Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234322e302f32342d3332203d3e203531313637.roa
File: 3138352e3232322e3234322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: XwTh19cM3Dnp0N/E+w+/Er7UEP63HdyH5Xa6zdmBdAI=
Subject key identifier: C5:AA:AF:B0:59:14:1D:BD:0D:E6:6D:12:B6:7F:79:EC:89:16:D3:C0
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 18EB9C971F97A85E87E323DCB995AB83E922B30E
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234322e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:17 +0000
ROA not before: Mon 27 Mar 2023 08:22:17 +0000
ROA not after: Mon 25 Mar 2024 08:27:17 +0000
asID: 51167
IP address blocks: 185.222.242.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:eb:9c:97:1f:97:a8:5e:87:e3:23:dc:b9:95:ab:83:e9:22:b3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:17 2023 GMT
Not After : Mar 25 08:27:17 2024 GMT
Subject: CN=C5AAAFB059141DBD0DE66D12B67F79EC8916D3C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:20:c1:25:37:e3:d6:90:25:fd:93:79:c5:
83:55:bc:8a:34:1d:ab:ec:b2:27:a7:f8:02:3a:9e:
08:72:44:c1:dc:cb:1b:60:ca:1b:e4:14:31:a3:7d:
c3:e6:19:ff:8e:14:e6:a3:1d:e8:2f:07:a8:61:e7:
88:76:74:e4:b5:14:16:cd:e2:6d:e8:48:32:9f:27:
6a:aa:d2:28:03:86:99:88:eb:c4:d3:43:c1:2e:cd:
b6:8c:62:25:7c:9d:fe:79:81:3d:0d:88:6b:22:a2:
22:d5:c7:7a:cf:70:5a:02:40:13:ca:53:89:43:ac:
fe:2f:20:e6:2d:6b:73:98:ab:b1:8c:68:af:7c:62:
ce:23:f4:9d:39:38:88:b4:24:29:8d:92:5f:b6:45:
c3:9e:f5:10:d5:03:c8:b8:3d:9c:84:69:5b:00:be:
15:60:f8:7a:09:96:3b:b1:3a:70:c0:98:41:f1:ca:
48:54:e4:28:42:73:c3:f8:f3:b2:e3:10:61:37:8d:
74:66:f2:1f:da:f1:39:14:30:78:db:32:65:69:3c:
da:3f:8a:44:8d:22:49:39:e0:37:14:1e:a4:1f:43:
83:05:98:49:51:e0:85:80:fa:35:a0:b6:0a:f7:b8:
53:c4:3a:66:a9:a5:94:88:20:c0:32:4f:cc:bc:1d:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:AF:B0:59:14:1D:BD:0D:E6:6D:12:B6:7F:79:EC:89:16:D3:C0
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3232322e3234322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5a:6a:4d:5a:d6:dc:2a:98:85:75:fc:57:ea:20:77:22:48:
23:0b:c7:28:e6:77:d5:6f:b2:7c:cd:28:75:c5:d5:34:89:fe:
81:ac:b8:45:46:3c:82:a8:ca:09:a4:b7:c9:ad:59:1d:a8:99:
10:f4:dd:be:3c:81:5f:31:6e:7c:2a:42:31:81:e8:34:d1:2f:
2d:c2:92:60:0f:43:27:e3:fe:64:55:89:fc:32:7c:a0:8c:2a:
1b:d6:8c:59:25:73:6b:37:9e:a8:ca:14:d1:17:b1:e6:00:e6:
58:4e:2b:44:71:1a:e2:d3:bc:0c:72:fb:7e:73:15:99:ed:56:
b0:4b:9c:b6:a0:d2:c6:d0:95:55:8e:e2:ea:05:97:f3:8e:db:
0a:ac:ca:32:8f:d2:1c:8f:72:4d:fc:a9:41:64:dc:7b:9c:b8:
7f:1b:be:e8:5e:05:2e:be:0d:f2:3b:27:42:43:7a:da:57:39:
96:05:cc:d6:13:44:c0:e3:eb:9b:e9:47:b8:75:9f:19:09:d8:
e0:ce:54:e5:2b:f4:2d:a9:f6:70:08:6e:5b:55:c4:29:81:73:
e4:5b:85:77:7d:23:c2:98:d1:55:d1:c5:d9:6f:21:71:5d:46:
21:53:e6:65:d2:a2:d6:aa:18:ea:ff:af:0f:bb:68:86:62:ab:
18:db:63:16
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGOuclx+XqF6H4yPcuZWrg+kisw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTdaFw0yNDAzMjUwODI3MTdaMDMxMTAvBgNV
BAMTKEM1QUFBRkIwNTkxNDFEQkQwREU2NkQxMkI2N0Y3OUVDODkxNkQzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHSDBJTfj1pAl/ZN5xYNVvIo0
Havssien+AI6nghyRMHcyxtgyhvkFDGjfcPmGf+OFOajHegvB6hh54h2dOS1FBbN
4m3oSDKfJ2qq0igDhpmI68TTQ8EuzbaMYiV8nf55gT0NiGsioiLVx3rPcFoCQBPK
U4lDrP4vIOYta3OYq7GMaK98Ys4j9J05OIi0JCmNkl+2RcOe9RDVA8i4PZyEaVsA
vhVg+HoJljuxOnDAmEHxykhU5ChCc8P487LjEGE3jXRm8h/a8TkUMHjbMmVpPNo/
ikSNIkk54DcUHqQfQ4MFmElR4IWA+jWgtgr3uFPEOmappZSIIMAyT8y8HdpdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUxaqvsFkUHb0N5m0Stn957IkW08AwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjMyMzIyZTMy
MzQzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC53vIwDQYJKoZIhvcNAQELBQADggEBAK9aak1a1twqmIV1/FfqIHciSCMLxyjm
d9VvsnzNKHXF1TSJ/oGsuEVGPIKoygmkt8mtWR2omRD03b48gV8xbnwqQjGB6DTR
Ly3CkmAPQyfj/mRVifwyfKCMKhvWjFklc2s3nqjKFNEXseYA5lhOK0RxGuLTvAxy
+35zFZntVrBLnLag0sbQlVWO4uoFl/OO2wqsyjKP0hyPck38qUFk3HucuH8bvuhe
BS6+DfI7J0JDetpXOZYFzNYTRMDj65vpR7h1nxkJ2ODOVOUr9C2p9nAIbltVxCmB
c+RbhXd9I8KY0VXRxdlvIXFdRiFT5mXSotaqGOr/rw+7aIZiqxjbYxY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org