Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: PZFGelTQH/okZGzaGPwfIfc6xKL9RuIsWocpssQ44lE=
Subject key identifier: C8:93:65:99:B7:0F:05:5F:0B:C6:14:3A:0E:86:82:6D:8F:F9:DC:E6
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2AEDF8703F8282A39D910C0579EA5945C68182FF
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:24 +0000
ROA not before: Mon 27 Mar 2023 08:22:24 +0000
ROA not after: Mon 25 Mar 2024 08:27:24 +0000
asID: 141039
IP address blocks: 185.203.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ed:f8:70:3f:82:82:a3:9d:91:0c:05:79:ea:59:45:c6:81:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:24 2023 GMT
Not After : Mar 25 08:27:24 2024 GMT
Subject: CN=C8936599B70F055F0BC6143A0E86826D8FF9DCE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:54:51:bf:10:d0:67:c3:f3:a1:bc:1a:1a:
f1:16:17:25:32:f4:96:16:c4:a4:42:0e:2c:76:6a:
ad:58:91:ac:45:79:50:69:91:69:90:e7:2d:c6:07:
d3:8e:27:9c:91:b7:4a:91:64:20:b3:f0:39:65:dd:
8b:35:c9:25:40:8d:8e:a2:1b:f7:0f:4a:37:3f:1a:
b2:11:38:90:3a:bc:17:07:46:1a:41:88:aa:04:99:
26:56:25:90:f8:23:70:a1:4e:19:08:5e:b4:d6:a0:
a0:e9:7a:0b:a9:a6:a7:48:d9:12:d5:46:66:01:13:
69:30:59:d4:d4:9c:4c:63:46:2d:b6:31:a3:4d:e8:
72:74:0c:e7:67:12:97:cb:59:24:da:da:9e:b5:10:
34:81:6c:f0:f6:e3:61:24:9f:44:8a:13:3e:9d:06:
4a:0f:ed:05:f0:27:32:90:93:c0:96:09:56:e9:72:
88:f1:1c:47:8e:db:bd:10:0a:8b:e9:50:46:8c:16:
ae:dd:e6:ca:84:11:d1:77:38:87:f7:15:61:a6:c5:
a8:bf:19:27:8e:ce:38:b1:8f:7e:a1:95:0c:20:83:
bd:89:d5:44:e5:37:2f:02:fa:c6:cc:70:af:53:10:
8f:67:59:7c:08:d2:1a:92:a4:34:e8:56:3a:28:e9:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:65:99:B7:0F:05:5F:0B:C6:14:3A:0E:86:82:6D:8F:F9:DC:E6
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e6:11:a1:33:c8:ba:54:f7:65:cb:30:e7:52:eb:a7:5c:19:
e8:38:b6:10:f4:94:b3:be:6a:75:be:1c:50:ae:c0:74:dd:8e:
74:b4:c0:61:ff:cc:12:f8:5b:5c:3f:24:b5:80:62:14:05:d2:
55:b0:74:63:33:63:59:a3:21:07:ce:8a:87:44:7f:d4:11:78:
c9:16:2a:57:08:a7:2b:0d:fc:fd:cf:ee:35:4d:22:26:0a:d3:
48:20:0d:c4:1a:c6:fd:25:5a:ef:2b:4f:6c:fe:dc:1d:a6:0b:
88:05:44:fc:8a:e4:db:1a:56:bf:4e:a3:5a:9a:62:cf:69:06:
92:e5:81:73:a1:39:9b:69:d9:66:7a:85:1c:b0:2f:a6:ea:a8:
2b:dc:8d:a2:2b:b4:c0:1b:9f:9c:69:5a:82:0a:ef:c6:2f:16:
e8:ec:34:72:30:05:9f:28:29:7a:3c:6d:7d:e2:34:35:a7:e6:
b8:2a:91:8a:12:65:76:6c:e5:02:3e:e1:f8:b0:e5:0a:bb:6d:
0f:c1:c2:33:1e:7b:24:81:be:77:db:a8:04:2f:8e:db:90:5c:
fd:60:48:3c:39:b8:0e:68:75:21:db:08:bf:bb:ac:ab:6a:b0:
60:19:20:e0:50:4b:bd:37:da:e8:1c:ba:1c:f3:9b:71:f3:1c:
28:c0:c2:48
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKu34cD+CgqOdkQwFeepZRcaBgv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjRaFw0yNDAzMjUwODI3MjRaMDMxMTAvBgNV
BAMTKEM4OTM2NTk5QjcwRjA1NUYwQkM2MTQzQTBFODY4MjZEOEZGOURDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0FRRvxDQZ8PzobwaGvEWFyUy
9JYWxKRCDix2aq1YkaxFeVBpkWmQ5y3GB9OOJ5yRt0qRZCCz8Dll3Ys1ySVAjY6i
G/cPSjc/GrIROJA6vBcHRhpBiKoEmSZWJZD4I3ChThkIXrTWoKDpeguppqdI2RLV
RmYBE2kwWdTUnExjRi22MaNN6HJ0DOdnEpfLWSTa2p61EDSBbPD242Ekn0SKEz6d
BkoP7QXwJzKQk8CWCVbpcojxHEeO270QCovpUEaMFq7d5sqEEdF3OIf3FWGmxai/
GSeOzjixj36hlQwgg72J1UTlNy8C+sbMcK9TEI9nWXwI0hqSpDToVjoo6eGvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUyJNlmbcPBV8LxhQ6DoaCbY/53OYwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMwMzMyZTMy
MzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnL2jANBgkqhkiG9w0BAQsFAAOCAQEAp+YRoTPIulT3Zcsw51Lrp1wZ6Di2
EPSUs75qdb4cUK7AdN2OdLTAYf/MEvhbXD8ktYBiFAXSVbB0YzNjWaMhB86Kh0R/
1BF4yRYqVwinKw38/c/uNU0iJgrTSCANxBrG/SVa7ytPbP7cHaYLiAVE/Irk2xpW
v06jWppiz2kGkuWBc6E5m2nZZnqFHLAvpuqoK9yNoiu0wBufnGlaggrvxi8W6Ow0
cjAFnygpejxtfeI0NafmuCqRihJldmzlAj7h+LDlCrttD8HCMx57JIG+d9uoBC+O
25Bc/WBIPDm4Dmh1IdsIv7usq2qwYBkg4FBLvTfa6By6HPObcfMcKMDCSA==
-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org