Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32322e302f32342d3234203d3e2030.roa
File: 38342e35342e32322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: RX4CHJuJz6JebGoagtOmuRTnxBh5oIAbfjhVgjJrC8c=
Subject key identifier: 3C:41:9D:8C:6A:0D:9B:66:C7:00:6B:C0:10:AD:D9:49:F9:E6:7C:E8
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 7808A160C07D1DA79FD42971A01452DBC5D658EC
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32322e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 0
IP address blocks: 84.54.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:08:a1:60:c0:7d:1d:a7:9f:d4:29:71:a0:14:52:db:c5:d6:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=3C419D8C6A0D9B66C7006BC010ADD949F9E67CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:5f:76:0e:ec:04:d0:01:b3:85:20:67:85:
00:5b:3b:eb:24:c3:cf:0f:03:19:36:2b:30:5c:26:
64:4d:bc:01:3b:86:e5:b1:0d:92:1c:d9:27:81:7d:
9a:8f:a3:f2:e2:61:c6:6f:e2:a3:cd:84:6a:16:c6:
64:e8:8b:e2:11:6b:1d:21:9e:80:7c:6f:68:12:74:
d2:81:a8:34:95:a7:80:9a:0a:ef:d2:dd:c6:97:39:
1d:fb:cb:6f:06:a3:67:9b:4b:6b:dc:20:67:bb:60:
5f:07:af:60:3c:be:e2:1e:10:b2:6c:c0:61:62:a5:
62:02:95:76:e9:75:14:86:9a:65:8d:ec:dd:2a:ac:
cd:07:70:ca:18:6c:54:6e:8b:28:3a:0e:04:a9:69:
f7:72:cc:a2:ff:e8:31:24:d9:5e:08:52:1b:6d:4d:
a1:10:68:0d:17:33:5c:5f:be:05:ef:03:aa:52:10:
55:0e:7d:eb:27:b0:34:cc:9d:16:70:91:6e:e2:9d:
5b:6c:6f:45:b0:4b:1e:2e:ea:e0:5a:3c:87:e0:35:
fe:aa:47:e7:4a:01:22:b9:e5:5f:01:21:c1:76:fc:
36:57:b3:65:00:17:25:7a:39:89:82:f1:00:aa:b3:
4a:56:63:33:40:10:63:ba:11:49:57:44:f1:91:c8:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:9D:8C:6A:0D:9B:66:C7:00:6B:C0:10:AD:D9:49:F9:E6:7C:E8
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:3b:1e:4b:c5:46:99:0b:83:68:cf:80:f2:19:3b:7f:c2:
f2:96:b7:08:76:a6:57:9f:9c:7e:e1:d6:34:1e:63:8b:be:67:
f7:bc:e6:b1:2b:5e:0b:06:3f:42:12:07:d7:8d:0f:2b:09:09:
2e:75:af:e9:45:f3:92:d9:95:b6:b3:b1:74:af:fc:73:f4:ee:
3b:53:45:a2:bc:7a:fd:d7:22:95:2c:e0:5f:ed:bf:15:c5:d4:
48:8e:5b:f4:55:8c:9c:59:c5:36:ec:10:19:bb:52:7f:c8:67:
61:22:a7:9e:cb:1d:bc:21:f8:ec:20:bf:fc:0e:b3:ba:56:b9:
4a:1c:3d:10:f6:3c:b8:f3:58:9b:a9:74:bd:c6:9a:d0:4e:5e:
7c:7f:37:54:9f:5a:67:67:34:e2:5e:48:12:8b:77:12:71:6b:
8a:02:bb:8b:3d:dd:ac:3c:9c:a0:84:6f:cf:a7:8b:57:f1:e2:
c9:25:ba:65:3c:c4:b5:f4:ec:61:6a:5f:7b:48:73:90:e4:e7:
3b:2d:df:6c:f8:dc:0c:c8:8d:f6:f0:f2:9f:e2:b9:19:ef:86:
4a:e0:7b:89:b3:c8:2c:fd:b8:db:4d:a1:3e:0f:bf:78:43:eb:
8d:69:3d:c0:85:be:eb:b3:47:90:75:6a:39:7e:f7:4b:2a:31:
f3:ca:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org