Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323038373936.roa
File: 3139332e33352e3232362e302f32342d3234203d3e20323038373936.roa (raw, json)
Hash identifier: WXVNJNusmqwxRyLzkemzxnkdMspayhg4GR5B/n3xnBM=
Subject key identifier: BB:6E:B0:21:7B:4B:05:55:D6:F9:87:D3:CC:07:4A:F7:08:90:88:45
Certificate issuer: /CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Certificate serial: 6097D28D39D8E731FC2E90A95782DF4F2EF28535
Authority key identifier: 8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323038373936.roa
Signing time: Thu 13 Apr 2023 14:19:58 +0000
ROA not before: Thu 13 Apr 2023 14:14:58 +0000
ROA not after: Thu 11 Apr 2024 14:19:58 +0000
asID: 208796
IP address blocks: 193.35.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:97:d2:8d:39:d8:e7:31:fc:2e:90:a9:57:82:df:4f:2e:f2:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Validity
Not Before: Apr 13 14:14:58 2023 GMT
Not After : Apr 11 14:19:58 2024 GMT
Subject: CN=BB6EB0217B4B0555D6F987D3CC074AF708908845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:4f:8b:ff:23:d2:4c:7b:38:bd:d3:8d:71:
3f:6c:20:3e:fc:83:32:b3:c5:b7:22:8d:7a:21:d4:
b4:1a:da:7c:40:88:68:03:29:5a:37:dd:fd:27:84:
01:2f:50:12:b7:b3:79:ab:68:6d:ff:7b:88:7a:9e:
73:97:00:4f:64:bc:93:b1:4a:0f:c4:d1:af:20:44:
b0:46:eb:ee:50:f3:73:40:16:6e:95:32:67:b2:2f:
05:e2:26:0b:bf:1a:94:d0:7c:f0:09:52:5f:d8:f9:
c6:1a:25:dc:3f:78:83:ed:c1:bd:60:b3:6b:dd:cf:
39:20:8d:24:b3:ff:3e:e7:75:64:90:e6:7c:0c:3c:
dd:bd:5b:60:da:b6:b5:57:74:29:0f:e7:10:cf:d3:
d8:ce:56:4c:17:9d:fc:40:91:34:02:09:af:7b:e1:
a3:39:7e:39:dc:aa:98:36:7e:27:7d:74:1e:a8:f7:
2f:ea:6e:5c:5a:85:d1:b8:41:81:02:65:b5:37:7a:
49:ab:d1:8a:6f:80:5f:bd:9b:b5:fb:3f:c2:49:a9:
13:6d:88:0f:a6:55:73:e4:b5:88:26:9a:24:c8:d0:
75:64:23:9c:3b:68:9d:36:5b:c4:af:f6:fe:73:4a:
a6:af:65:7e:cf:1c:34:32:54:d8:ad:ab:20:32:36:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:B0:21:7B:4B:05:55:D6:F9:87:D3:CC:07:4A:F7:08:90:88:45
X509v3 Authority Key Identifier:
keyid:8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20323038373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cb:e1:1e:43:3f:68:05:43:07:d2:07:63:07:70:16:6f:2d:
88:ed:f9:03:ce:cb:8c:28:79:e4:fc:69:12:ba:5f:b0:e1:01:
f9:df:7d:e5:a3:67:e3:69:21:c6:1f:37:74:b2:d9:3e:e7:a6:
f4:c9:dc:7d:b1:91:c9:cc:ac:a6:c8:d0:81:be:29:80:bb:7c:
