Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
File: 38332e3133382e35302e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier: JQV0UKjEqHp8B1iR03uxfAtpjS7jaZvSTyaPFfvLvCc=
Subject key identifier: 17:A7:B3:39:32:B6:28:F3:0F:60:58:FB:E2:04:A7:F8:0C:2C:DA:F9
Certificate issuer: /CN=1801e1e4c4d171fc85b83e824c3c8e6fa24c7152
Certificate serial: 49E7C9E3E18687AA193D070D1B44853382F3E4
Authority key identifier: 18:01:E1:E4:C4:D1:71:FC:85:B8:3E:82:4C:3C:8E:6F:A2:4C:71:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAHh5MTRcfyFuD6CTDyOb6JMcVI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
Signing time: Wed 22 Mar 2023 20:08:37 +0000
ROA not before: Wed 22 Mar 2023 20:03:37 +0000
ROA not after: Wed 20 Mar 2024 20:08:37 +0000
asID: 33696
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e7:c9:e3:e1:86:87:aa:19:3d:07:0d:1b:44:85:33:82:f3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1801e1e4c4d171fc85b83e824c3c8e6fa24c7152
Validity
Not Before: Mar 22 20:03:37 2023 GMT
Not After : Mar 20 20:08:37 2024 GMT
Subject: CN=17A7B33932B628F30F6058FBE204A7F80C2CDAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:4a:c7:d8:69:bd:32:8d:ac:0b:28:76:83:
1b:41:25:91:9d:a1:c9:6b:79:71:8b:07:58:f5:2f:
cb:46:35:69:33:43:c6:24:41:df:7e:d3:e5:cd:79:
e3:b1:ba:aa:d8:ad:73:f3:3f:60:67:f1:06:a1:bc:
a9:77:11:13:52:38:87:4b:ee:cd:23:3e:02:5d:bc:
6c:d1:4c:0f:d5:14:68:fb:0e:9c:c7:1f:ab:6a:98:
70:b7:01:cc:0a:5f:79:c7:39:85:a8:1b:f8:59:f2:
59:15:a0:2f:6f:67:0b:94:df:14:77:bf:8e:1c:b1:
b9:20:45:93:56:e3:8f:72:cd:93:7a:46:34:e1:18:
8a:de:7b:6c:9d:fe:41:a4:33:b9:32:36:4d:ea:c4:
e4:0e:7e:f0:38:84:b9:ec:67:82:7f:63:16:5e:f1:
8d:29:0b:74:28:41:8e:ff:de:16:a6:af:25:dc:28:
5a:86:bd:f8:5a:4f:03:92:d6:14:0d:3b:e2:93:af:
cd:55:7c:8f:22:18:ea:fc:e2:d9:83:f3:28:79:2e:
bd:c5:6f:ab:cf:96:16:2b:78:f9:e2:40:ab:a4:06:
02:c7:dc:7e:8d:54:e0:54:1f:db:93:f0:4c:69:c7:
a7:27:97:ac:60:1e:41:7d:15:df:d1:a8:eb:be:62:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:B3:39:32:B6:28:F3:0F:60:58:FB:E2:04:A7:F8:0C:2C:DA:F9
X509v3 Authority Key Identifier:
keyid:18:01:E1:E4:C4:D1:71:FC:85:B8:3E:82:4C:3C:8E:6F:A2:4C:71:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/1801E1E4C4D171FC85B83E824C3C8E6FA24C7152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAHh5MTRcfyFuD6CTDyOb6JMcVI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/95e3b848-5986-439a-97d2-6850d3490d8e/0/38332e3133382e35302e302f32342d3234203d3e203333363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c0:67:f2:1c:96:56:8e:af:f6:d6:25:80:ae:25:66:52:fc:
