Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa (raw, json)
Hash identifier: BHYFlAGONDIFfhuJprl+mAN2JMo35V8W1Rh/5ASvY3k=
Subject key identifier: 88:ED:0E:64:A4:1D:CA:17:30:37:CA:0B:52:BD:F8:44:DD:7E:19:34
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 48B207EDA36E0BCA678002AF1B34F4815162B171
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
Signing time: Sat 26 Aug 2023 11:03:38 +0000
ROA not before: Sat 26 Aug 2023 10:58:38 +0000
ROA not after: Sat 24 Aug 2024 11:03:38 +0000
asID: 198883
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b2:07:ed:a3:6e:0b:ca:67:80:02:af:1b:34:f4:81:51:62:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 26 10:58:38 2023 GMT
Not After : Aug 24 11:03:38 2024 GMT
Subject: CN=88ED0E64A41DCA173037CA0B52BDF844DD7E1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:3b:6a:87:c6:74:fb:91:06:ba:8c:65:3a:
d0:96:39:8d:fb:d2:f2:9c:0f:44:48:fd:3f:57:59:
ce:ab:76:50:71:3a:97:cf:19:73:60:ce:84:5f:28:
55:fc:a3:a6:07:ee:14:5e:25:8d:67:3e:4c:4c:ac:
c3:5d:b8:65:10:74:a3:24:30:19:59:15:e6:89:24:
8a:b6:5d:a4:7e:f0:fa:f8:a9:e4:18:a7:4a:02:ab:
a7:d9:a5:32:b7:85:91:6e:b5:af:41:fc:de:ab:b9:
85:b8:d3:76:f4:78:78:4b:0a:b8:a0:ac:75:bb:f1:
c7:ae:ed:8c:1a:03:dd:b4:a6:0c:94:6d:6e:2e:80:
41:35:57:21:29:be:83:53:12:24:f4:a7:06:43:bb:
e5:99:29:55:d7:2e:be:7b:f7:92:4b:4d:eb:6b:5d:
c4:f4:3e:0d:f3:9e:2a:a7:b5:d2:c2:0c:31:35:d8:
9e:87:6e:a7:e6:46:f9:fc:2d:d4:72:8b:3c:3b:76:
84:01:0f:2a:12:5e:0e:65:f3:cc:7a:41:58:de:93:
02:c0:ac:32:37:29:33:4e:9e:ae:0d:f0:1b:b1:d8:
57:90:ba:fd:7b:10:fc:20:39:65:04:35:01:28:f3:
98:89:9d:dd:9d:a0:09:b7:3f:62:20:e3:6d:b5:e4:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:0E:64:A4:1D:CA:17:30:37:CA:0B:52:BD:F8:44:DD:7E:19:34
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20313938383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b8:e2:1c:97:13:15:d0:c7:c1:b6:06:70:df:5b:3b:32:83:
38:5b:c5:0a:d3:b0:eb:4d:35:22:02:29:34:32:07:f5:c2:d4:
98:7b:88:76:27:48:2c:c5:69:39:2a:6a:6a:a8:fe:d3:7b:ff:
95:ad:59:3d:d0:39:85:40:37:45:32:3b:80:bf:5c:83:b5:b0:
11:1e:81:a0:fc:6f:14:cf:9a:17:93:9b:48:f9:43:81:49:14:
58:3c:de:6d:45:35:a2:a5:79:e8:77:e6:fe:96:fd:34:ed:fb:
1c:18:45:7e:ef:e7:ef:54:70:62:bb:e0:b2:b2:6d:63:e0:f9:
31:ab:86:13:b2:87:63:5f:6b:1d:90:c9:9b:5b:85:40:7d:de:
ec:ad:93:db:9e:6b:92:5b:18:c3:8f:db:0e:b7:e0:2b:43:46:
77:af:cd:71:d1:a1:5d:53:2f:fa:43:01:52:eb:46:da:9a:19:
0e:2f:d5:e4:b0:a7:aa:33:9c:ac:91:6b:82:1b:32:ee:41:85:
4b:df:b4:f2:d2:3f:0b:1c:86:dd:ee:9a:61:8e:1e:c5:c1:62:
8d:24:6d:d7:1b:a8:28:5b:06:9a:cd:83:4c:31:7e:f2:82:5c:
e5:d4:4e:ab:fc:1e:45:d1:6f:db:bd:80:ad:c4:88:5f:21:8f:
e6:d1:f6:44
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSLIH7aNuC8pngAKvGzT0gVFisXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA4MjYxMDU4MzhaFw0yNDA4MjQxMTAzMzhaMDMxMTAvBgNV
BAMTKDg4RUQwRTY0QTQxRENBMTczMDM3Q0EwQjUyQkRGODQ0REQ3RTE5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUztqh8Z0+5EGuoxlOtCWOY37
0vKcD0RI/T9XWc6rdlBxOpfPGXNgzoRfKFX8o6YH7hReJY1nPkxMrMNduGUQdKMk
MBlZFeaJJIq2XaR+8Pr4qeQYp0oCq6fZpTK3hZFuta9B/N6ruYW403b0eHhLCrig
rHW78ceu7YwaA920pgyUbW4ugEE1VyEpvoNTEiT0pwZDu+WZKVXXLr5795JLTetr
XcT0Pg3zniqntdLCDDE12J6HbqfmRvn8LdRyizw7doQBDyoSXg5l88x6QVjekwLA
rDI3KTNOnq4N8Bux2FeQuv17EPwgOWUENQEo85iJnd2doAm3P2Ig42215GyNAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUiO0OZKQdyhcwN8oLUr34RN1+GTQwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzEzOTM0MmUzMTM1MzAyZTMy
MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM4MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMKW0zANBgkqhkiG9w0BAQsFAAOCAQEATbjiHJcTFdDHwbYGcN9bOzKDOFvF
CtOw6001IgIpNDIH9cLUmHuIdidILMVpOSpqaqj+03v/la1ZPdA5hUA3RTI7gL9c
g7WwER6BoPxvFM+aF5ObSPlDgUkUWDzebUU1oqV56Hfm/pb9NO37HBhFfu/n71Rw
YrvgsrJtY+D5MauGE7KHY19rHZDJm1uFQH3e7K2T255rklsYw4/bDrfgK0NGd6/N
cdGhXVMv+kMBUutG2poZDi/V5LCnqjOcrJFrghsy7kGFS9+08tI/CxyG3e6aYY4e
xcFijSRt1xuoKFsGms2DTDF+8oJc5dROq/weRdFv272ArcSIXyGP5tH2RA==
-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org