Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323131393735.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier: rkCPKuBNonVizFIxUnFphkwkDkYvIBYRZYPycEl7Y8k=
Subject key identifier: B0:71:19:13:B2:0A:CF:4E:F0:02:50:CD:50:3B:E0:42:00:33:38:5B
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 73213A82BA027B21EBEA0FCD854538B6B82096FA
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323131393735.roa
Signing time: Fri 27 Jan 2023 00:16:13 +0000
ROA not before: Fri 27 Jan 2023 00:11:13 +0000
ROA not after: Fri 26 Jan 2024 00:16:13 +0000
asID: 211975
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:21:3a:82:ba:02:7b:21:eb:ea:0f:cd:85:45:38:b6:b8:20:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 27 00:11:13 2023 GMT
Not After : Jan 26 00:16:13 2024 GMT
Subject: CN=B0711913B20ACF4EF00250CD503BE0420033385B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:ea:2e:d9:6b:96:95:3b:a4:7e:41:2a:bb:
f3:8a:e5:7f:a5:ba:e4:2f:f6:c5:db:48:19:9e:ef:
2a:9b:0f:af:9b:88:06:dc:6c:fe:97:6b:0b:0f:ee:
f5:20:b0:b3:06:83:80:65:6e:2c:22:4c:94:4f:c6:
0b:61:13:72:5e:94:9b:ff:1f:d1:51:3f:2a:40:4e:
84:f1:e6:9c:0d:bc:99:db:9f:f0:b2:8f:7f:9b:fe:
72:7c:83:d4:0d:14:35:04:3e:eb:f3:cd:f2:08:69:
e3:16:c1:61:e9:7b:09:c6:07:46:b6:63:ce:7e:16:
73:20:58:0b:2d:83:b2:51:9c:49:51:a4:78:0f:01:
1d:dc:6e:8b:4a:2d:54:a4:eb:2c:08:83:4b:71:ed:
95:76:ec:1b:57:fb:93:a4:9c:83:83:35:b6:f4:52:
26:99:b6:69:36:3b:d5:2e:3a:ae:61:61:b3:f6:9e:
a0:4d:60:5f:40:c2:b7:f5:ea:01:bf:e9:40:eb:38:
01:41:51:33:31:69:38:20:2a:6d:b9:6a:1a:c1:d1:
e8:41:91:59:23:a8:9a:d2:03:04:0e:dd:f3:e4:5e:
55:db:17:14:fd:70:e5:31:4a:e5:ea:1a:e4:c5:54:
8b:7b:45:25:6f:d2:1b:fe:f0:90:1a:c8:9f:67:83:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:71:19:13:B2:0A:CF:4E:F0:02:50:CD:50:3B:E0:42:00:33:38:5B
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231312e302f32342d3234203d3e20323131393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b0:8b:51:a2:95:b5:9a:a0:38:c2:df:0a:4e:89:f4:46:30:
d2:0d:77:e1:c2:12:f4:7a:6a:3b:ae:e6:e9:e6:d7:6f:27:97:
81:65:9b:52:9c:1e:cc:3a:13:da:53:79:c5:ad:34:39:bc:5f:
56:4a:31:23:71:97:4f:b2:c8:97:e9:27:ca:cc:96:dd:c7:37:
62:9d:73:9d:06:bd:11:75:93:9c:fb:30:c3:4e:af:3a:ad:33:
16:5f:46:5c:7a:0b:d5:9d:06:56:bf:74:34:6a:c9:c2:ee:4a:
b0:2a:51:e3:96:41:d5:07:a7:9a:5f:66:38:a4:06:28:d3:fd:
18:c1:ed:42:42:c1:11:f2:f5:17:0b:7d:da:55:e2:92:5d:fe:
78:76:9c:41:39:b7:1f:5e:3a:eb:fe:0c:80:6e:d4:d1:9a:25:
de:18:c0:3e:1d:fa:e3:b4:4d:ce:9d:51:b8:14:a7:01:a1:c4:
4d:6e:fe:bc:0a:b0:11:62:0b:dd:b0:d4:e9:28:08:40:e0:70:
35:19:ae:7b:c7:7a:86:24:23:1e:11:be:8e:6d:77:39:31:16:
e8:04:08:e2:30:56:a4:de:cc:c2:e8:70:f5:27:8c:2e:60:6c:
5a:b8:69:6b:a9:6c:73:76:79:e9:f3:5d:2d:19:4e:0c:5e:ac:
60:a0:4e:9c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcyE6groCeyHr6g/NhUU4trgglvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzAxMjcwMDExMTNaFw0yNDAxMjYwMDE2MTNaMDMxMTAvBgNV
BAMTKEIwNzExOTEzQjIwQUNGNEVGMDAyNTBDRDUwM0JFMDQyMDAzMzM4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCouou2WuWlTukfkEqu/OK5X+l
uuQv9sXbSBme7yqbD6+biAbcbP6XawsP7vUgsLMGg4BlbiwiTJRPxgthE3JelJv/
H9FRPypAToTx5pwNvJnbn/Cyj3+b/nJ8g9QNFDUEPuvzzfIIaeMWwWHpewnGB0a2
Y85+FnMgWAstg7JRnElRpHgPAR3cbotKLVSk6ywIg0tx7ZV27BtX+5OknIODNbb0
UiaZtmk2O9UuOq5hYbP2nqBNYF9Awrf16gG/6UDrOAFBUTMxaTggKm25ahrB0ehB
kVkjqJrSAwQO3fPkXlXbFxT9cOUxSuXqGuTFVIt7RSVv0hv+8JAayJ9ngwJJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUsHEZE7IKz07wAlDNUDvgQgAzOFswHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzEzOTM0MmUzMTM1MzAyZTMy
MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM5MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMKW0zANBgkqhkiG9w0BAQsFAAOCAQEAR7CLUaKVtZqgOMLfCk6J9EYw0g13
4cIS9HpqO67m6ebXbyeXgWWbUpwezDoT2lN5xa00ObxfVkoxI3GXT7LIl+knysyW
3cc3Yp1znQa9EXWTnPsww06vOq0zFl9GXHoL1Z0GVr90NGrJwu5KsCpR45ZB1Qen
ml9mOKQGKNP9GMHtQkLBEfL1Fwt92lXikl3+eHacQTm3H1466/4MgG7U0Zol3hjA
Ph3647RNzp1RuBSnAaHETW7+vAqwEWIL3bDU6SgIQOBwNRmue8d6hiQjHhG+jm13
OTEW6AQI4jBWpN7Mwuhw9SeMLmBsWrhpa6lsc3Z56fNdLRlODF6sYKBOnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org