Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
File: 38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: GH9geuYcyEsrN58Orjs0sW1vQ6kYr+coNvV+4gMgyYo=
Subject key identifier: 98:B2:3D:5D:59:03:4A:CF:C0:03:5E:35:7E:2D:16:6C:F9:24:8D:A9
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5ADF44D25831C0369253FB3050C7E62AFE0B3E55
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 141039
IP address blocks: 83.136.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:44:d2:58:31:c0:36:92:53:fb:30:50:c7:e6:2a:fe:0b:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=98B23D5D59034ACFC0035E357E2D166CF9248DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:54:09:93:9c:df:6f:de:29:60:77:12:ee:
cc:1d:4c:6d:cf:03:cd:4e:bb:80:28:03:5e:4e:b9:
ee:98:ef:80:3a:91:76:f9:71:15:63:9d:d4:9e:68:
59:3e:d4:7b:82:e1:2e:cb:dc:21:b1:fd:ac:5f:c3:
9a:f6:f4:2c:2a:25:e2:fc:df:78:91:b8:e4:b9:cc:
07:66:f7:58:33:3c:31:ee:65:4a:5f:2e:d3:3b:a5:
6d:30:85:7b:48:53:44:33:ea:29:cc:fe:2a:9f:21:
86:3b:63:ea:5e:fb:ac:8b:d3:49:50:63:cf:c8:3e:
54:2f:c1:0f:9b:a7:f4:b2:0a:57:51:77:5f:bf:72:
e2:f0:cf:47:00:46:f3:3d:18:ea:0c:61:63:1c:68:
d8:81:1c:70:8e:e4:13:ba:da:1e:6f:ef:9f:8d:28:
93:ce:34:52:df:45:20:8a:78:0b:85:1d:28:d2:f8:
b8:ef:e8:b6:ab:83:ba:25:f5:71:a7:1d:5f:4d:42:
ab:8e:00:fa:8d:56:47:76:c2:10:7b:ab:53:09:e7:
da:b7:ea:97:8f:4f:a9:90:39:ba:86:68:ba:e2:3a:
3e:a1:0c:98:ee:a9:18:5d:99:07:0a:da:5f:9e:5d:
34:0e:35:d6:1c:20:3e:73:2f:86:81:9e:9e:38:b5:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:3D:5D:59:03:4A:CF:C0:03:5E:35:7E:2D:16:6C:F9:24:8D:A9
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.182.0/24
Signature Algorithm: sha256WithRSAEncryption
50:32:33:5f:82:ee:60:c6:4d:2c:31:15:28:fc:92:e5:32:5c:
e9:b9:65:2f:21:15:2c:da:b7:6a:45:11:4b:b8:22:f1:1f:61:
74:46:ee:8e:f0:f2:0f:ef:66:2e:18:47:af:b8:e5:68:35:c2:
07:7e:a0:1e:5d:cf:44:d4:58:ee:3e:16:04:6b:57:db:74:cd:
d9:d8:f5:b0:aa:7e:fc:49:b7:c4:80:e9:07:44:20:6e:ec:39:
c2:d3:67:66:d6:ef:eb:b9:5c:0f:24:0e:cd:db:d9:c7:32:22:
e5:82:4c:f8:5a:d7:02:77:d1:4a:91:9c:ed:84:7f:2a:ed:2f:
6b:bf:ba:b7:69:ca:82:1d:9f:84:b5:c5:3c:7b:f1:ab:cb:e6:
97:47:52:42:ba:91:be:8f:d4:64:53:92:f5:09:bb:7e:ab:ae:
a0:02:9f:56:5b:b8:6a:e8:70:60:4c:6a:c1:4f:75:ba:61:da:
9f:a1:b1:ad:16:d7:94:aa:e2:68:a6:91:61:a6:f4:a3:9f:a0:
a8:23:de:23:48:41:48:9f:b4:fa:0b:8e:25:db:83:41:41:d2:
8f:f1:92:5a:6a:19:94:0e:91:47:9f:f9:85:f5:df:7b:83:d6:
98:15:a5:17:46:4a:f4:ff:91:6e:f6:bb:b8:cd:46:4e:7e:97:
d3:07:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org