Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213122.roa
File: AS213122.roa (raw, json)
Hash identifier: PJH/q5piRvw40uFpfo0Os3gmpOBVTit0ohbxaMsctis=
Subject key identifier: 08:AA:53:B1:23:81:85:EB:00:BA:BA:A6:17:8E:8B:AF:3E:DE:AB:28
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 738A13DD62039050766061AE649505CCD8D87A13
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213122.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 213122
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8a:13:dd:62:03:90:50:76:60:61:ae:64:95:05:cc:d8:d8:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=08AA53B1238185EB00BABAA6178E8BAF3EDEAB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:41:46:c1:eb:5a:16:ea:74:40:db:40:8a:
14:80:d7:61:d7:1a:74:ea:cd:fd:d2:76:bd:8f:6f:
79:85:e2:bc:3a:7a:39:85:05:35:d0:c8:59:43:fe:
c9:79:46:da:54:11:30:64:a7:d2:e8:aa:27:6f:9d:
5e:7c:1d:f1:30:3c:6a:cc:50:87:7e:99:b3:e5:07:
9d:3e:9e:bf:db:e6:67:44:f3:c2:56:64:03:b3:07:
b8:98:21:63:e4:b8:43:ec:5b:34:31:15:67:bb:d0:
8b:23:1d:ff:da:1f:06:79:38:1d:47:07:71:43:28:
17:d5:7b:93:ef:84:7f:d1:f0:7c:c9:e2:38:a6:1d:
1b:9e:77:c4:ea:71:b9:6f:6c:51:5a:e3:8a:a8:30:
d4:ef:56:39:09:4f:eb:00:e3:45:ba:b7:b7:56:b9:
87:1c:7d:69:61:91:a5:48:f3:90:64:28:4a:e1:62:
23:53:dd:29:16:4c:1d:bb:4a:d2:d3:f1:02:5a:2b:
ed:0b:01:9e:19:72:be:51:fb:f5:28:11:6e:62:b8:
d5:42:8d:95:e4:46:1c:2f:0f:c8:b9:70:2f:fe:33:
b4:4c:6d:c1:fa:8a:51:f1:1c:5f:4e:44:36:a3:e8:
d6:22:02:db:c6:de:39:df:c2:71:3a:d3:4d:4d:87:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:53:B1:23:81:85:EB:00:BA:BA:A6:17:8E:8B:AF:3E:DE:AB:28
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ae:bd:68:a9:3a:d1:fa:3a:f9:58:68:64:b7:c4:8d:53:fa:
13:da:30:c7:af:b7:2a:e8:df:27:c9:16:1c:eb:63:11:a4:70:
56:73:e9:1d:c9:de:95:02:cb:ac:5a:6b:eb:6c:65:f1:65:64:
6c:61:1d:7b:57:43:64:f6:3f:a5:c5:76:65:b3:4d:68:76:f2:
b7:a3:70:28:6b:da:31:d2:30:a7:e8:88:99:dc:fe:19:13:43:
7d:a8:2b:03:37:e3:55:2c:9f:b9:bc:f9:74:aa:10:c4:c6:a6:
e6:c2:a4:ba:41:d7:08:39:72:25:9d:a3:c3:3c:a5:72:11:71:
ac:71:b3:ce:dd:f0:2b:09:52:69:0c:52:11:fd:a9:43:22:2a:
e8:9b:ef:cc:ea:16:1d:5a:37:7c:0e:4e:50:ae:c8:9a:6f:aa:
99:7c:60:1b:92:28:c7:10:eb:04:e3:10:37:6a:cd:e9:d7:25:
23:87:75:de:e4:da:0c:44:83:51:2d:d0:d5:06:bd:1a:a9:05:
58:3c:96:68:0c:ac:fc:ae:12:08:a5:ef:c9:c4:e7:bf:66:4a:
4b:b0:a9:49:cf:16:c9:14:fb:84:6f:b5:21:94:d4:f4:d5:46:
32:ed:9a:86:9b:89:b9:63:9e:84:f5:fe:87:1e:c8:df:f7:66:
28:ba:37:9b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUc4oT3WIDkFB2YGGuZJUFzNjYehMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTJaFw0yMzEyMzEyMzU5MTJaMDMxMTAvBgNV
BAMTKDA4QUE1M0IxMjM4MTg1RUIwMEJBQkFBNjE3OEU4QkFGM0VERUFCMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrUFGwetaFup0QNtAihSA12HX
GnTqzf3Sdr2Pb3mF4rw6ejmFBTXQyFlD/sl5RtpUETBkp9LoqidvnV58HfEwPGrM
UId+mbPlB50+nr/b5mdE88JWZAOzB7iYIWPkuEPsWzQxFWe70IsjHf/aHwZ5OB1H
B3FDKBfVe5PvhH/R8HzJ4jimHRued8TqcblvbFFa44qoMNTvVjkJT+sA40W6t7dW
uYccfWlhkaVI85BkKErhYiNT3SkWTB27StLT8QJaK+0LAZ4Zcr5R+/UoEW5iuNVC
jZXkRhwvD8i5cC/+M7RMbcH6ilHxHF9ORDaj6NYiAtvG3jnfwnE6001Nh7y7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUCKpTsSOBhesAurqmF46Lrz7eqygwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEzMTIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZMi
MA0GCSqGSIb3DQEBCwUAA4IBAQBsrr1oqTrR+jr5WGhkt8SNU/oT2jDHr7cq6N8n
yRYc62MRpHBWc+kdyd6VAsusWmvrbGXxZWRsYR17V0Nk9j+lxXZls01odvK3o3Ao
a9ox0jCn6IiZ3P4ZE0N9qCsDN+NVLJ+5vPl0qhDExqbmwqS6QdcIOXIlnaPDPKVy
EXGscbPO3fArCVJpDFIR/alDIirom+/M6hYdWjd8Dk5Qrsiab6qZfGAbkijHEOsE
4xA3as3p1yUjh3Xe5NoMRINRLdDVBr0aqQVYPJZoDKz8rhIIpe/JxOe/ZkpLsKlJ
zxbJFPuEb7UhlNT01UYy7ZqGm4m5Y56E9f6HHsjf92Youjeb
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org