Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa
File: 3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: 4fxLfA4JuPItrx9poNNu/eqk2UcRydyU0MhTugI/cDU=
Subject key identifier: D0:F4:1C:5E:25:70:EC:31:21:E9:C4:54:61:20:D1:69:2C:7A:77:C9
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2631D6483438C7905C56C591F204E4BEE5320F9B
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:17 +0000
ROA not before: Mon 27 Mar 2023 08:22:17 +0000
ROA not after: Mon 25 Mar 2024 08:27:17 +0000
asID: 61317
IP address blocks: 185.241.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:31:d6:48:34:38:c7:90:5c:56:c5:91:f2:04:e4:be:e5:32:0f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:17 2023 GMT
Not After : Mar 25 08:27:17 2024 GMT
Subject: CN=D0F41C5E2570EC3121E9C4546120D1692C7A77C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:fe:ac:91:be:97:b3:2e:ad:1a:bc:2e:eb:
53:93:a3:f1:aa:73:52:e9:d1:c4:0d:dc:33:78:dd:
a6:2e:73:45:5b:72:9c:4b:42:2d:55:79:48:8c:5c:
78:c1:98:ba:e4:ff:a2:ad:7a:3b:c4:dd:f3:20:f1:
0d:af:94:95:ed:3f:62:e7:99:cc:d4:0b:6a:39:0b:
fb:42:c6:28:5e:76:04:fb:e4:bc:d2:cf:68:e2:f9:
54:b9:ff:b0:f9:47:3c:d3:5b:9b:c9:57:7b:4c:03:
2d:06:45:92:64:35:71:df:71:e6:57:b6:b3:aa:61:
57:86:23:7f:7a:51:b9:91:9b:fc:6c:51:e4:f6:11:
78:71:a2:04:32:a6:6c:be:3f:08:8c:5c:78:7c:bf:
64:a9:4d:92:43:ff:89:6f:ba:8b:6d:47:05:8e:1f:
8a:5a:cf:d4:5a:56:8b:e8:51:78:66:90:89:d5:0e:
c4:e9:89:56:61:70:2d:2b:ee:21:7e:eb:8b:42:5e:
1d:3c:4c:75:19:de:3e:e3:af:c1:02:e6:04:70:3b:
75:0d:c9:d1:b1:f5:35:f0:ec:89:f9:59:76:10:d7:
2e:d5:c1:ae:cf:1a:9a:a0:1d:9b:f6:27:c3:d5:25:
ec:f2:c2:6c:c1:45:8b:64:58:0e:21:1a:2e:c8:1e:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:1C:5E:25:70:EC:31:21:E9:C4:54:61:20:D1:69:2C:7A:77:C9
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134382e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/23
Signature Algorithm: sha256WithRSAEncryption
97:68:f8:64:62:c1:49:72:43:24:1d:78:47:c9:74:a0:29:0f:
e4:58:40:df:49:c7:be:ec:31:36:7b:a3:0e:c1:3b:60:94:ea:
ec:19:03:9c:69:04:53:e7:c9:2b:29:58:1f:14:f7:b2:87:05:
75:28:fd:b0:24:e4:2c:50:46:af:e3:86:f7:e3:72:6a:36:90:
85:b1:3d:85:f7:08:a4:81:76:85:69:43:77:e0:ff:6f:b5:48:
62:d6:36:df:de:b8:c0:cd:9c:95:41:de:ce:83:7d:3e:76:b8:
03:02:26:77:8a:18:51:0a:02:7d:c7:44:94:59:47:5c:d7:69:
36:53:af:94:e1:0e:e8:0a:b4:4b:79:ab:b9:17:de:ea:86:0d:
e1:80:68:7f:9c:9b:6f:bf:b0:35:3a:de:c7:e8:08:d2:90:ad:
a0:2b:64:90:99:97:f8:00:18:0d:7b:51:ad:4f:95:57:ad:5c:
dd:06:de:1c:4c:3a:ed:62:04:24:8d:d1:99:a0:8b:89:6b:94:
56:c7:08:3b:83:d0:ee:cc:04:31:dd:c9:26:5e:29:4b:0b:f5:
f7:20:aa:68:4e:c1:41:9f:d5:2f:13:6f:27:28:c1:b4:a9:b1:
9a:a3:a6:f4:3f:80:24:dc:4c:d7:f4:66:d3:05:49:11:9e:50:
cf:63:41:61
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJjHWSDQ4x5BcVsWR8gTkvuUyD5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTdaFw0yNDAzMjUwODI3MTdaMDMxMTAvBgNV
BAMTKEQwRjQxQzVFMjU3MEVDMzEyMUU5QzQ1NDYxMjBEMTY5MkM3QTc3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y/6skb6Xsy6tGrwu61OTo/Gq
c1Lp0cQN3DN43aYuc0VbcpxLQi1VeUiMXHjBmLrk/6KtejvE3fMg8Q2vlJXtP2Ln
mczUC2o5C/tCxihedgT75LzSz2ji+VS5/7D5RzzTW5vJV3tMAy0GRZJkNXHfceZX
trOqYVeGI396UbmRm/xsUeT2EXhxogQypmy+PwiMXHh8v2SpTZJD/4lvuottRwWO
H4paz9RaVovoUXhmkInVDsTpiVZhcC0r7iF+64tCXh08THUZ3j7jr8EC5gRwO3UN
ydGx9TXw7In5WXYQ1y7Vwa7PGpqgHZv2J8PVJezywmzBRYtkWA4hGi7IHg81AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU0PQcXiVw7DEh6cRUYSDRaSx6d8kwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzODM1MmUzMjM0MzEyZTMx
MzQzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG58ZQwDQYJKoZIhvcNAQELBQADggEBAJdo+GRiwUlyQyQdeEfJdKApD+RYQN9J
x77sMTZ7ow7BO2CU6uwZA5xpBFPnySspWB8U97KHBXUo/bAk5CxQRq/jhvfjcmo2
kIWxPYX3CKSBdoVpQ3fg/2+1SGLWNt/euMDNnJVB3s6DfT52uAMCJneKGFEKAn3H
RJRZR1zXaTZTr5ThDugKtEt5q7kX3uqGDeGAaH+cm2+/sDU63sfoCNKQraArZJCZ
l/gAGA17Ua1PlVetXN0G3hxMOu1iBCSN0Zmgi4lrlFbHCDuD0O7MBDHdySZeKUsL
9fcgqmhOwUGf1S8TbycowbSpsZqjpvQ/gCTcTNf0ZtMFSRGeUM9jQWE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:33 2025 by rpki-client