Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e20313336373837.roa
File: 3138352e3232312e3133342e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Nf4vkoB/rZoTwem8JSVhyPO4WH4jd65SxX5p6XxlCxA=
Subject key identifier: EF:5B:9F:80:75:9F:B9:AE:46:54:5D:35:66:D2:6B:86:E5:45:D6:6D
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: CAE19CC77C99C904F20D89DAAE69C35D2C47EA
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 10:59:00 +0000
ROA not before: Sun 11 Jun 2023 10:54:00 +0000
ROA not after: Sun 09 Jun 2024 10:59:00 +0000
asID: 136787
IP address blocks: 185.221.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:e1:9c:c7:7c:99:c9:04:f2:0d:89:da:ae:69:c3:5d:2c:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Jun 11 10:54:00 2023 GMT
Not After : Jun 9 10:59:00 2024 GMT
Subject: CN=EF5B9F80759FB9AE46545D3566D26B86E545D66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:e6:35:28:b9:79:f3:36:e3:4c:1b:b7:e0:
4b:3b:75:2d:c7:c8:7c:66:8f:78:68:36:5e:0b:5a:
1d:57:17:b0:2a:ff:3c:35:09:cc:c3:b0:7a:04:b0:
27:e4:3c:60:5d:e8:e6:77:2a:c6:10:7a:01:9b:61:
ea:3c:9b:11:2f:73:c8:41:5c:b7:3a:b5:a2:84:84:
6c:85:ca:eb:56:c5:86:65:e7:e9:90:ae:3b:a9:f3:
bb:30:1d:22:b4:ba:66:12:26:f6:fd:30:6c:27:e2:
f8:b2:79:71:9d:17:de:06:77:d4:02:40:d7:19:22:
a5:92:42:5b:ed:f5:af:2b:86:d6:ee:07:f4:7b:fa:
06:34:8b:40:6a:c5:f0:e2:64:d2:ce:ce:9c:a9:6b:
c9:73:65:f7:5f:3a:52:5e:72:e1:b8:5d:cf:75:aa:
1d:eb:bc:ab:5a:7b:8b:70:16:3d:e3:1d:af:41:64:
a9:6c:25:ed:13:7b:b1:a7:ec:b1:2c:cb:06:46:10:
f8:bb:51:2f:5a:7d:aa:54:c8:a7:0e:b2:f5:d0:2b:
2d:eb:0f:b8:00:b1:ce:32:d6:9f:7b:1a:b8:50:c1:
53:95:e3:f3:66:da:2e:81:ce:7b:18:e1:de:ae:60:
c0:3d:95:6a:ba:68:c7:d8:ea:3b:aa:c5:67:78:aa:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:9F:80:75:9F:B9:AE:46:54:5D:35:66:D2:6B:86:E5:45:D6:6D
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232312e3133342e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.134.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:31:9d:a3:c6:25:a2:3d:9a:83:f9:db:f8:35:e6:62:be:cb:
c5:46:96:02:72:33:b7:d8:09:c4:3a:f6:79:2d:c3:a4:0f:24:
62:88:76:eb:e3:b1:bc:a2:eb:ff:5f:5c:8d:d0:17:56:f7:7e:
26:42:6f:05:d6:1f:21:be:ee:f4:d7:1b:ca:b8:11:b5:95:08:
d0:b5:2d:a6:c5:89:81:6c:bf:cf:1c:67:c3:99:5a:ef:c0:1f:
69:f5:64:57:84:87:a8:3e:68:f0:58:b6:1d:9b:e0:30:83:78:
32:b5:7e:cc:74:e7:42:eb:db:c6:40:4a:59:6c:f8:5c:74:5b:
67:bd:bc:15:18:83:c2:51:62:8d:fe:2f:28:4e:27:74:38:db:
fd:75:9d:74:94:8c:b7:f3:15:c9:bd:cd:ec:be:35:f2:a2:0d:
35:13:e9:33:8a:a6:89:f6:58:ee:43:6c:0d:70:f1:47:68:a0:
e2:16:d1:6b:94:24:95:4c:3c:6d:ff:f3:73:98:01:c4:6e:ac:
c3:e0:7f:cc:53:e8:85:48:86:34:79:4d:ac:0b:b8:1e:f3:1b:
a6:06:30:0a:af:08:40:17:70:a2:66:7c:b6:d1:b5:44:ad:84:
1a:41:3d:62:9a:3d:bc:b9:0c:d5:60:e6:be:35:94:e7:00:db:
da:94:3a:33
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUAMrhnMd8mckE8g2J2q5pw10sR+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzA2MTExMDU0MDBaFw0yNDA2MDkxMDU5MDBaMDMxMTAvBgNV
BAMTKEVGNUI5RjgwNzU5RkI5QUU0NjU0NUQzNTY2RDI2Qjg2RTU0NUQ2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFueY1KLl58zbjTBu34Es7dS3H
yHxmj3hoNl4LWh1XF7Aq/zw1CczDsHoEsCfkPGBd6OZ3KsYQegGbYeo8mxEvc8hB
XLc6taKEhGyFyutWxYZl5+mQrjup87swHSK0umYSJvb9MGwn4viyeXGdF94Gd9QC
QNcZIqWSQlvt9a8rhtbuB/R7+gY0i0BqxfDiZNLOzpypa8lzZfdfOlJecuG4Xc91
qh3rvKtae4twFj3jHa9BZKlsJe0Te7Gn7LEsywZGEPi7US9afapUyKcOsvXQKy3r
D7gAsc4y1p97GrhQwVOV4/Nm2i6BznsY4d6uYMA9lWq6aMfY6juqxWd4qiAjAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU71ufgHWfua5GVF01ZtJrhuVF1m0wHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMyMzEyZTMx
MzMzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAbndhjANBgkqhkiG9w0BAQsFAAOCAQEAfDGdo8Yloj2ag/nb+DXmYr7LxUaW
AnIzt9gJxDr2eS3DpA8kYoh26+OxvKLr/19cjdAXVvd+JkJvBdYfIb7u9NcbyrgR
tZUI0LUtpsWJgWy/zxxnw5la78AfafVkV4SHqD5o8Fi2HZvgMIN4MrV+zHTnQuvb
xkBKWWz4XHRbZ728FRiDwlFijf4vKE4ndDjb/XWddJSMt/MVyb3N7L418qINNRPp
M4qmifZY7kNsDXDxR2ig4hbRa5QklUw8bf/zc5gBxG6sw+B/zFPohUiGNHlNrAu4
HvMbpgYwCq8IQBdwomZ8ttG1RK2EGkE9Ypo9vLkM1WDmvjWU5wDb2pQ6Mw==
-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org