Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa
File: 39352e3231342e3131322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: I5b8nRrsfPigK8miVwjeRShYd0K6+7wSb3OmEhs7/8k=
Subject key identifier: F3:D8:A8:DF:63:9B:F6:D7:E2:28:20:15:D7:B5:3F:4C:B7:F8:57:C2
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 0E8926C9BCE91959BF21940DE6BD784CE32F526A
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 0
IP address blocks: 95.214.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:89:26:c9:bc:e9:19:59:bf:21:94:0d:e6:bd:78:4c:e3:2f:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=F3D8A8DF639BF6D7E2282015D7B53F4CB7F857C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:af:2b:73:1f:24:9b:f9:8e:ba:3b:a6:06:
80:47:d8:e6:6a:db:bf:0c:29:28:70:15:34:92:11:
0a:93:b6:0b:17:2e:7c:1c:6c:49:0f:3a:2e:79:e1:
cb:a3:96:47:6c:e1:5f:21:8e:01:89:1b:00:0a:7d:
ea:e2:d5:37:70:7d:6e:e0:ff:8e:f6:dc:cb:c7:ad:
04:b8:73:56:de:12:ff:a2:99:b8:cc:72:34:a7:d9:
80:44:17:f1:ce:b8:df:3a:22:00:2e:33:20:17:7b:
29:6a:b8:69:41:d3:59:49:dd:bb:17:f1:70:74:5f:
8e:10:cc:f4:46:93:b6:36:91:6b:05:12:ba:08:21:
83:89:86:2c:b6:8f:31:1f:a6:bd:25:84:43:a6:f4:
07:d2:ec:e4:d2:63:af:e8:9d:ec:f6:e2:ca:e0:97:
94:26:2e:c5:1d:24:7a:2f:bd:6f:37:f9:c7:43:9d:
f5:c6:ef:d3:ed:fb:8f:a3:f9:97:5d:38:81:56:8f:
ca:c7:ba:63:6f:91:29:89:76:2f:32:72:6c:e1:da:
87:8b:5f:71:1b:0a:7a:44:1e:d5:df:7b:0a:a3:3f:
d8:8e:c2:ad:fb:7f:87:9e:f8:d4:94:9e:2e:c5:6a:
6f:4f:fc:da:07:dc:f1:8e:84:f6:3c:a9:ff:12:01:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:A8:DF:63:9B:F6:D7:E2:28:20:15:D7:B5:3F:4C:B7:F8:57:C2
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/39352e3231342e3131322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.112.0/22
Signature Algorithm: sha256WithRSAEncryption
41:94:e1:30:18:1b:62:2c:c3:76:56:9d:70:f8:4d:be:8f:d8:
1b:59:68:bc:9f:c4:61:eb:f8:83:30:09:36:68:b9:59:6e:68:
5d:e4:0e:be:f7:48:40:dd:6a:a9:c8:0b:93:8b:89:6c:7a:0f:
1d:1e:b2:d1:82:a2:f7:3b:b5:a9:f4:b6:00:ae:79:30:b0:b4:
2d:ab:2d:35:bc:fd:a0:79:df:89:ed:9f:f1:fd:66:22:a0:64:
cf:cb:84:c0:7c:24:a8:49:84:50:4c:1b:d2:83:81:bd:8b:66:
b6:00:12:53:b4:86:40:cd:2a:68:86:c2:ef:8f:6e:c7:06:9a:
84:f1:5e:a2:36:01:24:5d:e3:36:f9:68:5e:44:25:cb:f3:d3:
24:ed:b5:7f:72:63:18:1c:d0:67:67:41:c8:69:0b:ea:d5:a1:
f3:c8:28:6d:1e:d7:96:3d:2e:05:3b:9a:48:7e:d6:8f:cc:0b:
bb:01:b9:f0:a7:35:9f:87:83:9b:4b:60:18:7d:38:d4:fb:cc:
55:91:52:49:8e:2d:84:8c:d4:d0:6a:df:19:d6:bc:f5:92:d0:
0b:31:c3:dc:bd:bd:5a:e8:2a:89:a9:03:ef:eb:87:59:ea:3a:
bc:2a:44:91:ab:68:74:6a:a7:48:aa:cd:28:0b:7d:ef:4b:fd:
dc:41:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org