Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: gb5YFm54ONYgXVDPOoG8ciNXnOhVTsO4By0X+4QlHB4=
Subject key identifier: 99:71:5C:92:B6:BD:4C:AB:91:AD:6E:C6:F4:1B:CB:8C:97:9A:BD:B7
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 5F683AF8892F95AEA08958195E9329B12CBD18D9
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 3356
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:68:3a:f8:89:2f:95:ae:a0:89:58:19:5e:93:29:b1:2c:bd:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=99715C92B6BD4CAB91AD6EC6F41BCB8C979ABDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:32:b0:fd:08:a3:fc:82:a5:be:23:5e:38:
72:45:7e:11:39:91:14:01:48:5f:df:82:77:21:36:
dd:78:cd:91:95:49:0c:a7:f0:9f:e1:25:94:0e:a9:
9a:c2:31:58:9c:8c:6b:f5:0f:36:ef:dc:21:6f:2e:
93:b5:99:b2:5c:e9:f1:78:a4:6e:e8:ab:a1:51:9f:
46:8b:91:1a:5e:27:6e:0d:2f:f9:1c:f8:ce:1e:03:
f0:5e:44:3f:ea:7e:7e:92:20:d5:21:48:28:9e:a8:
d0:ce:4e:76:eb:9f:3f:4c:b3:20:79:8d:df:e7:92:
be:06:e7:ff:70:f2:fb:a5:d9:f6:2b:cd:46:d7:05:
c6:b5:54:f3:5a:85:bc:3e:7e:07:65:66:1e:f5:bf:
f5:83:f0:10:b8:43:8a:31:6e:1a:e2:d1:8b:d8:0f:
59:7f:6f:9c:14:a8:28:4b:d4:6b:95:65:d8:d4:73:
5f:0b:9e:17:d2:dd:c9:cf:5b:43:ab:6c:55:df:e6:
24:fc:e0:7f:10:33:89:66:8a:10:78:a5:54:ba:67:
69:c8:d4:78:85:aa:e6:b4:a0:39:54:c4:b6:67:17:
0c:ba:23:1e:0c:02:d0:10:9d:db:89:f0:aa:93:f9:
09:1b:36:dd:93:b9:51:ea:82:cb:ea:05:9b:e9:ef:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:5C:92:B6:BD:4C:AB:91:AD:6E:C6:F4:1B:CB:8C:97:9A:BD:B7
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:64:09:64:a6:47:1f:d6:d5:d4:ef:d4:1c:42:87:80:c6:d1:
55:05:34:ae:7e:dc:db:24:eb:3d:9d:8e:6b:38:07:2b:28:0e:
7a:78:d2:03:57:50:f1:c5:03:f5:be:f6:63:fe:1c:2e:6c:36:
9b:26:38:36:83:57:5c:0c:aa:4e:f4:52:3c:fe:80:c1:9e:02:
08:c2:ff:5f:9b:9a:e8:ca:8d:cd:57:51:35:59:eb:43:6c:1d:
63:47:5f:98:7a:14:13:29:a6:55:25:87:cc:57:c5:ee:c5:15:
56:62:b1:16:d1:4a:d5:00:10:03:f1:bd:a6:20:e3:97:4c:79:
e9:c9:51:f0:83:32:ef:6a:a5:c6:48:1c:50:3c:38:1f:27:1e:
8e:de:2c:7b:68:a4:07:c8:68:f7:41:d1:04:37:18:8c:1e:3b:
e7:bc:8a:38:1b:f5:66:cd:dc:32:0e:94:a3:f5:83:19:40:a0:
31:ef:f7:e1:2d:de:f9:18:39:7e:a0:13:96:0f:18:38:94:d5:
ec:5a:74:2e:5c:bf:12:49:3b:1c:9a:88:29:6d:5c:52:ef:29:
2b:9c:79:a0:9a:6e:21:c5:e3:93:0d:5b:91:99:a8:a3:99:f3:
7f:4d:74:a2:83:a3:8c:04:4a:c8:1f:9d:5c:64:8a:3c:84:81:
e9:cc:8d:be
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUX2g6+Ikvla6giVgZXpMpsSy9GNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTlaFw0yNDAzMjUwODI3MTlaMDMxMTAvBgNV
BAMTKDk5NzE1QzkyQjZCRDRDQUI5MUFENkVDNkY0MUJDQjhDOTc5QUJEQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxczKw/Qij/IKlviNeOHJFfhE5
kRQBSF/fgnchNt14zZGVSQyn8J/hJZQOqZrCMVicjGv1Dzbv3CFvLpO1mbJc6fF4
pG7oq6FRn0aLkRpeJ24NL/kc+M4eA/BeRD/qfn6SINUhSCieqNDOTnbrnz9MsyB5
jd/nkr4G5/9w8vul2fYrzUbXBca1VPNahbw+fgdlZh71v/WD8BC4Q4oxbhri0YvY
D1l/b5wUqChL1GuVZdjUc18LnhfS3cnPW0OrbFXf5iT84H8QM4lmihB4pVS6Z2nI
1HiFqua0oDlUxLZnFwy6Ix4MAtAQnduJ8KqT+QkbNt2TuVHqgsvqBZvp74anAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmXFckra9TKuRrW7G9BvLjJeavbcwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM4MzcyZTMy
MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ubvqMA0GCSqGSIb3DQEBCwUAA4IBAQAqZAlkpkcf1tXU79QcQoeAxtFVBTSuftzb
JOs9nY5rOAcrKA56eNIDV1DxxQP1vvZj/hwubDabJjg2g1dcDKpO9FI8/oDBngII
wv9fm5royo3NV1E1WetDbB1jR1+YehQTKaZVJYfMV8XuxRVWYrEW0UrVABAD8b2m
IOOXTHnpyVHwgzLvaqXGSBxQPDgfJx6O3ix7aKQHyGj3QdEENxiMHjvnvIo4G/Vm
zdwyDpSj9YMZQKAx7/fhLd75GDl+oBOWDxg4lNXsWnQuXL8SSTscmogpbVxS7ykr
nHmgmm4hxeOTDVuRmaijmfN/TXSig6OMBErIH51cZIo8hIHpzI2+
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org