Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
File: 3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: fZG/5sWSI06q62zCzLyFIhTij1pC4+yShNUCVH4TyPk=
Subject key identifier: DF:35:E3:7D:B4:C9:55:F6:69:F7:89:D4:29:4C:EF:A9:67:C3:F3:AB
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 786C6895C573E92EFE4A15A9C7B26934F7AD09C3
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 40021
IP address blocks: 185.187.235.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6c:68:95:c5:73:e9:2e:fe:4a:15:a9:c7:b2:69:34:f7:ad:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=DF35E37DB4C955F669F789D4294CEFA967C3F3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:b9:8f:10:2b:01:30:da:af:0a:23:9c:b0:
49:21:db:b8:4e:53:bf:90:70:6d:7c:d1:27:c8:da:
6e:86:fe:f3:c2:9a:2d:d6:55:da:e7:e8:9f:18:9a:
a1:7d:bd:41:58:7e:de:78:0c:64:4a:51:87:9a:da:
ea:a6:66:2f:d3:6c:c6:4e:b8:64:b1:b6:65:0a:08:
6e:97:22:90:8a:25:1b:8f:07:ad:b4:88:d0:95:10:
fa:68:e6:f0:b1:ad:44:e9:8a:9a:ad:07:83:be:9d:
4d:ab:27:7b:67:89:46:24:61:ee:78:34:0a:17:d2:
10:23:47:c5:12:9c:15:ed:bf:d9:1e:1f:db:da:5c:
9b:7a:b4:32:47:ad:f3:fb:1a:f7:b1:94:44:3a:74:
32:50:65:ce:0e:d2:b2:6d:a9:b0:44:d2:92:ff:a8:
c0:61:bd:19:05:5d:83:c3:0d:4d:6d:d2:af:07:85:
8e:24:24:01:08:57:6e:8c:27:3c:75:c3:49:8c:bd:
77:3b:7e:03:9a:d9:81:57:a7:d1:19:1f:cc:0a:a0:
cb:af:70:cd:0c:d9:e4:50:c6:d6:ef:b4:34:10:6f:
4d:2b:fc:70:2c:8b:00:9e:01:78:b7:13:2a:8b:0b:
82:d1:2a:cc:d5:46:04:d9:18:06:36:b0:f0:02:8c:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:E3:7D:B4:C9:55:F6:69:F7:89:D4:29:4C:EF:A9:67:C3:F3:AB
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.235.0/24
Signature Algorithm: sha256WithRSAEncryption
54:39:94:bb:6c:17:fe:78:ff:99:d0:b6:98:d9:93:a9:d6:b0:
79:92:70:6e:87:7f:79:65:f0:30:bd:c0:fb:a6:bd:b5:39:07:
0d:87:4b:23:e3:b7:67:90:25:32:6a:56:9b:b6:8a:27:0d:2c:
c5:01:be:27:14:8d:ff:86:a1:81:b6:b3:64:bd:aa:b4:06:d0:
01:b5:e4:ed:83:27:02:81:fe:26:72:60:b2:af:6c:e7:65:16:
f3:e7:bd:ea:24:1a:58:1f:17:89:bb:df:5c:11:cf:1f:62:fa:
dc:f0:f9:d1:04:4b:54:a5:66:d1:65:77:96:ce:3a:11:56:12:
02:02:48:e2:dd:91:df:3c:23:8d:bc:3b:32:e1:11:f8:b8:ce:
26:8b:40:89:2b:29:f2:5c:60:3f:c7:4a:95:20:6f:38:1e:35:
28:42:c1:a9:6e:80:4a:5b:36:c1:53:cd:ba:a3:ed:c6:25:c2:
87:93:dc:25:4d:b2:22:4e:23:6e:a8:e3:88:55:a8:e6:2a:ec:
e9:2c:dc:c8:d1:ab:23:4e:a3:f5:ea:cd:45:9c:98:12:90:5b:
66:a0:1a:11:71:ee:5b:7c:8f:ad:10:88:9d:d8:9e:cc:3c:49:
6a:3a:02:de:6a:be:a0:f6:00:34:45:d3:ae:64:93:23:d7:43:
ab:bf:da:9b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeGxolcVz6S7+ShWpx7JpNPetCcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTJaFw0yNDAzMjUwODI3MTJaMDMxMTAvBgNV
BAMTKERGMzVFMzdEQjRDOTU1RjY2OUY3ODlENDI5NENFRkE5NjdDM0YzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YrmPECsBMNqvCiOcsEkh27hO
U7+QcG180SfI2m6G/vPCmi3WVdrn6J8YmqF9vUFYft54DGRKUYea2uqmZi/TbMZO
uGSxtmUKCG6XIpCKJRuPB620iNCVEPpo5vCxrUTpipqtB4O+nU2rJ3tniUYkYe54
NAoX0hAjR8USnBXtv9keH9vaXJt6tDJHrfP7GvexlEQ6dDJQZc4O0rJtqbBE0pL/
qMBhvRkFXYPDDU1t0q8HhY4kJAEIV26MJzx1w0mMvXc7fgOa2YFXp9EZH8wKoMuv
cM0M2eRQxtbvtDQQb00r/HAsiwCeAXi3EyqLC4LRKszVRgTZGAY2sPACjMpdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3zXjfbTJVfZp94nUKUzvqWfD86swHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM4MzcyZTMy
MzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u+swDQYJKoZIhvcNAQELBQADggEBAFQ5lLtsF/54/5nQtpjZk6nWsHmScG6H
f3ll8DC9wPumvbU5Bw2HSyPjt2eQJTJqVpu2iicNLMUBvicUjf+GoYG2s2S9qrQG
0AG15O2DJwKB/iZyYLKvbOdlFvPnveokGlgfF4m731wRzx9i+tzw+dEES1SlZtFl
d5bOOhFWEgICSOLdkd88I428OzLhEfi4ziaLQIkrKfJcYD/HSpUgbzgeNShCwalu
gEpbNsFTzbqj7cYlwoeT3CVNsiJOI26o44hVqOYq7Oks3MjRqyNOo/XqzUWcmBKQ
W2agGhFx7lt8j60QiJ3Ynsw8SWo6At5qvqD2ADRF065kkyPXQ6u/2ps=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org