Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
File: 38352e3230382e35302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: WtHkrtyqOwXEiepMfR2LP1p9wckrpTQDg6qfk4KS7yA=
Subject key identifier: A6:74:D8:BF:C5:CA:50:CC:ED:95:B0:BB:56:B2:AC:CD:38:6D:86:92
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 37E88EA69E0D93A6F9A4351C1F91BFEF0AC90DDD
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 60721
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e8:8e:a6:9e:0d:93:a6:f9:a4:35:1c:1f:91:bf:ef:0a:c9:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=A674D8BFC5CA50CCED95B0BB56B2ACCD386D8692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:f3:63:91:1f:90:37:80:73:31:62:c4:1e:
16:0a:9c:f3:d0:7d:15:90:ca:60:17:0a:27:7b:f6:
1c:9c:27:e9:7a:54:d3:ab:6d:09:a7:ab:81:f4:9b:
8e:ad:c4:c4:d0:fc:a8:08:18:5c:aa:ef:17:fe:b8:
9b:99:90:0d:24:ba:2c:96:c2:80:1b:65:bc:8f:cc:
af:a5:20:b9:84:7e:37:24:db:bc:a6:80:4e:a1:7a:
4b:81:2a:6c:0f:a3:2c:bf:a4:f8:da:ba:29:93:75:
64:1a:48:f4:e2:b3:08:96:bf:f1:86:a8:90:63:75:
f0:5b:ba:d5:49:9e:9b:0a:ee:34:14:a0:61:63:81:
a5:62:3e:b4:19:5d:37:46:73:5d:68:68:22:7d:79:
e2:93:32:16:a2:26:76:5d:96:97:86:3a:f6:21:8f:
32:ca:b1:e9:79:c9:3a:3d:b7:f6:22:f4:b1:42:1b:
9e:77:f3:b5:7f:fd:0d:42:31:6d:ab:2a:f3:7d:66:
65:46:16:ec:35:86:57:9c:b7:db:f3:ca:5b:ae:d0:
8d:45:36:17:ed:97:be:e6:bb:43:ba:33:1b:6c:87:
f0:c8:e6:93:49:d6:57:66:65:d0:79:84:77:99:b9:
34:cf:81:cd:be:8e:d2:18:ff:12:73:cc:3a:41:c2:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:D8:BF:C5:CA:50:CC:ED:95:B0:BB:56:B2:AC:CD:38:6D:86:92
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:94:a6:91:54:3b:07:14:6f:a9:d1:22:a5:ce:14:11:48:49:
36:21:66:bc:ef:06:17:1f:2f:95:b6:23:76:d0:f2:af:80:aa:
32:7a:0d:96:73:e6:e5:27:c1:68:34:57:eb:5e:db:bd:7e:9d:
20:41:b7:b0:06:c4:c1:e5:d0:d4:69:7d:14:da:13:48:20:54:
cd:0f:f3:73:17:66:0f:fa:7d:3f:39:b9:d5:26:0e:51:61:1b:
e8:c0:d0:72:0f:f8:b4:c0:c3:7c:51:f7:e5:ee:61:42:06:b4:
d2:ac:93:e3:bc:18:56:b7:4c:04:20:66:22:69:5e:87:f3:15:
c4:a7:f9:7a:5c:c8:a8:d3:e0:d0:90:be:0a:01:28:d0:be:52:
29:34:40:0a:46:9b:2d:43:5e:a0:b6:f6:5a:50:b5:48:da:a9:
25:97:ed:4c:72:e9:f4:12:34:1f:7b:28:d7:2c:3a:ab:b9:b5:
32:8f:81:ce:e9:ce:45:07:79:46:1e:06:76:4f:02:46:4c:c4:
81:1e:45:6a:fb:f1:86:76:50:a5:ff:cc:bc:26:b1:d6:e6:f6:
17:b9:05:31:ec:5e:5d:ec:5f:df:8c:7c:50:cb:bb:c5:ff:8b:
5b:81:5f:9e:49:dc:72:62:6c:25:67:88:c0:23:53:19:ce:62:
5f:f2:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org