Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
File: 3139342e33322e3233322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: vNOZFj/BQBo0RmlPVP5WhkyeQespr8rnuhLwh6EdRJs=
Subject key identifier: 11:8C:0C:49:55:42:E9:79:E0:F5:2D:CC:4B:93:D6:80:A6:E8:7E:F9
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 65A1B1A194695FE05ECEA587896A812A2CB46098
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:24 +0000
ROA not before: Mon 27 Mar 2023 08:22:24 +0000
ROA not after: Mon 25 Mar 2024 08:27:24 +0000
asID: 0
IP address blocks: 194.32.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a1:b1:a1:94:69:5f:e0:5e:ce:a5:87:89:6a:81:2a:2c:b4:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:24 2023 GMT
Not After : Mar 25 08:27:24 2024 GMT
Subject: CN=118C0C495542E979E0F52DCC4B93D680A6E87EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:a9:47:f4:8a:d0:cf:5f:b5:ee:23:b7:4b:
17:c0:a3:99:d4:57:ad:ff:36:79:77:fb:99:ad:71:
66:4e:eb:98:91:7f:fc:fe:7b:df:20:1d:fc:1b:8c:
23:d5:61:6b:e8:e6:fb:07:d6:90:35:c6:b7:5a:c4:
40:07:f0:03:b2:91:d0:ff:cc:a8:63:a0:e5:e6:fb:
67:6c:3c:8e:d2:bd:d9:e2:ad:70:f9:a6:cb:c5:30:
fb:48:87:c5:02:4d:76:aa:2c:8d:4d:65:b2:b3:fb:
81:63:b7:df:bf:a7:ca:86:bd:b4:dd:23:69:01:48:
68:55:06:b4:30:68:4f:8d:52:01:ab:43:ac:85:8c:
44:fb:c1:53:56:5a:3f:0f:84:f6:52:46:21:2d:60:
aa:74:4f:49:73:a2:85:e7:ae:2d:d5:77:29:62:12:
c3:40:cc:45:43:75:10:a0:3a:cf:6b:cc:2d:1c:70:
b4:1b:f4:41:4c:e5:51:4f:50:2f:ce:4f:6d:39:b9:
46:8b:66:0c:61:0b:1f:ba:39:40:33:4a:a0:89:43:
13:9a:4b:8b:23:79:42:3f:99:ec:df:68:fa:eb:ca:
94:2f:b0:ac:49:77:c0:cf:b0:8d:0e:f1:81:2a:3d:
41:7c:46:da:b6:82:33:d4:60:43:19:48:7b:52:ec:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:0C:49:55:42:E9:79:E0:F5:2D:CC:4B:93:D6:80:A6:E8:7E:F9
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139342e33322e3233322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:9c:83:1e:23:3d:65:89:c7:fd:3a:4f:c8:f8:68:7c:0f:d1:
ab:a3:15:9a:b4:f0:28:e2:4c:88:16:be:f3:e8:28:74:2c:2c:
48:0f:a1:77:22:ac:d6:d9:a4:87:f0:7a:9d:e1:b1:b1:68:fb:
0f:55:85:af:c9:54:5a:11:01:96:68:7e:e5:0c:80:54:30:91:
fc:7e:f9:52:16:26:1d:cf:55:48:fe:3a:56:20:0c:84:24:71:
f3:e5:02:0c:96:e9:e5:15:3f:5a:71:b8:d1:34:7f:e1:00:da:
d4:aa:f8:00:d8:8a:63:b1:f7:61:d4:ef:35:fb:68:04:4b:59:
84:b9:09:73:1d:16:05:b7:b6:1c:48:10:6b:69:66:8f:21:3d:
22:33:b6:8c:43:3d:33:72:e0:66:8b:d8:a5:a7:3a:86:ec:6a:
27:d5:b4:7c:ef:db:f1:82:43:7a:7f:3f:c2:e4:6e:b2:21:eb:
de:91:ef:73:3d:5d:c3:77:82:f3:dd:c7:7c:13:97:96:d2:07:
22:d8:ff:3b:db:ae:d5:e0:dc:49:bc:6f:81:37:18:3c:47:b9:
a7:28:b8:ff:7d:2a:cb:1b:f8:81:5d:71:f4:02:83:cd:b4:cd:
7b:df:13:95:a0:ae:a7:34:b0:37:ef:6b:e7:3b:46:64:f3:67:
ff:54:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org