Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pQ69Js7gjOWdQxJWHGUtU9apkk0B8RrUvNiq5FbVM7Q=
Subject key identifier: AD:EA:07:56:C0:FD:59:6D:EE:D2:EB:F4:A8:AC:8B:E0:57:F5:B5:B4
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 430B15C233AB45320118416BF7506D7A1F47078E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 10:58:53 +0000
ROA not before: Sun 11 Jun 2023 10:53:53 +0000
ROA not after: Sun 09 Jun 2024 10:58:53 +0000
asID: 136787
IP address blocks: 192.145.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0b:15:c2:33:ab:45:32:01:18:41:6b:f7:50:6d:7a:1f:47:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Jun 11 10:53:53 2023 GMT
Not After : Jun 9 10:58:53 2024 GMT
Subject: CN=ADEA0756C0FD596DEED2EBF4A8AC8BE057F5B5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:72:38:1d:63:5e:81:9c:67:af:2d:12:21:
ef:89:a5:46:f0:d3:ab:63:a3:5d:82:82:17:70:76:
23:2b:17:bd:4a:fa:a8:69:d3:8e:97:f2:f8:ff:74:
d7:46:41:23:a3:fc:94:48:88:23:86:37:e5:77:a5:
0c:9d:6b:6e:1c:7c:49:25:5e:da:33:90:c2:7b:6f:
d2:f2:fb:02:c8:8f:73:e0:1b:7c:00:84:ab:d5:e6:
62:79:18:75:f9:4c:42:45:96:5b:15:ac:e9:50:e4:
25:d7:22:52:c7:a6:f7:41:a4:60:e9:cf:ca:4f:a7:
e5:f6:67:d5:a6:50:dd:80:55:27:c3:4f:29:77:16:
cd:35:65:3a:0d:08:ad:73:10:00:1d:b4:47:a6:74:
66:1f:f2:da:7c:44:f5:db:b8:6d:03:ed:f9:38:24:
01:5a:95:cb:2e:54:8e:07:ce:ee:68:bd:09:82:d1:
fe:94:80:ae:6c:18:46:04:70:6c:73:93:6d:fa:b2:
da:65:97:cc:df:62:77:c3:6f:3c:eb:f8:7d:46:1f:
a7:da:48:ba:9d:83:f5:47:68:06:18:8c:86:85:27:
46:97:00:a5:e5:63:a8:5b:d2:c2:eb:21:c4:1d:2e:
c3:7c:e7:15:08:e3:8d:54:b3:fe:6e:d9:be:61:aa:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:07:56:C0:FD:59:6D:EE:D2:EB:F4:A8:AC:8B:E0:57:F5:B5:B4
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8f:68:bc:22:74:3f:69:d4:8a:38:37:e0:10:e2:38:0c:8b:
d1:31:8a:42:7c:f7:76:d4:16:76:81:1a:65:bf:a1:ea:73:d5:
2b:63:04:e3:a8:6e:2c:77:f6:e1:23:14:1b:e6:28:eb:95:fc:
0c:59:79:6a:8d:44:63:c3:38:54:e5:bd:b2:19:71:de:33:90:
d9:37:bc:74:e8:b0:55:82:47:d0:bc:a1:30:8a:7b:8e:66:4f:
3c:b0:b4:14:9c:f8:5b:87:f3:e8:24:0e:58:b7:2a:60:44:09:
de:ea:62:c0:8d:a9:8d:b4:36:c0:e4:3e:37:70:44:8b:9d:28:
65:6d:fa:23:bf:b2:bb:06:5e:b1:c8:08:fc:fd:2d:d8:84:dc:
fe:48:7f:9e:ad:b9:86:82:fb:34:f5:67:05:71:6d:55:83:ef:
cb:e9:f5:d3:02:f0:9f:c8:53:c5:d0:16:bb:f2:00:9f:1d:d2:
3d:61:25:71:0b:51:74:8a:d8:6c:27:64:1d:43:5e:1e:53:10:
4b:24:bf:4f:a3:78:d1:a4:c3:8f:aa:15:2b:31:e4:14:22:b8:
76:ab:e6:39:d8:6a:08:ad:0b:bd:af:50:15:01:9f:60:0d:88:
ed:b2:8e:de:6e:8d:f4:d1:57:9b:4c:c1:c8:7c:0b:92:3d:e5:
48:71:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org