Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e34382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: jOGuFwLQnfIAoohKG38INrdLrTuGeljBuU01HedjeZc=
Subject key identifier: A7:06:6D:21:5F:1B:04:D7:3A:8D:4B:B8:18:AC:89:B8:6B:15:E6:52
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 6EA0DF81D99F449692156AC3C9C7D9C33CFA428F
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 51167
IP address blocks: 85.208.48.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a0:df:81:d9:9f:44:96:92:15:6a:c3:c9:c7:d9:c3:3c:fa:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=A7066D215F1B04D73A8D4BB818AC89B86B15E652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:81:2c:45:c6:5f:c9:25:fd:84:91:7e:51:
3c:66:2d:de:a0:29:c7:01:e5:83:44:e3:37:97:d9:
9c:28:8e:6a:2f:e4:85:6a:71:7b:13:0d:58:24:09:
5f:13:a2:5a:3d:95:67:0e:63:20:4f:93:07:d3:14:
ee:a5:62:ac:8a:7e:85:7a:d4:1a:1d:79:53:d4:4d:
f0:b3:e1:c2:9d:6e:64:c7:85:cd:86:4b:41:ac:ae:
56:2e:de:61:ce:d9:34:41:8f:7d:64:a9:2b:e8:94:
dd:49:68:16:f9:c8:9b:12:30:70:da:0c:7e:b8:e6:
5d:2b:df:b3:d0:1d:cb:af:27:b5:1b:0a:f2:4e:bc:
4a:b9:bd:01:6d:ac:88:80:0b:eb:2b:5d:6c:9f:95:
81:39:57:78:8c:cc:f8:f4:62:f2:9d:19:32:83:37:
b9:82:72:f4:81:6f:1e:79:3b:ee:79:25:ed:c2:65:
a0:72:68:c0:3f:a3:ab:65:5d:6d:34:b5:c7:41:4e:
62:86:e0:c9:51:1c:66:3a:f6:32:97:ae:fb:c5:7f:
87:2e:66:a7:37:77:53:1b:52:d8:ad:a2:77:06:68:
c9:16:90:07:21:d9:e0:fc:67:b2:f4:0c:70:ed:06:
28:be:71:5d:33:64:bb:dd:98:e6:2c:92:67:66:3f:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:06:6D:21:5F:1B:04:D7:3A:8D:4B:B8:18:AC:89:B8:6B:15:E6:52
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:29:d1:ed:58:ea:68:61:44:91:dc:e5:b7:a8:cf:24:3c:05:
e1:2c:32:a2:e4:cb:67:23:11:c1:89:9f:4a:51:55:f9:97:47:
64:01:b0:ab:be:46:b1:38:9b:7b:f6:a3:78:59:eb:9e:95:50:
fa:d0:5f:61:5f:83:f1:d6:bc:60:83:d2:05:87:7d:7d:08:0b:
2e:fc:7b:55:49:e1:22:eb:93:40:88:a8:2e:73:33:03:25:e9:
ec:f1:4b:7f:d4:df:ac:07:31:f5:d2:eb:38:8c:7c:17:7e:b6:
ab:f5:2b:2b:d0:c1:59:d2:be:e9:86:96:32:1c:b4:27:86:2e:
41:03:89:80:bc:f8:46:05:5b:be:64:b8:d4:ce:6c:1a:14:19:
f9:4b:fb:ad:df:de:41:a9:75:22:4d:c5:0c:b6:7f:ff:a5:3e:
0f:bd:d6:dc:96:8e:79:ba:01:3c:d2:b1:70:ba:ff:86:68:8f:
19:31:11:54:8f:9e:a6:f6:29:32:67:fc:4c:5e:f5:89:6a:13:
d9:f8:2b:9c:32:fe:64:c7:53:0e:90:4e:9f:d9:f7:1c:6e:4f:
fb:2a:bc:7d:7d:b9:d6:ab:b6:9c:5e:fc:15:6e:7e:56:18:4b:
59:5e:31:be:17:4b:9b:a0:5e:5d:a9:b2:33:0d:9e:7c:6c:1b:
ff:8a:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org