Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
File: 38352e3230382e35302e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: WkN6x8wzxiV4/pKop4aLyfSbLSsrxO035Bgytj5fF9Y=
Subject key identifier: EA:94:0F:C9:29:08:AD:3B:83:5C:53:32:69:D7:3B:68:1C:67:34:06
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 4D06306295886D88FED05F12C1C4ECA51381EF31
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 43260
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:06:30:62:95:88:6d:88:fe:d0:5f:12:c1:c4:ec:a5:13:81:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=EA940FC92908AD3B835C533269D73B681C673406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:68:49:65:54:32:43:15:bf:a2:a5:cd:ab:
cd:21:85:37:c8:9c:d6:1a:af:16:f7:60:ab:80:1c:
4a:6f:44:ef:b4:1c:df:c9:10:8a:86:fe:9f:20:2f:
f9:ac:dc:27:e3:14:1a:45:c1:f6:bc:9f:03:e6:01:
7e:57:3e:61:b9:03:8c:6f:60:0a:d0:a1:be:dc:69:
54:9f:4f:cb:e8:7a:0f:78:bd:0e:f4:c5:43:00:dc:
89:23:b2:d6:c0:3f:3d:0d:0b:12:42:01:cc:d7:c0:
9d:35:76:3c:42:fb:47:a9:a3:fc:b2:76:12:92:32:
8d:12:a7:9e:84:62:ed:aa:a9:dd:68:2a:c7:8d:89:
b5:11:74:c5:a5:6b:cc:24:f4:73:79:83:d3:30:70:
9c:95:e0:48:d2:cd:06:6d:68:fd:a7:b5:68:ae:07:
8e:8e:9e:21:c2:26:b1:75:12:61:33:56:47:f5:b1:
ab:a5:07:3c:9d:fb:0d:a8:f5:72:d4:10:2c:de:de:
a0:96:e6:54:30:bc:fb:2d:b3:6e:d9:8c:b2:bf:42:
85:cb:5c:35:09:5c:c4:72:8a:48:43:94:a5:4f:f1:
25:23:1e:b0:c9:01:a3:75:86:f3:ee:76:a8:42:b1:
51:77:61:bc:46:23:5e:b1:e0:86:f9:5c:4b:72:24:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:0F:C9:29:08:AD:3B:83:5C:53:32:69:D7:3B:68:1C:67:34:06
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:80:6e:4b:09:68:a4:28:74:27:42:97:63:83:b5:35:6f:60:
2b:c2:09:30:08:0a:a5:57:6b:73:43:98:e4:8b:8d:e9:0b:e8:
cc:d3:4a:2b:92:97:fc:d5:87:ea:5e:ac:f4:39:f3:d3:c1:70:
f7:6a:aa:19:24:38:25:d8:00:07:5e:6f:dc:79:02:bf:06:d5:
1a:50:8d:48:52:a4:fb:4e:80:8c:13:37:cf:ab:ae:be:e1:d9:
53:8b:80:07:b8:a4:fa:f4:be:15:61:6d:21:f1:11:e3:77:cc:
a9:5b:97:8d:ab:1b:91:23:64:96:f0:f5:34:2a:32:7d:51:95:
e7:63:b0:9d:b4:09:33:43:e6:87:ff:bc:0a:05:21:bb:c0:1e:
a1:66:44:f6:7a:a8:33:52:95:f0:ca:0f:bd:91:ae:d1:cf:87:
2c:1e:92:1e:53:7b:7c:1a:36:38:cd:7d:a2:b8:01:9e:69:ea:
06:77:70:bf:f8:6c:be:1d:51:3b:16:5f:c1:f3:19:a8:7b:3b:
70:3f:32:bd:55:a9:25:cd:b8:66:1f:5b:7e:1f:13:da:d3:dc:
42:53:00:7c:77:d4:c8:25:c1:95:f8:5c:58:2a:2a:ce:7f:9e:
fb:70:25:89:c7:96:be:9c:83:b2:58:79:dc:99:71:23:21:c9:
c3:9a:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org