Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aT7rIEhjks8KckPzpO+cAFASHUcIuJ/qnsZX+ePXFuw=
Subject key identifier: 5C:B5:95:52:13:E3:74:4B:CD:A1:E9:E0:12:86:69:C8:31:3A:01:E2
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 7E3E11B88099D23E9545002DA5F2744A2C0D0350
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:14 +0000
ROA not before: Mon 27 Mar 2023 08:22:14 +0000
ROA not after: Mon 25 Mar 2024 08:27:14 +0000
asID: 136787
IP address blocks: 185.209.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3e:11:b8:80:99:d2:3e:95:45:00:2d:a5:f2:74:4a:2c:0d:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:14 2023 GMT
Not After : Mar 25 08:27:14 2024 GMT
Subject: CN=5CB5955213E3744BCDA1E9E0128669C8313A01E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:35:98:5e:aa:74:77:40:c3:71:a5:c0:6f:
9d:b3:92:59:23:28:3c:ac:8d:f2:ca:25:33:31:75:
0e:8a:20:6e:4f:c4:7c:74:18:67:78:a6:28:55:0d:
5d:a2:07:8d:2d:bd:1d:f2:a9:73:4c:e3:bd:5d:c9:
96:66:79:d6:cd:63:80:e7:5d:87:92:77:c4:b3:85:
e9:32:5a:8d:0d:a5:ac:7e:39:ad:6a:bb:f1:18:8e:
f2:13:b0:ba:c5:09:43:f0:38:c7:51:6a:1b:9c:ed:
5e:92:0b:d2:f8:9b:e3:fb:a5:6c:7f:b7:3a:ec:db:
dd:be:c2:6d:9a:b3:87:74:36:a7:2a:33:9e:72:9d:
48:6f:d7:73:4f:66:fb:d2:e4:80:0d:f3:9a:87:c3:
ef:88:ea:a2:87:0f:5b:ed:e1:f7:fc:33:b2:c0:f1:
d8:c1:56:17:b3:02:df:37:2d:ba:fe:d7:c5:f9:35:
8c:7e:51:ba:3a:8a:93:5b:ae:d4:c4:63:3f:42:4a:
88:27:ce:2a:51:54:57:3f:ba:09:ed:8f:2e:c3:db:
3c:ea:fb:ae:8b:6b:cf:e5:85:57:7a:4a:ca:2b:c8:
62:21:bd:ee:64:82:f0:dc:f7:20:97:b6:e5:45:b0:
db:f2:ac:78:4a:5f:43:b5:17:73:69:42:5d:59:04:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:95:52:13:E3:74:4B:CD:A1:E9:E0:12:86:69:C8:31:3A:01:E2
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3230392e3232322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:70:3c:45:57:30:b0:ae:bd:80:93:c6:a6:a7:2b:ab:08:9f:
c4:49:b8:91:c7:b2:fa:5b:33:63:c2:10:a4:9a:a9:16:94:f6:
0b:62:ec:ec:f9:1f:43:25:38:0e:12:b8:29:b9:4c:7e:cc:53:
7a:bd:f4:0b:ef:dd:0a:20:b2:f8:74:6d:8e:11:af:dd:42:1e:
88:3f:c9:10:cb:94:54:2a:94:2f:e1:ed:6f:70:80:04:ac:91:
fc:a0:fd:ec:75:e4:fc:1f:9f:37:03:b2:8c:ad:bc:e1:20:45:
c9:97:24:84:75:f5:4f:f9:c5:64:5b:47:34:6a:f1:b4:e9:c3:
31:bb:15:7d:51:17:27:10:ad:47:ad:18:77:52:1f:bd:0e:80:
06:8f:40:4b:32:41:18:ae:d1:9e:de:aa:5b:39:00:db:6c:0c:
43:09:2e:a1:32:83:a0:2a:86:be:5a:f1:80:00:99:b3:c5:b3:
91:64:4b:f3:c8:3a:09:fd:c2:e1:56:61:a2:8e:8e:5b:0a:fc:
6f:64:53:1f:19:81:ad:db:44:48:1a:65:8e:f4:c4:75:7d:cb:
90:c1:4b:ad:d3:f3:4b:0c:47:da:01:d0:88:50:81:17:e6:32:
8b:3b:92:cb:1a:22:c3:a4:33:bb:d5:34:2c:5c:b3:f6:40:5a:
8a:25:81:21
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfj4RuICZ0j6VRQAtpfJ0SiwNA1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTRaFw0yNDAzMjUwODI3MTRaMDMxMTAvBgNV
BAMTKDVDQjU5NTUyMTNFMzc0NEJDREExRTlFMDEyODY2OUM4MzEzQTAxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMjWYXqp0d0DDcaXAb52zklkj
KDysjfLKJTMxdQ6KIG5PxHx0GGd4pihVDV2iB40tvR3yqXNM471dyZZmedbNY4Dn
XYeSd8SzhekyWo0Npax+Oa1qu/EYjvITsLrFCUPwOMdRahuc7V6SC9L4m+P7pWx/
tzrs292+wm2as4d0NqcqM55ynUhv13NPZvvS5IAN85qHw++I6qKHD1vt4ff8M7LA
8djBVhezAt83Lbr+18X5NYx+Ubo6ipNbrtTEYz9CSognzipRVFc/ugntjy7D2zzq
+66La8/lhVd6SsoryGIhve5kgvDc9yCXtuVFsNvyrHhKX0O1F3NpQl1ZBLy3AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUXLWVUhPjdEvNoengEoZpyDE6AeIwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMwMzkyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnR3jANBgkqhkiG9w0BAQsFAAOCAQEADnA8RVcwsK69gJPGpqcrqwifxEm4
kcey+lszY8IQpJqpFpT2C2Ls7PkfQyU4DhK4KblMfsxTer30C+/dCiCy+HRtjhGv
3UIeiD/JEMuUVCqUL+Htb3CABKyR/KD97HXk/B+fNwOyjK284SBFyZckhHX1T/nF
ZFtHNGrxtOnDMbsVfVEXJxCtR60Yd1IfvQ6ABo9ASzJBGK7Rnt6qWzkA22wMQwku
oTKDoCqGvlrxgACZs8WzkWRL88g6Cf3C4VZhoo6OWwr8b2RTHxmBrdtESBpljvTE
dX3LkMFLrdPzSwxH2gHQiFCBF+YyizuSyxoiw6Qzu9U0LFyz9kBaiiWBIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org