Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: YyURp9m/zcxy6itsLosnL2yUn/AxMupbkPA23DW72cc=
Subject key identifier: 31:85:7E:65:05:7C:FA:26:9F:70:B5:35:5C:B6:7F:D4:F1:82:7C:7F
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 47E578891584E283F55F5EA4E4D442229D46C62C
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 136787
IP address blocks: 185.219.140.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e5:78:89:15:84:e2:83:f5:5f:5e:a4:e4:d4:42:22:9d:46:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=31857E65057CFA269F70B5355CB67FD4F1827C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:36:ce:2e:58:9b:b6:9d:9d:41:40:ce:3b:
6d:35:06:22:ce:38:37:6d:bd:26:02:85:fb:0c:80:
3d:76:61:ee:c7:f6:88:bc:3f:27:bd:04:2e:20:77:
ec:4f:cc:a9:d0:01:d8:11:4a:ea:a7:d2:49:8c:33:
32:6f:77:02:d1:84:32:a9:25:23:c8:65:76:04:76:
74:31:37:9d:7d:65:a2:94:0b:27:46:fb:c6:c3:72:
21:7a:59:17:57:ce:1a:99:17:78:34:71:d7:98:71:
1b:aa:3a:13:98:13:4b:0c:ef:3e:27:4e:f7:53:02:
57:04:6a:55:af:9b:e9:c7:cd:86:33:32:37:6e:a3:
fb:3b:19:18:5d:f6:7c:b0:05:8b:7d:6e:02:69:dd:
d6:a0:7a:d9:fd:b2:49:fb:00:98:47:0c:0b:0a:17:
f2:a5:cc:63:1d:ac:14:44:44:73:cb:14:be:80:23:
34:00:4f:2a:af:a6:f0:6d:01:f7:d7:12:69:00:71:
b2:6e:d4:f3:1c:f4:7a:1b:c3:60:66:70:92:ea:b4:
95:6b:10:96:bf:bc:0c:9e:f7:b2:59:fa:fd:02:ea:
c4:93:70:6d:57:1c:66:d9:58:4a:05:15:ec:21:37:
6c:11:d4:97:62:7e:c4:28:8a:e5:57:e5:65:28:de:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:7E:65:05:7C:FA:26:9F:70:B5:35:5C:B6:7F:D4:F1:82:7C:7F
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.140.0/24
Signature Algorithm: sha256WithRSAEncryption
09:13:e2:8a:82:35:86:30:ac:7e:3d:57:94:51:c2:04:f6:d7:
6a:71:be:bc:b9:e1:43:c6:7b:1b:7f:14:a8:2b:e9:c8:da:67:
c0:e6:1e:c7:bc:11:6e:35:b2:c0:06:13:7d:0e:81:29:27:17:
e5:4d:7f:92:4b:dc:d4:3e:db:76:9a:62:15:04:f3:17:30:69:
8a:a2:91:cd:6b:22:32:10:a5:08:d9:2e:82:8c:73:32:b2:df:
20:91:00:df:d9:bf:d3:2b:b9:5e:83:3c:9a:40:85:1b:25:fd:
e4:52:25:80:c5:c8:1b:ad:1e:d7:c2:93:84:f8:8a:47:b7:e4:
39:7d:0f:33:51:59:dd:22:2c:18:6c:69:a3:84:f0:77:9f:11:
40:3e:d9:dd:c6:1a:56:db:30:c4:b9:d5:0d:5a:af:36:ec:4d:
ab:7a:84:06:92:6c:f8:93:d1:5f:8f:ed:21:1d:1b:2c:3a:26:
f3:14:2a:7a:be:2f:23:cd:08:e9:97:f2:f5:18:6e:05:56:f9:
ae:4b:0e:70:e4:42:a8:c6:56:72:13:c4:49:58:61:3e:5f:68:
e9:67:38:8a:a3:3e:ff:83:9f:aa:49:21:9c:01:da:2c:cc:4c:
b2:33:c0:8c:0c:1a:79:55:36:c2:51:9f:c5:1a:0b:ef:35:4a:
b8:3e:90:f1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUR+V4iRWE4oP1X16k5NRCIp1GxiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMThaFw0yNDAzMjUwODI3MThaMDMxMTAvBgNV
BAMTKDMxODU3RTY1MDU3Q0ZBMjY5RjcwQjUzNTVDQjY3RkQ0RjE4MjdDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6zbOLlibtp2dQUDOO201BiLO
ODdtvSYChfsMgD12Ye7H9oi8Pye9BC4gd+xPzKnQAdgRSuqn0kmMMzJvdwLRhDKp
JSPIZXYEdnQxN519ZaKUCydG+8bDciF6WRdXzhqZF3g0cdeYcRuqOhOYE0sM7z4n
TvdTAlcEalWvm+nHzYYzMjduo/s7GRhd9nywBYt9bgJp3dagetn9skn7AJhHDAsK
F/KlzGMdrBRERHPLFL6AIzQATyqvpvBtAffXEmkAcbJu1PMc9Hobw2BmcJLqtJVr
EJa/vAye97JZ+v0C6sSTcG1XHGbZWEoFFewhN2wR1JdifsQoiuVX5WUo3t+RAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUMYV+ZQV8+iafcLU1XLZ/1PGCfH8wHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMxMzkyZTMx
MzQzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnbjDANBgkqhkiG9w0BAQsFAAOCAQEACRPiioI1hjCsfj1XlFHCBPbXanG+
vLnhQ8Z7G38UqCvpyNpnwOYex7wRbjWywAYTfQ6BKScX5U1/kkvc1D7bdppiFQTz
FzBpiqKRzWsiMhClCNkugoxzMrLfIJEA39m/0yu5XoM8mkCFGyX95FIlgMXIG60e
18KThPiKR7fkOX0PM1FZ3SIsGGxpo4Twd58RQD7Z3cYaVtswxLnVDVqvNuxNq3qE
BpJs+JPRX4/tIR0bLDom8xQqer4vI80I6Zfy9RhuBVb5rksOcORCqMZWchPESVhh
Pl9o6Wc4iqM+/4OfqkkhnAHaLMxMsjPAjAwaeVU2wlGfxRoL7zVKuD6Q8Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:16 2025 by rpki-client