Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
File: 3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier: B+bKSKnjG0sDg5WA18Yqsyyf5J+jsR0WzOraFUcdBJQ=
Subject key identifier: 74:CC:89:F0:01:4A:62:9D:AB:D4:46:3A:0C:F0:C3:15:3C:58:81:30
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 227420812F0B2AF683E1C16311FB4BFC42917C04
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
Signing time: Mon 27 Mar 2023 08:27:13 +0000
ROA not before: Mon 27 Mar 2023 08:22:13 +0000
ROA not after: Mon 25 Mar 2024 08:27:13 +0000
asID: 6597
IP address blocks: 185.221.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:74:20:81:2f:0b:2a:f6:83:e1:c1:63:11:fb:4b:fc:42:91:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:13 2023 GMT
Not After : Mar 25 08:27:13 2024 GMT
Subject: CN=74CC89F0014A629DABD4463A0CF0C3153C588130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:97:c1:39:87:b6:a8:46:5a:a0:c2:37:0b:
fe:4f:f8:07:44:94:56:c0:98:39:49:0c:26:6d:c3:
95:c9:0d:a6:ce:a5:05:aa:aa:cf:55:4f:6e:60:04:
ae:28:22:10:0c:72:6d:c9:83:c1:31:ea:07:e6:53:
db:dc:d2:7e:93:4f:ca:7b:3e:a3:19:86:93:80:b8:
47:40:26:01:f3:1a:5b:77:f5:6e:d7:cc:f9:29:ab:
94:40:c5:a7:7f:34:11:f3:d8:3f:73:df:6d:3f:bf:
d0:9a:f8:05:4c:a1:a1:6a:fd:ba:d3:43:d9:53:2d:
38:c8:41:b4:8b:63:74:e3:f9:53:e9:80:fd:d1:56:
f4:df:2a:66:54:1e:7c:c7:54:d7:1f:16:23:53:d4:
39:e7:e3:f0:50:67:03:e8:92:bd:0b:f8:56:d7:db:
a4:17:9e:d5:cb:0a:a7:cd:26:8c:42:b5:b3:6a:17:
4e:cd:50:5f:03:4f:94:9b:30:75:37:f3:3a:4d:96:
f4:da:cf:af:5e:74:05:53:70:e9:4a:d3:31:ae:c7:
cd:83:a9:d6:10:a1:26:2e:1c:12:e1:a9:b9:9a:c3:
a6:2c:a4:56:00:c5:4e:f9:c3:04:1f:53:75:16:dd:
5e:d5:40:6a:e7:ba:bc:90:e7:bd:29:14:a2:1c:dd:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:89:F0:01:4A:62:9D:AB:D4:46:3A:0C:F0:C3:15:3C:58:81:30
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0d:2f:54:78:d0:90:72:9d:92:b5:37:a8:5e:50:32:48:a1:
66:06:11:47:08:80:eb:5d:e8:bc:4d:24:a6:de:47:65:d5:82:
d3:40:96:4b:e4:97:89:68:ae:07:48:b7:c8:bb:c9:a3:34:b4:
bd:c3:46:d2:9d:48:30:c6:b1:17:a4:bd:50:e5:02:86:30:44:
2d:47:6a:a5:f8:3d:a6:f4:d6:d3:85:67:e9:87:f8:10:9e:10:
47:9a:8d:5f:a0:b5:59:ac:85:d7:67:69:55:53:14:1f:28:8e:
f9:ca:32:6b:83:d3:43:32:d4:7a:ab:0d:da:41:1e:10:cf:a9:
f2:ff:b4:ec:cd:2d:e1:18:e6:4b:27:25:d3:8b:88:93:94:9b:
fc:1d:3d:32:f1:6d:ef:56:a4:69:a2:31:c9:56:ba:00:3e:43:
29:43:e1:47:37:01:5b:83:07:e6:6f:13:18:fe:84:fd:35:c9:
5a:64:13:99:1f:58:f2:24:63:f1:2c:28:ec:03:73:97:7b:09:
0b:89:2b:fd:74:33:c4:17:6c:50:a8:8f:d0:b4:16:70:30:7c:
0f:6d:bd:79:a8:37:9e:4c:5e:79:45:4a:ea:be:6b:cd:49:ed:
4e:56:9c:f8:1f:ba:51:91:62:fd:f3:a9:a0:e4:db:ee:7c:e6:
80:4e:08:1c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUInQggS8LKvaD4cFjEftL/EKRfAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTNaFw0yNDAzMjUwODI3MTNaMDMxMTAvBgNV
BAMTKDc0Q0M4OUYwMDE0QTYyOURBQkQ0NDYzQTBDRjBDMzE1M0M1ODgxMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJZfBOYe2qEZaoMI3C/5P+AdE
lFbAmDlJDCZtw5XJDabOpQWqqs9VT25gBK4oIhAMcm3Jg8Ex6gfmU9vc0n6TT8p7
PqMZhpOAuEdAJgHzGlt39W7XzPkpq5RAxad/NBHz2D9z320/v9Ca+AVMoaFq/brT
Q9lTLTjIQbSLY3Tj+VPpgP3RVvTfKmZUHnzHVNcfFiNT1Dnn4/BQZwPokr0L+FbX
26QXntXLCqfNJoxCtbNqF07NUF8DT5SbMHU38zpNlvTaz69edAVTcOlK0zGux82D
qdYQoSYuHBLhqbmaw6YspFYAxU75wwQfU3UW3V7VQGrnuryQ570pFKIc3d8bAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUdMyJ8AFKYp2r1EY6DPDDFTxYgTAwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMyMzEyZTMx
MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzUzOTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ud2FMA0GCSqGSIb3DQEBCwUAA4IBAQAfDS9UeNCQcp2StTeoXlAySKFmBhFHCIDr
Xei8TSSm3kdl1YLTQJZL5JeJaK4HSLfIu8mjNLS9w0bSnUgwxrEXpL1Q5QKGMEQt
R2ql+D2m9NbThWfph/gQnhBHmo1foLVZrIXXZ2lVUxQfKI75yjJrg9NDMtR6qw3a
QR4Qz6ny/7TszS3hGOZLJyXTi4iTlJv8HT0y8W3vVqRpojHJVroAPkMpQ+FHNwFb
gwfmbxMY/oT9NclaZBOZH1jyJGPxLCjsA3OXewkLiSv9dDPEF2xQqI/QtBZwMHwP
bb15qDeeTF55RUrqvmvNSe1OVpz4H7pRkWL986mg5NvufOaATggc
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org