Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
File: 3139322e3134352e38332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: MlvUR3m418Y2r07bn8quorUqsuai42bYZ9i0WGMirX0=
Subject key identifier: 74:95:0D:26:08:2C:EB:7B:51:13:97:0D:6A:13:A0:51:1B:E2:32:A5
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 500FC52702FC686D5BF9BEDF4BFB0CBB62DF88A2
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
Signing time: Mon 27 Mar 2023 08:27:24 +0000
ROA not before: Mon 27 Mar 2023 08:22:24 +0000
ROA not after: Mon 25 Mar 2024 08:27:24 +0000
asID: 20473
IP address blocks: 192.145.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0f:c5:27:02:fc:68:6d:5b:f9:be:df:4b:fb:0c:bb:62:df:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:24 2023 GMT
Not After : Mar 25 08:27:24 2024 GMT
Subject: CN=74950D26082CEB7B5113970D6A13A0511BE232A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:b6:bd:2a:6c:c9:7a:ce:1c:a0:b1:e0:24:
8f:d6:a4:57:6f:bd:13:27:b0:f3:63:91:d6:e5:8f:
21:fb:79:56:f8:43:98:c9:48:05:86:cc:50:e1:ad:
25:b7:2b:f7:16:bc:ea:c7:03:06:33:82:22:d0:13:
37:e9:14:23:fd:76:fd:7a:c8:a4:ea:b3:bf:56:4a:
aa:78:87:91:58:ba:a0:02:b2:40:4d:fe:78:98:7b:
0f:52:d1:3b:8e:cb:77:78:8d:67:6e:18:45:bd:b1:
8b:85:9c:6d:38:61:5e:1c:16:34:a5:26:4e:1a:33:
27:f1:ce:9c:ca:90:ec:82:b7:22:d4:45:48:b5:18:
bb:ac:05:c5:b4:73:51:2d:c4:72:9d:9a:48:ef:84:
a8:8a:84:01:80:77:59:af:58:2a:10:03:d0:89:80:
12:70:b3:46:6b:99:77:ee:5c:eb:85:e0:8e:29:46:
ad:15:94:a9:be:78:0e:00:ad:00:d0:73:e9:b9:72:
d4:ca:b0:59:a4:f8:db:87:7a:09:38:9e:a2:ec:10:
6e:c7:06:5b:b0:b2:d5:9d:73:94:c8:ad:78:42:f3:
e6:52:71:83:52:74:76:8f:cf:ea:42:f2:02:a6:fa:
0d:59:1b:36:8b:9a:54:1a:9f:6f:1f:1a:59:26:97:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:0D:26:08:2C:EB:7B:51:13:97:0D:6A:13:A0:51:1B:E2:32:A5
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
91:74:19:8b:9f:32:d4:ba:16:b9:c4:1e:cc:71:77:c3:92:8b:
1c:29:e3:19:27:e7:b6:2b:9f:a9:34:47:8e:12:87:d4:e0:a7:
5c:c5:9f:7f:da:13:c4:72:9a:27:3b:01:94:91:95:12:56:0b:
08:39:7d:f6:4d:c2:dc:ce:1f:15:dc:36:3a:ce:e9:2e:d4:8a:
7d:49:9b:fb:88:07:90:38:16:bf:b5:2b:ef:c6:c8:f9:3a:db:
d8:c6:d4:0b:14:f2:50:34:1d:71:25:38:27:dc:f6:06:77:62:
29:a3:64:db:92:f7:b1:01:73:4e:31:7e:f0:2d:ac:69:c6:50:
8e:59:f3:d9:8c:74:fe:71:5c:40:e7:12:d3:f2:78:72:14:e1:
9f:aa:f8:db:cb:35:cc:5d:2d:da:24:dd:d1:ae:35:30:ff:f4:
58:79:3f:17:26:0e:3c:a9:ea:55:6b:3d:4f:75:9d:e1:3f:c9:
a0:4a:ec:19:7b:87:09:6c:9f:1b:f7:cf:30:e3:de:d9:06:87:
0c:f9:aa:91:6c:be:18:d7:79:cc:d1:aa:ec:98:ff:0b:5c:94:
c2:98:d1:8a:2d:ea:87:fb:aa:cc:c4:01:d9:41:aa:7f:ff:a1:
46:81:78:68:47:ff:a4:dc:47:8a:7b:71:2c:d2:f4:00:51:a7:
a3:f0:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:19 2023 by rpki-client on console-fra.rpki-client.org