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EC:62:E9:02:CB:17:AF:7F:D0:D8:27:64:42:21:73:2E:0E:1B:CE
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ac:69:2d:70:85:69:c7:30:38:c1:c8:c6:b3:d5:fe:a8:83:
40:ef:7c:c6:d0:3d:b6:1b:00:89:43:08:41:58:60:6f:d9:98:
05:05:54:c7:b1:47:88:36:a8:1f:79:62:c4:9f:fc:56:81:51:
99:12:b1:94:91:51:ca:f5:e6:f8:4d:a1:fb:6a:99:6c:0c:6a:
58:2f:b7:ed:e8:5a:3b:bb:3e:07:26:d7:41:9d:40:ed:6a:eb:
2f:88:e1:08:d3:5e:38:9a:c4:f8:e7:83:89:10:8e:05:81:f4:
58:86:37:28:11:50:a7:35:f3:9f:e9:c3:d3:55:1a:71:e6:f5:
57:b0:a6:49:5b:28:71:51:f3:e7:f1:3c:aa:bc:bd:cf:91:42:
bf:da:f0:ff:9b:e6:f1:20:59:c6:84:9e:cc:e1:ed:21:df:f8:
b0:75:e2:29:de:64:3d:9f:42:34:d5:c0:68:23:46:3b:8a:21:
fe:e0:6c:16:98:da:cf:14:bb:db:80:d7:dc:45:28:3b:89:a9:
eb:d8:6e:c0:9c:ae:1c:33:fd:a3:e8:df:35:55:2c:aa:5b:c1:
e8:04:dc:69:2a:23:b0:0b:e1:3d:0f:4f:23:4a:fe:93:f9:fe:
ac:e0:24:42:82:0b:e0:9b:b6:e6:7b:ea:1a:46:bc:5f:e9:7b:
65:ab:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org