Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa
File: 38382e3231382e3230322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: OhVZ2yMACogm/35Gg5EL1d1c4JAGQA/OFP2SHXztSxI=
Subject key identifier: C6:70:91:8D:D8:3F:D8:C3:86:AB:D1:89:73:E1:AC:A6:31:BF:1E:7C
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 046D4ED3BAC66E7468E7247B22B5ECF88BE19C8C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:25 +0000
ROA not before: Mon 27 Mar 2023 08:22:25 +0000
ROA not after: Mon 25 Mar 2024 08:27:25 +0000
asID: 0
IP address blocks: 88.218.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6d:4e:d3:ba:c6:6e:74:68:e7:24:7b:22:b5:ec:f8:8b:e1:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:25 2023 GMT
Not After : Mar 25 08:27:25 2024 GMT
Subject: CN=C670918DD83FD8C386ABD18973E1ACA631BF1E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:bc:8c:3f:17:1e:57:76:fe:75:96:fd:b9:
1c:43:65:ca:0e:b5:0b:4f:fc:80:a4:e3:54:0d:b1:
91:8d:9d:04:e2:d2:0f:3f:85:91:fd:02:bf:a7:15:
de:4c:6b:6f:0f:45:1b:42:63:06:51:3b:b0:49:60:
11:71:66:f0:95:67:16:c9:6b:e9:cf:cf:85:e6:7d:
3f:f1:90:30:e5:4b:83:09:11:fa:f2:37:3c:07:1e:
f1:79:57:3b:22:d8:d8:71:8e:4a:8b:06:76:f9:ad:
97:26:eb:db:12:65:f0:ae:d0:3e:b2:6a:ee:56:66:
3b:b7:5f:36:8b:ab:08:ac:d6:df:75:4a:69:ac:3c:
fc:23:e8:59:c2:9d:6c:bd:79:a6:af:d5:6a:54:c2:
23:44:c0:1d:65:ec:0a:8a:2e:eb:4a:e3:76:28:33:
5f:88:89:07:08:a7:c3:62:5f:f1:74:df:b5:8a:00:
3e:78:d8:45:54:e3:f1:04:39:ae:2b:af:04:bf:01:
bc:c7:75:4a:ef:6e:f8:ee:11:a3:e9:df:43:ea:05:
1b:b2:7e:9d:43:06:03:66:30:bf:4e:32:ba:11:9f:
c7:52:85:21:3e:48:50:26:41:d8:6b:7e:18:fe:cd:
40:39:d6:de:b2:72:12:2f:ad:f4:6c:95:2d:14:e9:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:91:8D:D8:3F:D8:C3:86:AB:D1:89:73:E1:AC:A6:31:BF:1E:7C
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38382e3231382e3230322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.202.0/23
Signature Algorithm: sha256WithRSAEncryption
94:65:fc:aa:c9:f7:71:f8:d5:3e:70:f1:f0:97:73:dd:36:35:
fc:ad:72:4c:b4:f5:17:de:66:dc:5e:68:bb:f1:ce:7e:3b:9b:
17:fd:f4:0b:f0:df:f8:a0:1a:3b:c2:15:90:2e:16:1c:e9:6f:
15:c4:a0:07:69:6a:17:00:8d:fb:79:6c:7d:66:15:b0:d3:f9:
28:32:cf:98:d0:92:22:89:d0:76:62:e1:a1:f8:86:87:8a:18:
85:dc:56:60:b8:8e:9e:b7:75:ba:95:c8:50:18:d6:59:8d:f3:
e4:81:5a:e3:eb:3f:02:22:27:96:01:06:85:99:b7:1a:7b:37:
d9:c9:e2:0c:b2:bb:3c:1a:dc:1f:96:14:2f:63:98:e2:21:87:
08:de:24:23:17:91:55:53:20:5d:e0:7e:0f:29:95:d9:8b:47:
47:74:fd:83:4a:c9:34:d8:d8:58:25:10:ef:f7:05:00:a8:a1:
2c:7b:e7:99:bd:21:ad:24:0c:74:e8:4a:7f:c8:07:72:6e:68:
02:2a:13:75:33:bd:ae:a4:74:1f:21:10:86:3a:81:77:a3:7d:
9d:7c:80:7e:65:8e:5b:5f:26:11:43:57:35:7a:41:98:ad:0b:
d2:f6:ff:25:70:55:71:ab:16:33:f8:43:88:b2:57:0f:6e:7e:
eb:25:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org