Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
File: 3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 1dUrEX78JA8vFaSLWUcrjk17MaWLXnLU1mLyIWjTMjg=
Subject key identifier: 4B:78:A2:C0:09:74:15:77:2B:02:2B:BA:60:83:0E:57:F8:E6:34:E9
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 3F93015E4E591C4474CAA16D8ACF4DCDECA02DF6
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 51167
IP address blocks: 185.190.142.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:93:01:5e:4e:59:1c:44:74:ca:a1:6d:8a:cf:4d:cd:ec:a0:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=4B78A2C0097415772B022BBA60830E57F8E634E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:be:11:f0:c1:0f:2c:ae:0e:0c:e6:5a:15:
21:2c:1a:22:71:55:47:27:6c:2c:30:27:82:be:94:
b4:71:3f:68:f4:22:3b:f6:da:16:5d:96:1e:16:7b:
92:43:1d:62:23:c4:cb:67:9b:e6:81:1d:d8:51:9d:
64:90:87:5e:41:dc:dc:76:3c:92:b4:4e:23:ca:41:
bf:f4:9b:66:78:9f:42:4f:e7:6f:96:e2:5f:de:6e:
dc:65:51:6b:ae:aa:d2:f4:b6:06:f4:c5:2d:ab:9c:
2c:7c:8b:7f:a4:df:db:63:c7:22:e6:67:09:f1:b2:
9a:91:fa:bf:3e:98:a4:04:b0:a5:a9:da:9c:9a:7e:
06:48:ab:00:78:e4:5a:a6:b8:05:9b:be:13:76:9c:
16:fe:ca:08:32:f6:01:37:8c:aa:3b:83:63:83:31:
31:00:38:b5:13:bd:13:a3:46:bf:30:95:bd:da:00:
28:35:1d:e9:cd:64:44:a2:6c:0a:9b:ec:d6:d8:40:
f8:76:1e:8b:be:95:91:56:e5:d6:f5:72:5f:89:cf:
e8:6e:cc:71:62:82:9e:ae:9e:84:f2:be:d9:d0:5e:
2a:bc:dc:8c:c3:0a:ad:21:f2:46:46:12:b6:c8:40:
fc:f3:1d:30:bf:5f:02:3b:74:0a:70:4b:3e:6c:5d:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:A2:C0:09:74:15:77:2B:02:2B:BA:60:83:0E:57:F8:E6:34:E9
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.142.0/23
Signature Algorithm: sha256WithRSAEncryption
18:b6:1a:43:ec:73:f0:8c:dd:6d:b2:99:11:dc:6c:ae:69:3f:
f9:22:91:31:56:49:29:55:e2:d2:8f:39:05:27:cd:2e:55:14:
b2:69:84:d8:fb:1f:91:33:20:03:ee:52:b8:39:7b:ec:30:53:
7a:96:d0:28:62:5a:54:a2:e2:f0:f0:e8:43:f3:04:1a:e3:ba:
77:f0:11:aa:e4:86:b6:ea:a6:0b:de:4e:dd:23:4a:2e:db:df:
7c:1a:ce:31:5e:9a:b7:8e:e9:0b:ca:07:3b:70:e9:39:51:b5:
5c:e7:75:63:eb:0a:a1:50:70:42:05:bf:60:14:f5:8d:9b:b5:
de:fc:36:18:9b:0e:46:0e:ec:be:4d:1a:2b:d4:3e:10:94:ba:
16:1d:d5:ab:3f:cd:1c:65:40:f9:8c:57:a8:42:90:ca:d2:5e:
78:92:c6:3b:4d:e3:cc:1f:eb:15:f2:7b:ae:ba:65:59:b5:81:
1b:e5:e4:7b:f6:4a:e9:02:d6:b4:85:5e:b7:4e:08:87:84:1e:
9b:3d:e0:37:62:cc:da:be:77:1e:e8:d6:13:c3:26:be:ee:3e:
c4:b8:8b:50:29:0d:02:d0:7c:59:92:fc:8a:64:d9:fc:f0:0b:
03:b7:b2:50:75:ea:91:a3:01:63:16:3a:1b:23:10:a8:81:6c:
a2:2a:ca:d3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUP5MBXk5ZHER0yqFtis9NzeygLfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMThaFw0yNDAzMjUwODI3MThaMDMxMTAvBgNV
BAMTKDRCNzhBMkMwMDk3NDE1NzcyQjAyMkJCQTYwODMwRTU3RjhFNjM0RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDr4R8MEPLK4ODOZaFSEsGiJx
VUcnbCwwJ4K+lLRxP2j0Ijv22hZdlh4We5JDHWIjxMtnm+aBHdhRnWSQh15B3Nx2
PJK0TiPKQb/0m2Z4n0JP52+W4l/ebtxlUWuuqtL0tgb0xS2rnCx8i3+k39tjxyLm
ZwnxspqR+r8+mKQEsKWp2pyafgZIqwB45FqmuAWbvhN2nBb+yggy9gE3jKo7g2OD
MTEAOLUTvROjRr8wlb3aACg1HenNZESibAqb7NbYQPh2Hou+lZFW5db1cl+Jz+hu
zHFigp6unoTyvtnQXiq83IzDCq0h8kZGErbIQPzzHTC/XwI7dApwSz5sXV4nAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUS3iiwAl0FXcrAiu6YIMOV/jmNOkwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMTM5MzAyZTMx
MzQzMjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5vo4wDQYJKoZIhvcNAQELBQADggEBABi2GkPsc/CM3W2ymRHcbK5pP/kikTFW
SSlV4tKPOQUnzS5VFLJphNj7H5EzIAPuUrg5e+wwU3qW0ChiWlSi4vDw6EPzBBrj
unfwEarkhrbqpgveTt0jSi7b33wazjFemreO6QvKBztw6TlRtVzndWPrCqFQcEIF
v2AU9Y2btd78NhibDkYO7L5NGivUPhCUuhYd1as/zRxlQPmMV6hCkMrSXniSxjtN
48wf6xXye666ZVm1gRvl5Hv2SukC1rSFXrdOCIeEHps94DdizNq+dx7o1hPDJr7u
PsS4i1ApDQLQfFmS/Ipk2fzwCwO3slB16pGjAWMWOhsjEKiBbKIqytM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org