Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa (raw, json)
Hash identifier: 8PdNMqYqF+4rKcVhoNbFk4Fp4/yeRkCPnbKmDvNpCWU=
Subject key identifier: D8:C6:0C:2D:D8:27:34:6F:73:C7:E8:55:4B:68:F8:6D:BF:FC:36:92
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 77873B1C2053D8CE7D559B83AE161137179C2EFA
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
Signing time: Mon 27 Mar 2023 08:27:12 +0000
ROA not before: Mon 27 Mar 2023 08:22:12 +0000
ROA not after: Mon 25 Mar 2024 08:27:12 +0000
asID: 42898
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:87:3b:1c:20:53:d8:ce:7d:55:9b:83:ae:16:11:37:17:9c:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:12 2023 GMT
Not After : Mar 25 08:27:12 2024 GMT
Subject: CN=D8C60C2DD827346F73C7E8554B68F86DBFFC3692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:6b:1b:28:93:1c:21:07:19:11:98:19:70:
80:06:f2:a2:64:9c:cc:69:a1:1e:1e:3d:b8:6b:49:
db:82:47:dc:2f:c1:01:86:91:73:f4:94:57:f5:75:
4a:85:a4:3f:2e:64:d0:3a:6c:4a:d8:cd:8e:65:09:
ab:64:cb:4b:73:57:22:6d:0e:9d:17:ec:bb:24:29:
96:92:a6:11:9b:f1:cd:72:ef:c0:a8:3a:fe:33:92:
23:b0:a7:5a:98:0a:4e:7c:ad:75:b0:33:53:ea:f6:
c1:01:f3:41:d0:b5:11:9f:26:cc:49:ef:27:7c:6c:
e7:60:7b:df:18:36:57:2b:8e:e5:61:82:d0:da:02:
da:f5:0d:41:c3:37:d6:9c:6a:0d:c9:c8:a2:87:43:
33:10:cd:df:70:6a:f3:33:9e:71:90:a4:37:fd:18:
b4:bf:36:f7:46:37:23:a4:2c:66:48:31:c5:98:ed:
e3:3a:01:6d:2c:52:45:93:70:15:0c:09:c2:07:92:
fd:4d:65:a5:09:fc:7f:b8:e1:0d:9f:9c:93:a2:32:
f8:d1:21:22:de:6a:76:a1:ff:77:92:d7:16:14:48:
e4:0b:5b:c4:08:94:73:f9:d0:fe:37:12:8b:de:a2:
be:13:3c:19:c7:54:ce:02:ac:3b:71:73:de:2c:e8:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:0C:2D:D8:27:34:6F:73:C7:E8:55:4B:68:F8:6D:BF:FC:36:92
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:94:1d:c4:fc:f1:8d:1e:c2:ce:e7:c3:cb:53:ea:0b:28:95:
f2:f6:ba:e7:2e:dc:47:17:2d:93:c0:e5:4e:1c:e8:f0:a7:60:
68:a3:e5:0f:36:2f:1f:8c:ec:64:b9:f2:eb:41:f1:98:da:2f:
09:4d:56:22:5d:33:31:d0:e7:9b:dd:f0:da:df:55:f5:07:c1:
a6:78:8a:ed:11:ce:bb:ea:9f:21:2c:97:2f:5e:55:94:7b:cb:
68:e0:fa:88:2e:fa:4d:7c:8e:ab:d5:f3:53:26:e4:bd:45:eb:
7a:6f:06:d2:9e:8b:3f:cf:25:95:f7:89:8d:ec:58:bd:c9:7a:
c4:2a:2d:53:68:7c:07:61:1a:23:90:23:61:1c:5e:f3:69:96:
bf:ca:8a:53:e7:04:cf:4c:1e:f9:03:7a:4e:c3:74:ba:1d:fc:
9c:43:a1:48:a3:a5:4e:33:fe:d0:0b:90:a7:09:e1:b0:ae:64:
91:1d:c7:e4:69:c3:f9:93:1e:ad:95:f0:99:5d:b4:f2:df:3e:
2b:6e:3b:0b:62:71:b8:08:77:16:51:48:65:91:93:5b:8e:36:
e2:c7:c6:ba:2a:05:cc:45:25:ad:9d:03:fb:84:09:19:13:d8:
86:75:70:4f:d7:2b:cb:d2:66:d5:54:2e:9a:80:94:56:68:e1:
ee:44:1c:ef
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd4c7HCBT2M59VZuDrhYRNxecLvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTJaFw0yNDAzMjUwODI3MTJaMDMxMTAvBgNV
BAMTKEQ4QzYwQzJERDgyNzM0NkY3M0M3RTg1NTRCNjhGODZEQkZGQzM2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VWsbKJMcIQcZEZgZcIAG8qJk
nMxpoR4ePbhrSduCR9wvwQGGkXP0lFf1dUqFpD8uZNA6bErYzY5lCatky0tzVyJt
Dp0X7LskKZaSphGb8c1y78CoOv4zkiOwp1qYCk58rXWwM1Pq9sEB80HQtRGfJsxJ
7yd8bOdge98YNlcrjuVhgtDaAtr1DUHDN9acag3JyKKHQzMQzd9wavMznnGQpDf9
GLS/NvdGNyOkLGZIMcWY7eM6AW0sUkWTcBUMCcIHkv1NZaUJ/H+44Q2fnJOiMvjR
ISLeanah/3eS1xYUSOQLW8QIlHP50P43Eoveor4TPBnHVM4CrDtxc94s6GHLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2MYMLdgnNG9zx+hVS2j4bb/8NpIwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMwMzkyZTMy
MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzIzODM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC50dwwDQYJKoZIhvcNAQELBQADggEBAH6UHcT88Y0ews7nw8tT6gsolfL2uucu
3EcXLZPA5U4c6PCnYGij5Q82Lx+M7GS58utB8ZjaLwlNViJdMzHQ55vd8NrfVfUH
waZ4iu0RzrvqnyEsly9eVZR7y2jg+ogu+k18jqvV81Mm5L1F63pvBtKeiz/PJZX3
iY3sWL3JesQqLVNofAdhGiOQI2EcXvNplr/KilPnBM9MHvkDek7DdLod/JxDoUij
pU4z/tALkKcJ4bCuZJEdx+Rpw/mTHq2V8JldtPLfPituOwticbgIdxZRSGWRk1uO
NuLHxroqBcxFJa2dA/uECRkT2IZ1cE/XK8vSZtVULpqAlFZo4e5EHO8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org