Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e35312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: HAXFVW5zaNtWDbC43FhaN+G5a12Vayb5F0xuDdtv1Zk=
Subject key identifier: 60:BF:C3:87:F2:25:A1:B2:77:49:29:33:81:DC:1F:91:CB:20:76:E2
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 31739E5D8F5CA033DF60016E8A345D88EBB87FEB
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 51167
IP address blocks: 85.208.51.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:73:9e:5d:8f:5c:a0:33:df:60:01:6e:8a:34:5d:88:eb:b8:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=60BFC387F225A1B27749293381DC1F91CB2076E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:46:f7:9a:64:62:bf:db:55:8c:28:6a:d6:
7f:87:4d:af:92:d8:f3:29:a6:35:e7:13:29:15:fe:
eb:72:6f:bb:d1:be:6c:05:6c:77:b3:3c:a7:0a:55:
72:65:21:24:db:14:9e:ea:5d:64:0b:12:58:3d:fc:
e6:8c:fc:d9:26:5a:76:84:4a:25:a4:10:58:d7:33:
e3:1e:16:3f:6d:46:21:71:60:5d:a0:f6:59:9f:3a:
c0:d8:7a:a8:fd:eb:52:f3:6b:f9:96:49:52:1c:71:
f7:28:b5:e2:4a:e7:5e:ce:bc:0f:b6:69:90:28:fb:
c2:0a:01:fc:28:0b:5c:b7:70:b3:53:8f:06:e1:d2:
26:95:df:59:a1:8c:27:98:2f:70:62:8b:0a:82:2b:
e1:b0:63:42:24:f3:6d:64:b9:7f:d9:8e:76:cc:05:
8d:df:7e:53:3c:05:57:d3:03:38:a5:fb:e7:ba:75:
42:63:9c:86:1c:71:3a:d5:25:f7:8f:6b:fa:8a:16:
65:3f:b6:6e:a3:5c:bd:a1:59:34:ee:28:91:22:5a:
01:c8:26:0d:06:2b:51:95:b9:f5:cd:75:46:f0:49:
14:60:51:2e:82:5b:a5:13:78:88:44:3f:11:d9:b9:
84:45:bf:16:b5:a3:bb:d5:fa:cb:a6:f4:bb:77:c8:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:C3:87:F2:25:A1:B2:77:49:29:33:81:DC:1F:91:CB:20:76:E2
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.51.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e0:7a:15:46:a9:4c:42:f7:b8:a2:01:9e:f7:e8:0f:23:6a:
25:53:86:31:bf:aa:a4:62:d4:6a:97:9b:0f:fe:89:65:43:c7:
ff:2a:46:0e:ad:38:a5:52:a8:89:4d:23:e1:e4:87:73:48:85:
13:44:cd:2f:42:e0:1d:82:c6:d2:08:c7:4b:59:e8:a5:e6:e7:
e2:ef:a1:eb:da:72:e6:c3:3c:ff:34:5b:4b:2b:92:78:76:dc:
5f:c8:09:38:51:eb:3f:12:3e:93:37:a7:db:40:cc:01:f2:4c:
60:53:88:0c:9f:1e:96:d5:14:90:4d:d5:a6:ab:72:d7:05:1a:
0b:1f:b1:79:ff:b0:db:29:a8:47:90:cb:97:e3:69:ca:23:31:
b8:dc:2b:b4:60:40:05:06:6b:ba:e2:d9:d4:d1:59:10:a2:de:
b1:93:e4:71:c1:f7:ce:a1:95:e5:d4:b6:45:ef:5d:c7:2d:f3:
a6:4f:64:3d:ef:c1:ba:f6:d3:d4:90:f3:f8:a5:9e:7b:50:7c:
ca:86:22:99:a8:a3:90:42:46:49:c5:86:c0:fe:14:32:23:02:
68:d3:19:bc:34:8c:ba:65:0d:7f:c6:52:d4:01:f2:f0:40:ef:
03:9d:93:ce:88:7f:3e:77:b7:1f:1f:47:65:79:94:02:48:61:
61:e1:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org