Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: kjzjZPM8c7EjP8Mz4EUV5XSebMh0glWvNWNqTyiSjRY=
Subject key identifier: 84:86:82:69:61:54:EC:41:A0:89:58:BB:1D:A6:10:72:94:BD:C2:25
Certificate issuer: /CN=82bc47e7793778a67b8d3cb7167e6352878ccf7f
Certificate serial: 53C36F15B77E22C584492B7D8D76116DD3F7D080
Authority key identifier: 82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxH53k3eKZ7jTy3Fn5jUoeMz38.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 147049
IP address blocks: 185.212.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c3:6f:15:b7:7e:22:c5:84:49:2b:7d:8d:76:11:6d:d3:f7:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc47e7793778a67b8d3cb7167e6352878ccf7f
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=848682696154EC41A08958BB1DA6107294BDC225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:e5:a0:52:1a:ef:ea:d7:0c:6e:95:54:2d:
67:de:59:2b:af:0e:4f:b6:86:e4:9f:37:df:c5:8d:
54:65:b7:b4:1b:d5:a3:e5:b3:9c:a7:57:87:6f:da:
81:ca:3b:d1:a4:5d:67:f6:4c:a3:f1:0c:23:1a:ef:
54:c5:76:8b:a2:24:0d:5f:14:fa:c4:dd:26:b6:d0:
c3:82:78:d3:ca:a0:46:81:86:9f:83:8a:8d:1c:2f:
ad:e8:70:7a:fe:aa:f3:74:a7:67:e2:02:f6:e4:cc:
a1:64:cc:4f:ac:75:20:ad:0a:9d:0e:cc:0c:c9:01:
89:fc:fa:59:7f:37:d6:35:3a:96:fd:fa:57:b4:1a:
5a:0c:50:3a:18:fe:e3:20:bb:37:03:35:06:03:f5:
58:ef:07:bd:1f:8c:70:28:40:6b:d6:49:2a:e3:4b:
ce:7d:62:47:34:f1:ff:76:f6:23:53:f7:bd:f0:e8:
ff:f8:db:56:ea:47:d0:23:0f:91:10:3e:f6:1e:02:
a6:0f:f7:e9:2e:ec:73:87:52:ef:05:60:be:ee:56:
d7:00:02:67:0a:a7:0c:88:9b:94:3a:d5:50:f5:94:
e1:75:74:90:82:75:5a:ec:d8:5e:20:0a:10:8e:3a:
f4:a5:50:cd:30:ae:1a:04:57:09:31:17:74:85:9f:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:82:69:61:54:EC:41:A0:89:58:BB:1D:A6:10:72:94:BD:C2:25
X509v3 Authority Key Identifier:
keyid:82:BC:47:E7:79:37:78:A6:7B:8D:3C:B7:16:7E:63:52:87:8C:CF:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/82BC47E7793778A67B8D3CB7167E6352878CCF7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxH53k3eKZ7jTy3Fn5jUoeMz38.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/219/3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.118.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b4:09:e7:7c:4e:a7:79:65:60:34:ec:dd:ff:fc:01:a6:f3:
a5:42:9e:d4:6e:05:80:22:0c:50:4a:02:9e:a4:8d:cc:23:67:
c5:0a:9d:68:1a:e7:24:2d:37:47:40:a5:c6:fc:04:14:3f:ba:
2c:ef:7e:c7:5e:4f:a6:3d:d6:42:35:26:73:3d:c9:24:01:a2:
ab:77:0e:9c:a5:f2:61:9c:08:ab:59:65:a4:03:85:03:05:95:
e0:f9:90:39:4f:ee:52:fd:33:e8:f9:0e:39:85:1c:07:fb:a3:
67:07:4f:08:ba:2a:88:44:05:63:e8:7c:6b:90:cd:06:ad:c3:
b3:c0:d0:76:68:32:39:d4:a9:38:16:f0:b5:fe:a2:46:e2:dd:
6d:3d:db:47:f2:91:71:2e:62:6e:e9:75:40:83:a0:50:13:84:
6e:63:cf:fa:99:2d:0e:f2:09:81:08:e9:91:2e:9b:5c:13:4a:
e4:10:25:42:76:d5:82:4e:0d:ff:0e:f8:51:09:fd:6d:1f:27:
56:14:80:e1:22:be:00:d8:50:84:60:67:26:96:dd:4e:31:ef:
51:d4:93:4c:5f:78:3a:9b:44:18:20:59:cf:8f:27:b1:5c:9d:
f3:17:2d:b3:25:1d:22:d6:83:d0:5f:21:67:05:43:f1:a3:4c:
1a:2d:94:17
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUU8NvFbd+IsWESSt9jXYRbdP30IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJiYzQ3ZTc3OTM3NzhhNjdiOGQzY2I3MTY3ZTYzNTI4
NzhjY2Y3ZjAeFw0yMzAzMjcwODIyMzZaFw0yNDAzMjUwODI3MzZaMDMxMTAvBgNV
BAMTKDg0ODY4MjY5NjE1NEVDNDFBMDg5NThCQjFEQTYxMDcyOTRCREMyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCug+WgUhrv6tcMbpVULWfeWSuv
Dk+2huSfN9/FjVRlt7Qb1aPls5ynV4dv2oHKO9GkXWf2TKPxDCMa71TFdouiJA1f
FPrE3Sa20MOCeNPKoEaBhp+Dio0cL63ocHr+qvN0p2fiAvbkzKFkzE+sdSCtCp0O
zAzJAYn8+ll/N9Y1Opb9+le0GloMUDoY/uMguzcDNQYD9VjvB70fjHAoQGvWSSrj
S859Ykc08f929iNT973w6P/421bqR9AjD5EQPvYeAqYP9+ku7HOHUu8FYL7uVtcA
AmcKpwyIm5Q61VD1lOF1dJCCdVrs2F4gChCOOvSlUM0wrhoEVwkxF3SFn61xAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUhIaCaWFU7EGgiVi7HaYQcpS9wiUwHwYDVR0j
BBgwFoAUgrxH53k3eKZ7jTy3Fn5jUoeMz38wDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMTkvODJCQzQ3RTc3OTM3NzhBNjdCOEQzQ0I3MTY3RTYzNTI4NzhDQ0Y3
Ri5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dyeEg1M2szZUtaN2pUeTNGbjVq
VW9lTXozOC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIxOS8zMTM4MzUyZTMyMzEz
MjJlMzEzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAudR2MA0GCSqGSIb3DQEBCwUAA4IBAQCFtAnnfE6neWVgNOzd//wB
pvOlQp7UbgWAIgxQSgKepI3MI2fFCp1oGuckLTdHQKXG/AQUP7os737HXk+mPdZC
NSZzPckkAaKrdw6cpfJhnAirWWWkA4UDBZXg+ZA5T+5S/TPo+Q45hRwH+6NnB08I
uiqIRAVj6HxrkM0GrcOzwNB2aDI51Kk4FvC1/qJG4t1tPdtH8pFxLmJu6XVAg6BQ
E4RuY8/6mS0O8gmBCOmRLptcE0rkECVCdtWCTg3/DvhRCf1tHydWFIDhIr4A2FCE
YGcmlt1OMe9R1JNMX3g6m0QYIFnPjyexXJ3zFy2zJR0i1oPQXyFnBUPxo0waLZQX
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org