Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e20383334.roa
File: 38352e3230382e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vZhlC45kB9aM9ubjftNef6yCtRIWGaNPa49SzMkWR8Q=
Subject key identifier: 20:C1:04:6F:F8:6A:D9:73:D0:43:B8:D8:D2:72:C8:13:E8:B4:79:4B
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 549A8DE310D28C11CD013EE2F5374AC77588961D
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Aug 2023 08:04:50 +0000
ROA not before: Fri 25 Aug 2023 07:59:50 +0000
ROA not after: Fri 23 Aug 2024 08:04:50 +0000
asID: 834
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9a:8d:e3:10:d2:8c:11:cd:01:3e:e2:f5:37:4a:c7:75:88:96:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Aug 25 07:59:50 2023 GMT
Not After : Aug 23 08:04:50 2024 GMT
Subject: CN=20C1046FF86AD973D043B8D8D272C813E8B4794B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:15:cd:59:88:28:97:0f:a6:02:46:98:38:
da:87:e8:87:5d:8f:eb:ad:7b:31:db:2e:b9:89:b5:
9a:c6:55:86:7b:b6:ab:39:57:74:85:6b:23:7c:ee:
5f:45:38:20:43:df:b3:de:b4:eb:f9:0e:d8:0d:69:
31:38:75:a4:f3:65:30:09:f8:e0:f5:5d:ef:7e:9d:
37:28:9e:d0:0b:81:30:45:6c:21:12:b6:02:3d:43:
d4:f5:ee:61:d8:88:94:e7:77:62:a1:44:db:61:90:
43:17:c7:78:f4:a5:10:59:ba:95:4d:e1:0d:d0:87:
b5:51:60:18:76:e5:12:08:ba:cf:5e:f8:d3:c0:a2:
69:93:f7:3d:f3:77:9a:a8:66:ee:de:d0:b4:90:73:
97:3c:d7:b6:ac:43:ab:3c:a5:74:c5:b7:79:8c:26:
18:84:6a:5b:6a:af:43:84:e4:8f:d8:d1:f8:cf:51:
57:54:a0:35:75:61:0e:f4:6c:b1:4d:55:ab:3b:fb:
bd:18:43:fe:c8:e6:df:2d:d9:21:59:d9:1e:c5:2e:
98:2e:e0:27:b4:49:2e:46:73:12:43:65:89:6e:f4:
f1:5b:bc:6d:68:57:ef:0a:c2:bb:c6:2b:96:2e:3a:
a9:d8:ef:09:ee:65:86:5c:17:39:f9:41:b4:19:f5:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:04:6F:F8:6A:D9:73:D0:43:B8:D8:D2:72:C8:13:E8:B4:79:4B
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e1:8b:f0:94:17:fe:21:09:a1:1e:8f:21:a5:33:f2:e5:e9:
cc:72:0d:b7:bc:af:80:a2:0a:3d:88:25:f1:44:e8:43:94:40:
0a:17:09:46:a6:ce:9d:5b:f9:23:fa:45:6d:43:b2:2f:95:74:
23:89:a1:90:4d:1b:24:f9:75:fd:b5:89:00:fa:04:b7:22:f8:
f2:fc:43:7f:25:57:c2:95:84:b9:79:c5:d3:2e:9b:27:0e:94:
bf:c1:6b:90:ea:0c:5f:90:2c:b7:15:d2:af:ad:ea:e0:39:7d:
34:da:07:af:04:c6:8d:63:2d:6f:69:97:fb:8e:fd:38:b2:89:
fe:99:ad:af:01:27:f5:16:6b:1e:8f:ef:66:b1:e1:ab:5d:1e:
b8:ed:15:0a:0b:f9:f6:05:ff:1e:04:5d:5d:1d:0e:eb:21:2b:
e7:3c:da:c0:49:7c:0e:9c:76:92:4f:af:7e:ec:cf:fb:a2:f3:
59:50:40:df:85:12:36:60:29:05:74:50:74:ae:ca:95:fc:6f:
e4:d0:b7:18:15:c2:ea:12:2b:18:0a:91:7b:82:1f:24:77:ba:
98:f1:ea:7a:d3:5e:20:98:4a:36:d3:c6:17:15:42:6f:f6:b8:
aa:cf:33:d2:4a:f5:db:d0:2c:1b:1e:53:ed:08:05:32:5d:6e:
51:65:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org