Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
File: 3139322e3134352e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ocxPWA/Srak8dUPMzDrzWhsPGaca4qfarqIIztdqWGU=
Subject key identifier: 12:29:3C:FD:E6:AD:22:DA:8E:F9:63:FF:C6:95:2F:43:6B:D1:5D:C6
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 66EBBC30FB8335431C0A557FEB18FC499D7863E5
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:18 +0000
ROA not before: Mon 27 Mar 2023 08:22:18 +0000
ROA not after: Mon 25 Mar 2024 08:27:18 +0000
asID: 61317
IP address blocks: 192.145.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:eb:bc:30:fb:83:35:43:1c:0a:55:7f:eb:18:fc:49:9d:78:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:18 2023 GMT
Not After : Mar 25 08:27:18 2024 GMT
Subject: CN=12293CFDE6AD22DA8EF963FFC6952F436BD15DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:9f:04:09:a5:f6:eb:c0:40:a3:54:9b:19:
f7:d4:89:ab:21:b9:d4:65:7a:ac:25:81:8a:9a:fd:
b6:dc:db:82:b1:28:80:02:29:82:f6:34:62:75:aa:
66:0e:87:2d:7b:7f:82:d6:c9:83:4d:dc:86:e6:b7:
04:bb:ad:c5:6e:a2:a9:5c:d3:59:7f:1e:04:37:a1:
5e:8c:ec:4b:de:11:4e:d0:4e:46:a3:de:a3:8a:55:
0e:9c:8d:1c:96:91:a5:c1:3a:f2:a4:53:4f:c2:ce:
1f:56:fb:e9:4b:c6:0d:d4:83:1e:8d:ff:66:1d:76:
43:c4:a7:85:c1:61:0d:f6:90:df:33:46:70:82:6c:
70:4c:6f:12:f7:c3:ca:07:a1:45:6b:c3:be:89:a6:
b0:98:f2:e1:f1:b0:17:f0:17:de:df:b3:f5:f2:f0:
eb:5c:19:2c:f4:26:42:aa:8f:82:57:52:85:f5:a0:
6c:a2:95:18:3f:20:98:54:a0:31:9c:61:d4:f8:bc:
42:95:7c:e5:5f:6b:5f:82:cd:49:fb:5a:f6:50:b3:
81:a6:6c:9b:0c:1d:3c:c1:fe:cb:de:03:a0:f8:08:
e6:c0:3c:51:a2:36:11:a5:38:42:3b:36:fa:7f:ab:
d0:0d:6c:8d:f1:a3:13:e0:20:e3:ce:73:93:27:2d:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:3C:FD:E6:AD:22:DA:8E:F9:63:FF:C6:95:2F:43:6B:D1:5D:C6
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dc:87:8c:cc:7f:39:e1:18:ec:b8:d2:c6:3e:6b:93:78:54:
7d:b6:17:41:9e:4b:5a:f7:20:7e:23:a9:da:e3:59:7b:2f:7f:
b2:2f:fa:72:d5:a3:40:d1:47:6d:de:05:be:0f:eb:10:8e:db:
c5:00:88:ca:a4:40:2f:53:9e:b0:fc:a8:7a:5b:f1:7f:3e:31:
32:d5:39:dd:24:fe:01:f8:f6:09:18:da:78:ba:82:18:aa:16:
9a:04:ea:43:06:17:6d:1a:e0:7b:23:19:0f:e8:d1:86:a2:8f:
75:c7:92:12:c4:0d:9d:75:03:09:3d:3b:15:50:bf:5e:a1:b5:
0b:74:a5:c1:4d:cb:a3:81:1d:8d:d3:18:ea:1a:88:88:0b:83:
08:75:d3:38:21:01:b3:2e:8d:4b:1c:ba:14:1e:cf:cf:1a:44:
74:7d:0c:c9:f3:a3:26:2d:87:a6:54:92:82:93:ef:b2:3e:8f:
34:b3:2d:a3:14:b2:12:5d:7a:41:6f:c5:ab:91:f9:4c:96:fc:
ef:ef:38:6d:75:36:4f:b7:35:ba:81:af:1d:68:a8:49:59:1d:
f8:3f:75:4b:db:f1:1b:49:9f:fc:78:ea:c0:16:69:98:e0:71:
ba:76:d2:e6:aa:c0:0a:3a:96:af:86:59:cd:d6:1a:fe:d7:85:
d0:d9:e8:ac
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZuu8MPuDNUMcClV/6xj8SZ14Y+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMThaFw0yNDAzMjUwODI3MThaMDMxMTAvBgNV
BAMTKDEyMjkzQ0ZERTZBRDIyREE4RUY5NjNGRkM2OTUyRjQzNkJEMTVEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc258ECaX268BAo1SbGffUiash
udRleqwlgYqa/bbc24KxKIACKYL2NGJ1qmYOhy17f4LWyYNN3IbmtwS7rcVuoqlc
01l/HgQ3oV6M7EveEU7QTkaj3qOKVQ6cjRyWkaXBOvKkU0/Czh9W++lLxg3Ugx6N
/2YddkPEp4XBYQ32kN8zRnCCbHBMbxL3w8oHoUVrw76JprCY8uHxsBfwF97fs/Xy
8OtcGSz0JkKqj4JXUoX1oGyilRg/IJhUoDGcYdT4vEKVfOVfa1+CzUn7WvZQs4Gm
bJsMHTzB/sveA6D4CObAPFGiNhGlOEI7Nvp/q9ANbI3xoxPgIOPOc5MnLVgVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEik8/eatItqO+WP/xpUvQ2vRXcYwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzEzOTMyMmUzMTM0MzUyZTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wJFTMA0GCSqGSIb3DQEBCwUAA4IBAQCh3IeMzH854RjsuNLGPmuTeFR9thdBnkta
9yB+I6na41l7L3+yL/py1aNA0Udt3gW+D+sQjtvFAIjKpEAvU56w/Kh6W/F/PjEy
1TndJP4B+PYJGNp4uoIYqhaaBOpDBhdtGuB7IxkP6NGGoo91x5ISxA2ddQMJPTsV
UL9eobULdKXBTcujgR2N0xjqGoiIC4MIddM4IQGzLo1LHLoUHs/PGkR0fQzJ86Mm
LYemVJKCk++yPo80sy2jFLISXXpBb8WrkflMlvzv7zhtdTZPtzW6ga8daKhJWR34
P3VL2/EbSZ/8eOrAFmmY4HG6dtLmqsAKOpavhlnN1hr+14XQ2eis
-----END CERTIFICATE-----
Generated at Fri Oct 20 12:57:19 2023 by rpki-client on console-fra.rpki-client.org