4e:47:5b:21:f3:3f:45:41:f3:34:63:8d:66:09:5f:fa:e1:ed:
56:d1:81:30:2b:0a:22:da:ad:1d:19:70:de:b3:6b:68:aa:9a:
df:01:e0:2a:60:85:e6:52:ec:46:cf:eb:9a:68:44:35:88:6b:
43:21:28:82:93:a8:25:ce:53:5c:5b:58:1e:fc:df:6e:1d:9c:
82:42:96:95:c1:7f:d7:c6:e7:1d:ae:b6:c6:d7:6b:74:6a:9c:
5a:50:06:0e:84:47:84:57:82:a8:d4:61:58:d4:ee:e5:94:18:
84:7d:7e:d1:16:ba:6e:75:6c:d7:d4:ef:73:a8:96:15:32:2a:
5b:d1:7d:8b:22:f1:9f:e1:bf:f3:0d:00:89:05:7b:0a:ae:45:
c2:44:a8:64:86:68:c0:5f:50:99:5e:d2:95:ad:9d:62:37:16:
8f:06:9f:8f:71:7a:c7:09:7f:30:bd:72:70:c7:1f:6a:a3:5b:
01:be:b2:45:6a:66:ed:d1:1a:17:e7:cc:bd:1a:a4:b6:66:ee:
e6:42:c3:24:be:7e:f8:b1:a3:e9:83:65:46:97:d1:43:1e:b8:
e8:89:b9:d3:4b:18:64:fb:70:f4:c9:e0:0f:0b:e2:ef:df:3a:
07:c2:a8:80
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgITSefJ4+GGh6oZPQcNG0SFM4Lz5DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxODAxZTFlNGM0ZDE3MWZjODViODNlODI0YzNjOGU2ZmEy
NGM3MTUyMB4XDTIzMDMyMjIwMDMzN1oXDTI0MDMyMDIwMDgzN1owMzExMC8GA1UE
AxMoMTdBN0IzMzkzMkI2MjhGMzBGNjA1OEZCRTIwNEE3RjgwQzJDREFGOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCDSsfYab0yjawLKHaDG0ElkZ2h
yWt5cYsHWPUvy0Y1aTNDxiRB337T5c1547G6qtitc/M/YGfxBqG8qXcRE1I4h0vu
zSM+Al28bNFMD9UUaPsOnMcfq2qYcLcBzApfecc5hagb+FnyWRWgL29nC5TfFHe/
jhyxuSBFk1bjj3LNk3pGNOEYit57bJ3+QaQzuTI2TerE5A5+8DiEuexngn9jFl7x
jSkLdChBjv/eFqavJdwoWoa9+FpPA5LWFA074pOvzVV8jyIY6vzi2YPzKHkuvcVv
q8+WFit4+eJAq6QGAsfcfo1U4FQf25PwTGnHpyeXrGAeQX0V39Go675ivZsCAwEA
AaOCAjswggI3MB0GA1UdDgQWBBQXp7M5MrYo8w9gWPviBKf4DCza+TAfBgNVHSME
GDAWgBQYAeHkxNFx/IW4PoJMPI5vokxxUjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS85NWUzYjg0OC01OTg2LTQzOWEtOTdkMi02ODUwZDM0OTBk
OGUvMC8xODAxRTFFNEM0RDE3MUZDODVCODNFODI0QzNDOEU2RkEyNEM3MTUyLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvR0FIaDVNVFJjZnlGdUQ2Q1REeU9iNkpN
Y1ZJLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NWUzYjg0OC01
OTg2LTQzOWEtOTdkMi02ODUwZDM0OTBkOGUvMC8zODMzMmUzMTMzMzgyZTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzYzOTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4oy
MA0GCSqGSIb3DQEBCwUAA4IBAQDBwGfyHJZWjq/21iWAriVmUvxOR1sh8z9FQfM0
Y41mCV/64e1W0YEwKwoi2q0dGXDes2toqprfAeAqYIXmUuxGz+uaaEQ1iGtDISiC
k6glzlNcW1ge/N9uHZyCQpaVwX/XxucdrrbG12t0apxaUAYOhEeEV4Ko1GFY1O7l
lBiEfX7RFrpudWzX1O9zqJYVMipb0X2LIvGf4b/zDQCJBXsKrkXCRKhkhmjAX1CZ
XtKVrZ1iNxaPBp+PcXrHCX8wvXJwxx9qo1sBvrJFambt0RoX58y9GqS2Zu7mQsMk
vn74saPpg2VGl9FDHrjoibnTSxhk+3D0yeAPC+Lv3zoHwqiA
-----END CERTIFICATE-----
Generated at Fri Sep 22 09:57:09 2023 by rpki-client on console-ams.rpki-client.org