Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: nroaHDxCn65x/1pPHIcQp11uUDOtddpgXn3t7qE4U5g=
Subject key identifier: 70:28:BA:11:77:0B:12:3F:D8:C3:F7:59:41:24:89:5E:07:DD:8C:C7
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 0B45EC6093929C23C423511FCFF33DA9EE199500
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:16 +0000
ROA not before: Mon 27 Mar 2023 08:22:16 +0000
ROA not after: Mon 25 Mar 2024 08:27:16 +0000
asID: 141039
IP address blocks: 185.203.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:ec:60:93:92:9c:23:c4:23:51:1f:cf:f3:3d:a9:ee:19:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:16 2023 GMT
Not After : Mar 25 08:27:16 2024 GMT
Subject: CN=7028BA11770B123FD8C3F7594124895E07DD8CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:7d:53:35:5a:b7:26:26:8c:ca:c0:d7:b3:
2d:9d:92:9f:ee:c1:c5:56:06:c7:07:28:14:c2:f7:
e7:54:90:d1:f9:66:d3:ff:42:97:05:0c:03:b3:3a:
ea:fa:ba:75:2b:f9:99:10:4e:34:7b:3c:9b:6f:c2:
63:6e:f0:32:a5:e2:0c:24:f0:ef:99:2b:f6:58:40:
be:d3:3a:22:45:af:fc:2d:d4:07:d0:84:09:22:d8:
0b:73:e4:c1:52:22:9d:7e:a4:f5:3a:6f:a5:45:4d:
44:bc:8d:ce:f1:9e:62:8b:87:fd:97:31:f5:e0:a6:
38:58:da:32:9d:06:dc:eb:58:f3:c5:48:4b:39:2e:
5b:fa:45:ef:3b:dc:ea:85:aa:cb:ae:9f:d7:b4:ce:
78:e7:bd:c0:2e:72:20:ab:8d:17:c0:cc:26:e7:94:
47:7c:a1:1a:29:2f:79:c3:a5:28:7f:34:ea:10:6e:
6a:62:f4:83:da:37:aa:d7:35:d5:0f:a4:5a:9b:90:
cc:d2:87:7c:3c:73:fe:d0:45:ff:a2:e0:0b:08:c6:
12:af:14:00:0c:ba:4d:e9:7e:64:7f:8b:fe:3d:7d:
96:49:e2:90:e1:06:1c:82:7a:81:a2:3d:38:f2:c5:
63:fa:67:4c:ad:16:6c:88:75:aa:a9:51:09:7b:55:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:BA:11:77:0B:12:3F:D8:C3:F7:59:41:24:89:5E:07:DD:8C:C7
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2d:22:c6:75:24:c5:9f:b1:5a:2f:96:a0:69:c2:8f:a3:db:
52:aa:a5:67:b5:41:42:4c:84:d1:58:59:cb:2e:9e:b6:a3:d3:
0c:e9:be:6c:ff:27:c6:40:f6:9d:c2:86:a2:c3:2a:2e:5d:d4:
1d:ee:57:c7:01:43:a0:87:b9:7b:a5:4c:77:60:b7:19:66:6c:
e1:0e:fc:4b:03:c5:ac:97:b1:d7:14:59:26:03:40:9f:84:4e:
ca:04:9e:df:88:71:0f:e8:03:c2:f5:a6:a8:37:7b:08:2d:52:
f5:b4:3b:ee:b8:9d:de:b9:24:03:1d:8e:a6:8a:ab:cc:51:a9:
00:2c:6e:db:93:53:ca:bf:8c:fa:7b:95:2a:70:c6:39:8c:a3:
06:e2:54:f7:37:d7:fa:4e:bb:f2:2a:ce:d4:7f:61:d2:2c:b3:
90:da:ec:9c:60:d3:10:d0:42:69:20:1d:a5:1e:39:90:58:e1:
2f:32:8d:1e:04:c9:b4:ea:cd:93:0d:9e:0e:26:62:5c:c4:17:
88:75:85:9f:71:a4:8b:cc:0e:31:11:c3:29:b6:41:bf:e8:6c:
62:d2:35:93:77:a1:cc:17:43:6a:12:f2:1b:1d:67:c8:78:ee:
2b:9d:3b:3b:94:3d:f6:62:7d:2d:ac:24:9d:a8:c6:e2:fa:c4:
18:0e:91:c8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUC0XsYJOSnCPEI1Efz/M9qe4ZlQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTZaFw0yNDAzMjUwODI3MTZaMDMxMTAvBgNV
BAMTKDcwMjhCQTExNzcwQjEyM0ZEOEMzRjc1OTQxMjQ4OTVFMDdERDhDQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw/n1TNVq3JiaMysDXsy2dkp/u
wcVWBscHKBTC9+dUkNH5ZtP/QpcFDAOzOur6unUr+ZkQTjR7PJtvwmNu8DKl4gwk
8O+ZK/ZYQL7TOiJFr/wt1AfQhAki2Atz5MFSIp1+pPU6b6VFTUS8jc7xnmKLh/2X
MfXgpjhY2jKdBtzrWPPFSEs5Llv6Re873OqFqsuun9e0znjnvcAuciCrjRfAzCbn
lEd8oRopL3nDpSh/NOoQbmpi9IPaN6rXNdUPpFqbkMzSh3w8c/7QRf+i4AsIxhKv
FAAMuk3pfmR/i/49fZZJ4pDhBhyCeoGiPTjyxWP6Z0ytFmyIdaqpUQl7VRT9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUcCi6EXcLEj/Yw/dZQSSJXgfdjMcwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMwMzMyZTMy
MzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnL2zANBgkqhkiG9w0BAQsFAAOCAQEAey0ixnUkxZ+xWi+WoGnCj6PbUqql
Z7VBQkyE0VhZyy6etqPTDOm+bP8nxkD2ncKGosMqLl3UHe5XxwFDoIe5e6VMd2C3
GWZs4Q78SwPFrJex1xRZJgNAn4ROygSe34hxD+gDwvWmqDd7CC1S9bQ77rid3rkk
Ax2OpoqrzFGpACxu25NTyr+M+nuVKnDGOYyjBuJU9zfX+k678irO1H9h0iyzkNrs
nGDTENBCaSAdpR45kFjhLzKNHgTJtOrNkw2eDiZiXMQXiHWFn3Gki8wOMRHDKbZB
v+hsYtI1k3ehzBdDahLyGx1nyHjuK507O5Q99mJ9LawknajG4vrEGA6RyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org