Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
File: 38382e3231382e3230302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 9pjgClyFAbch7wHdMWVZ70U5pDGp4zB+skKyFHbi7dA=
Subject key identifier: 54:AF:35:2F:62:38:EC:00:4B:F9:07:3F:9D:1D:75:30:33:B5:8D:4B
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2A8782BB076D0AC110A627788CB892589B649188
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 0
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:87:82:bb:07:6d:0a:c1:10:a6:27:78:8c:b8:92:58:9b:64:91:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=54AF352F6238EC004BF9073F9D1D753033B58D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:03:83:17:69:7a:1b:f4:41:a2:87:f3:de:
67:e7:7b:7d:73:30:d3:6d:4b:1f:1a:49:8a:4c:24:
04:93:2e:ea:a8:84:92:27:8a:70:90:50:66:fb:c9:
a4:42:36:e0:94:5f:9b:b7:9c:45:6c:e8:2c:75:81:
cd:65:1e:25:12:2d:a6:17:53:18:ae:50:6c:97:e1:
85:d7:a2:5a:6d:72:01:2b:5e:54:2b:f2:07:1a:96:
b7:15:12:95:6e:eb:fa:48:b1:52:44:72:a4:77:26:
65:82:40:cb:9e:d8:0d:ce:b0:bb:dd:3f:96:c2:de:
e6:9c:d0:3d:d0:6e:eb:4e:83:82:87:10:9f:07:0d:
59:ed:bb:58:75:3e:af:cc:f4:f3:9b:c1:f7:2f:87:
5e:37:fb:d2:e9:86:01:e4:0d:81:ed:fa:58:b3:1d:
7f:ba:38:5f:64:35:f4:03:2c:49:f9:31:e3:7d:5c:
dd:3a:4d:84:78:56:df:f4:37:c7:fa:c6:f6:53:8c:
51:45:b3:be:4b:d4:b4:c1:72:89:b3:8f:95:51:e8:
14:85:b5:00:cd:42:c8:c9:b3:a2:7a:20:4f:59:64:
b8:8f:30:0d:a4:c8:ee:fe:30:e7:18:ce:0d:4e:b5:
f2:66:3e:51:2c:cf:0c:8d:91:6c:31:8d:1b:78:21:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:35:2F:62:38:EC:00:4B:F9:07:3F:9D:1D:75:30:33:B5:8D:4B
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:de:da:b2:44:e6:91:4d:a6:d3:a2:1e:b2:db:96:9e:7e:70:
f6:65:ea:11:69:f0:fa:9d:a8:5b:71:10:f6:bd:ea:91:cb:e8:
d0:63:e3:2c:3c:ca:6c:2e:ca:e0:ab:5f:ee:69:28:0a:7d:22:
42:c7:27:66:85:77:c6:8f:32:aa:6a:ee:84:a5:c5:5c:37:4f:
4a:db:66:c1:9e:2b:6d:0e:f4:4d:a4:33:3d:d4:e6:fc:2b:0e:
9c:61:a9:c2:0e:99:b1:94:5d:06:cd:cd:73:a4:8a:45:a0:2d:
99:4d:8d:06:37:73:c4:f2:d7:2a:dd:32:c1:54:34:b5:1e:a3:
9c:b3:1c:79:c7:9f:f0:6a:d3:6f:7f:97:d6:76:e3:e9:ea:a3:
e9:3c:41:b8:9a:23:24:67:c5:5a:e3:19:5b:12:dc:04:60:f4:
4e:5e:62:78:c3:43:62:7e:73:46:2c:b0:b9:69:68:a5:bd:df:
dd:12:26:d4:3e:5f:86:72:78:c4:7a:c5:1d:f1:01:2f:f9:36:
97:61:c1:d8:3c:8a:9b:72:fb:3d:42:cb:ba:c1:94:d3:2e:6b:
92:10:82:00:77:a3:86:5a:87:66:96:67:33:5d:ff:2e:29:66:
ce:84:e3:86:8d:6c:f4:1a:bb:67:5b:5b:12:f9:8a:3d:2d:f4:
5e:6f:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org