Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
File: 3138352e3231312e342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: vb+M57dKtF2tSypXM9JeIqOaDcex8lYuLEQaZo344qo=
Subject key identifier: 49:B5:59:CD:46:D6:42:39:80:BE:4B:5F:F1:B2:07:27:DE:C0:BE:20
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 645DA5A0EEBB62CEDA3D36F3F58C1858AC4BA5B5
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:19 +0000
ROA not before: Mon 27 Mar 2023 08:22:19 +0000
ROA not after: Mon 25 Mar 2024 08:27:19 +0000
asID: 47583
IP address blocks: 185.211.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5d:a5:a0:ee:bb:62:ce:da:3d:36:f3:f5:8c:18:58:ac:4b:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:19 2023 GMT
Not After : Mar 25 08:27:19 2024 GMT
Subject: CN=49B559CD46D6423980BE4B5FF1B20727DEC0BE20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:91:10:cd:af:26:47:dc:ca:9e:ba:8d:9e:
ac:4c:25:6f:f4:a5:7c:06:c0:ca:c4:8e:9d:e8:68:
28:1b:c0:96:86:6c:7c:27:7f:9b:09:e9:a8:53:33:
11:1e:7d:6d:d9:8b:a2:43:11:90:55:08:47:af:94:
89:20:b5:25:79:e0:dc:84:94:d2:a6:31:d6:fe:c6:
79:4d:49:66:cc:ca:73:5b:0c:79:7a:94:c7:d6:cc:
55:00:7c:c9:e8:a6:35:ce:05:ff:3b:6e:9b:25:7c:
f0:7f:f9:5c:a3:ce:8f:57:10:e0:ee:7c:2b:0f:52:
0f:d7:03:4d:63:ef:7f:f2:7c:df:79:40:85:8f:2e:
23:50:fb:fb:d6:04:f4:cb:4f:64:d4:07:f2:09:59:
47:dc:ae:47:b3:95:15:9f:35:ef:2f:61:49:21:62:
a9:d1:8e:6f:49:8f:10:70:e9:6b:e2:4c:1e:47:d8:
47:33:a3:fc:36:63:4c:b9:01:41:3d:d3:e1:b0:c3:
2c:b8:3e:00:b9:63:22:6a:e0:6b:2c:29:4f:31:70:
8e:60:95:67:6b:5c:3e:d0:db:74:c6:4f:55:e5:e0:
53:10:9a:6d:14:2d:5f:db:b3:30:f7:7b:45:2b:ea:
32:aa:86:69:81:26:a1:1e:83:f1:ef:5d:f1:1f:d3:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B5:59:CD:46:D6:42:39:80:BE:4B:5F:F1:B2:07:27:DE:C0:BE:20
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231312e342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.4.0/24
Signature Algorithm: sha256WithRSAEncryption
43:93:fc:90:8a:8c:9d:b9:a9:81:2a:f5:47:11:7c:06:a0:c9:
ae:2c:28:bd:70:bb:ed:3b:2a:f9:b4:c0:0f:bf:77:be:30:9d:
61:61:58:20:86:05:89:18:74:44:61:60:38:5f:92:36:c4:d2:
55:9f:2b:b2:de:ab:87:82:82:a0:86:55:8d:f2:d8:48:59:d0:
3f:66:28:6f:4e:1d:96:75:c6:96:50:50:93:2d:8f:5a:55:d2:
49:e4:25:cb:90:91:c0:da:f6:d3:ef:21:ec:dc:ae:c9:ec:32:
87:16:bf:5e:00:f3:cf:a8:02:76:4e:94:9d:e4:ff:9f:c9:c1:
21:ce:f1:e2:c2:1a:02:17:6e:11:16:94:e3:fe:f5:58:a6:4b:
98:25:6c:e7:80:67:c8:3c:03:3b:89:09:ce:bd:bb:cf:8f:f7:
bf:53:de:b3:e9:ce:66:75:58:e3:76:5b:eb:1a:9f:18:5a:53:
0c:57:3a:01:e1:af:8b:27:09:c2:06:e2:a5:84:b7:3b:68:b0:
5b:bd:1d:ca:37:b5:74:47:72:c4:80:21:5d:14:73:8c:f8:ee:
14:ba:c1:b9:86:d1:f0:1c:04:ab:7c:33:12:c1:ae:10:89:3f:
5f:00:e9:77:70:eb:2b:dc:f7:0f:43:ac:21:f1:71:20:23:83:
76:e0:db:cf
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZF2loO67Ys7aPTbz9YwYWKxLpbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTlaFw0yNDAzMjUwODI3MTlaMDMxMTAvBgNV
BAMTKDQ5QjU1OUNENDZENjQyMzk4MEJFNEI1RkYxQjIwNzI3REVDMEJFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5ZEQza8mR9zKnrqNnqxMJW/0
pXwGwMrEjp3oaCgbwJaGbHwnf5sJ6ahTMxEefW3Zi6JDEZBVCEevlIkgtSV54NyE
lNKmMdb+xnlNSWbMynNbDHl6lMfWzFUAfMnopjXOBf87bpslfPB/+Vyjzo9XEODu
fCsPUg/XA01j73/yfN95QIWPLiNQ+/vWBPTLT2TUB/IJWUfcrkezlRWfNe8vYUkh
YqnRjm9JjxBw6WviTB5H2Eczo/w2Y0y5AUE90+Gwwyy4PgC5YyJq4GssKU8xcI5g
lWdrXD7Q23TGT1Xl4FMQmm0ULV/bszD3e0Ur6jKqhmmBJqEeg/HvXfEf05z1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUSbVZzUbWQjmAvktf8bIHJ97AviAwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMxMzEyZTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnT
BDANBgkqhkiG9w0BAQsFAAOCAQEAQ5P8kIqMnbmpgSr1RxF8BqDJriwovXC77Tsq
+bTAD793vjCdYWFYIIYFiRh0RGFgOF+SNsTSVZ8rst6rh4KCoIZVjfLYSFnQP2Yo
b04dlnXGllBQky2PWlXSSeQly5CRwNr20+8h7Nyuyewyhxa/XgDzz6gCdk6UneT/
n8nBIc7x4sIaAhduERaU4/71WKZLmCVs54BnyDwDO4kJzr27z4/3v1Pes+nOZnVY
43Zb6xqfGFpTDFc6AeGviycJwgbipYS3O2iwW70dyje1dEdyxIAhXRRzjPjuFLrB
uYbR8BwEq3wzEsGuEIk/XwDpd3DrK9z3D0OsIfFxICODduDbzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org