58:de:93:d4:ac:33:e2:10:40:98:41:92:55:e7:12:62:91:d6:
22:fa:fa:0e:22:dd:5f:f6:79:d1:91:14:c1:97:28:8d:d9:58:
84:40:2c:ec:51:f0:43:cd:c4:78:de:65:d1:ad:96:41:94:43:
49:98:63:16:d0:60:e4:17:b2:95:ee:9c:a3:35:3b:7b:aa:e7:
71:06:73:ca:06:4b:23:20:3d:a6:0d:f5:bb:c6:3d:14:7d:05:
bb:84:42:3d:f1:48:81:89:0a:18:c7:16:5d:7f:d8:54:33:70:
17:6d:04:da:5b:9b:65:c5:6c:17:1b:0a:0b:60:62:09:8c:f3:
1b:7a:9d:1a:b5:59:44:2b:cd:bb:09:51:a8:82:cd:52:b6:15:
d5:b1:58:84:88:d9:ef:e8:2d:84:6b:c1:3a:c0:97:a4:03:d9:
f3:f6:72:d5:08:ce:12:ac:54:eb:2d:86:b1:dd:bf:e3:89:af:
d3:c5:82:3b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUYJfSjTnY5zH8LpCpV4LfTy7yhTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGZmYjViZjhjZTQxMDZlYjI3ZDA1YmRiN2Y4MWY2MGI0
MGU0OGViODAeFw0yMzA0MTMxNDE0NThaFw0yNDA0MTExNDE5NThaMDMxMTAvBgNV
BAMTKEJCNkVCMDIxN0I0QjA1NTVENkY5ODdEM0NDMDc0QUY3MDg5MDg4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3E+L/yPSTHs4vdONcT9sID78
gzKzxbcijXoh1LQa2nxAiGgDKVo33f0nhAEvUBK3s3mraG3/e4h6nnOXAE9kvJOx
Sg/E0a8gRLBG6+5Q83NAFm6VMmeyLwXiJgu/GpTQfPAJUl/Y+cYaJdw/eIPtwb1g
s2vdzzkgjSSz/z7ndWSQ5nwMPN29W2DatrVXdCkP5xDP09jOVkwXnfxAkTQCCa97
4aM5fjncqpg2fid9dB6o9y/qblxahdG4QYECZbU3ekmr0YpvgF+9m7X7P8JJqRNt
iA+mVXPktYgmmiTI0HVkI5w7aJ02W8Sv9v5zSqavZX7PHDQyVNitqyAyNk6VAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUu26wIXtLBVXW+YfTzAdK9wiQiEUwHwYDVR0j
BBgwFoAUj/tb+M5BBusn0Fvbf4H2C0DkjrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExZjA4NWItNjU4Zi00NGViLTg3ZTUtMzYyYTQwYzdl
ZWYxLzAvOEZGQjVCRjhDRTQxMDZFQjI3RDA1QkRCN0Y4MUY2MEI0MEU0OEVCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pfdGItTTVCQnVzbjBGdmJmNEgyQzBE
a2pyZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExZjA4NWIt
NjU4Zi00NGViLTg3ZTUtMzYyYTQwYzdlZWYxLzAvMzEzOTMzMmUzMzM1MmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzNzM5MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBI+IwDQYJKoZIhvcNAQELBQADggEBAAXL4R5DP2gFQwfSB2MHcBZvLYjt+QPO
y4woeeT8aRK6X7DhAfnffeWjZ+NpIcYfN3Sy2T7npvTJ3H2xkcnMrKbI0IG+KYC7
fFjek9SsM+IQQJhBklXnEmKR1iL6+g4i3V/2edGRFMGXKI3ZWIRALOxR8EPNxHje
ZdGtlkGUQ0mYYxbQYOQXspXunKM1O3uq53EGc8oGSyMgPaYN9bvGPRR9BbuEQj3x
SIGJChjHFl1/2FQzcBdtBNpbm2XFbBcbCgtgYgmM8xt6nRq1WUQrzbsJUaiCzVK2
FdWxWISI2e/oLYRrwTrAl6QD2fP2ctUIzhKsVOsthrHdv+OJr9PFgjs=
-----END CERTIFICATE-----
Generated at Mon Sep 25 12:06:45 2023 by rpki-client on console-fra.rpki-client.org