Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139332e392e33322e302f32322d3234203d3e2030.roa
File: 3139332e392e33322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: 4KhC5qRN9zZQ1UdJ0QZfzLwaVDsBTXiG454Hy3eN0lc=
Subject key identifier: 26:D1:04:BB:E3:5B:C6:09:5E:C7:28:47:5F:CF:B3:D6:71:F5:E4:86
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5EDCFEBC03334497DAF8C88FA201CAD812878B5E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139332e392e33322e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:21 +0000
ROA not before: Mon 27 Mar 2023 08:22:21 +0000
ROA not after: Mon 25 Mar 2024 08:27:21 +0000
asID: 0
IP address blocks: 193.9.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:dc:fe:bc:03:33:44:97:da:f8:c8:8f:a2:01:ca:d8:12:87:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:21 2023 GMT
Not After : Mar 25 08:27:21 2024 GMT
Subject: CN=26D104BBE35BC6095EC728475FCFB3D671F5E486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:41:18:43:e4:4d:9a:78:3f:fd:cd:0f:63:
d0:f3:14:bb:c8:8b:a0:26:18:c8:e7:cb:3b:a0:d1:
fa:02:6d:80:b6:57:c8:34:b3:c6:9c:76:72:f2:af:
b5:32:f7:e3:28:8e:0e:21:9e:6e:ac:bc:16:bc:39:
f2:0a:f1:5a:81:67:64:30:7c:80:5e:53:64:be:dc:
e3:4d:23:02:1e:06:7b:24:b3:ad:6d:13:f9:fd:fc:
6d:5e:f1:78:42:34:3b:b5:04:6c:da:6e:c7:00:d3:
36:7e:69:8c:b4:f2:cf:ab:c3:49:08:78:91:11:54:
39:f0:29:cb:69:6f:76:00:6f:03:80:4b:c0:e2:6a:
d9:52:59:84:ce:6a:18:7f:16:91:97:78:59:21:05:
ae:eb:32:1a:49:8c:d5:50:c5:a3:48:e8:29:59:e0:
e4:73:2e:a9:50:68:ea:5d:02:80:98:0d:79:b3:cf:
be:d2:c7:43:23:7f:78:34:60:d9:b8:53:11:65:d0:
66:53:96:1c:4f:7f:57:aa:85:cb:8c:70:08:e6:fa:
d6:65:5c:38:e8:2e:71:f6:a2:4c:35:15:09:f0:c7:
ce:fc:6c:b4:6d:86:33:38:17:51:e4:bc:cf:f8:d5:
30:66:ea:65:58:e0:d6:57:2e:1f:11:39:49:7b:5c:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:04:BB:E3:5B:C6:09:5E:C7:28:47:5F:CF:B3:D6:71:F5:E4:86
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139332e392e33322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:20:ac:ad:e2:91:7a:fb:cd:8a:5d:e0:61:c9:66:eb:37:4b:
3a:81:81:db:89:61:37:c0:af:b1:00:5f:3b:53:01:a9:cb:c0:
76:e6:f3:c3:17:4b:9a:63:24:73:ca:e8:aa:df:3e:2f:4b:b2:
b4:8f:4b:67:a8:33:bd:cc:7d:76:8a:4e:d7:ac:1c:ac:f2:5d:
80:a8:5a:35:c2:02:f0:b7:1c:27:e7:4d:42:97:76:10:27:6d:
ae:38:fd:4d:64:1b:ee:4c:bc:e9:43:c0:8f:8a:e6:8f:20:eb:
be:26:6b:c2:fb:e2:b1:c3:06:9d:0b:10:5a:19:c9:b4:c4:aa:
8a:9c:a7:e5:50:08:d8:21:1d:09:b3:e5:ad:20:b6:ed:e3:b1:
02:94:b7:8f:15:38:ad:36:c6:6c:4b:66:d4:20:09:4c:ea:e7:
77:43:55:89:b2:29:2a:0c:77:93:1a:9f:24:8e:e8:be:a2:06:
87:a9:3a:c5:28:8c:2e:d8:22:2e:e4:83:4c:62:43:4f:e2:4e:
6d:9d:5a:f5:87:75:4e:96:bb:66:7d:9a:d7:da:c8:ae:b5:b0:
e7:fc:20:d1:b8:05:90:36:03:b4:20:1c:18:a3:e2:99:ac:45:
48:2c:2e:af:08:14:83:a6:1a:36:dc:ef:d9:2b:85:11:b7:b8:
a5:5c:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:19 2023 by rpki-client on console-fra.rpki-client.org