Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa
File: 38332e3133362e3138302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: sov336om2XxNPappEyGuT9rLr8tktXdEsJt89qzz8XI=
Subject key identifier: 78:0E:04:61:B3:A3:61:21:69:B5:DD:11:44:F1:F3:A8:39:CF:17:2C
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 55223E85D945E3B855E7DAB39452E1F4B4B4C68E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:23 +0000
ROA not before: Mon 27 Mar 2023 08:22:23 +0000
ROA not after: Mon 25 Mar 2024 08:27:23 +0000
asID: 0
IP address blocks: 83.136.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:22:3e:85:d9:45:e3:b8:55:e7:da:b3:94:52:e1:f4:b4:b4:c6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:23 2023 GMT
Not After : Mar 25 08:27:23 2024 GMT
Subject: CN=780E0461B3A3612169B5DD1144F1F3A839CF172C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:27:64:ee:cd:2e:f2:c3:0b:90:cb:ef:78:
4e:a5:c9:ea:35:9c:64:8b:d6:70:9b:b9:1b:88:04:
a9:b7:23:a4:f8:84:8e:c5:bc:49:4a:86:43:27:cc:
af:ef:0a:01:c2:fa:49:78:f3:30:7e:a8:65:f3:f3:
7d:ff:51:65:6d:56:d9:e3:8a:43:97:bd:4f:9b:ba:
19:9b:93:5a:77:6d:f3:60:54:a0:e5:01:0a:b4:24:
12:72:02:fb:fe:e8:ad:b2:f1:86:95:18:fa:28:f4:
d3:41:1d:32:67:e6:97:93:77:58:c7:4b:3b:8b:57:
b5:fb:9c:92:65:8a:8b:3c:a6:75:6b:4e:54:ab:43:
98:1d:2a:6f:68:a3:b3:2b:bf:b3:14:91:97:40:3d:
a9:43:62:4e:e8:68:75:70:13:01:94:eb:c1:f2:76:
35:eb:3e:ea:6a:e0:49:60:8c:4a:29:14:6e:91:3e:
4e:36:2a:0d:2d:a3:ee:e4:cf:17:43:2a:c0:95:ba:
79:26:a4:fa:52:2f:8e:ac:91:a7:d2:df:18:1f:b9:
c0:88:9f:c4:c4:a0:f1:6a:7c:cf:33:bb:57:1a:9b:
30:f3:51:96:9f:70:47:9c:cb:b8:03:a2:5a:4c:d3:
7e:89:b0:eb:ae:51:16:a4:29:32:d1:fe:16:84:87:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:04:61:B3:A3:61:21:69:B5:DD:11:44:F1:F3:A8:39:CF:17:2C
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:56:7d:85:96:fd:36:c2:99:98:07:a7:d4:9b:4a:19:71:cf:
13:15:89:d6:f9:ff:7b:dc:29:2a:2c:0d:51:c5:3c:30:09:a6:
c1:80:ac:1e:fd:49:eb:e0:90:dd:da:79:98:cd:76:19:7f:e9:
ea:30:32:46:d0:91:0d:cc:bb:62:63:67:ab:9b:ef:43:c9:f6:
6c:d7:9f:37:87:ae:2d:d1:53:45:df:74:32:f6:a7:e9:24:1e:
d7:73:a2:c8:ff:7f:b6:dd:de:41:56:06:73:c5:d0:13:da:38:
9e:4f:e5:66:dd:17:6f:a9:e7:98:85:c1:45:9e:02:9e:29:77:
18:af:be:3c:91:b8:58:d7:b6:6d:c7:d3:72:6f:34:d0:e3:c7:
3e:c6:4d:34:62:70:22:f9:53:81:bf:50:35:c3:97:a8:2b:74:
37:05:27:09:5b:26:ef:be:da:64:5b:39:44:e4:d1:bb:fa:5e:
10:2d:59:cb:a6:8a:81:c7:59:6d:7a:99:d9:fa:f9:b4:56:0b:
bd:75:b9:14:db:92:db:38:dd:c8:cb:8f:a3:e4:5b:21:51:4e:
b4:a2:da:c9:17:2b:c8:fb:93:58:de:6b:81:cd:68:8c:73:4d:
e2:7d:54:93:d4:21:ca:c6:9d:33:a7:90:91:8f:33:7e:39:b7:
0c:15:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org