Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e2030.roa
File: 38332e3133362e3138332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: i8aAdPyNcNoK7GOATwVenDlKlp8fBSi784btzWDjkQo=
Subject key identifier: 50:E1:C4:82:A9:F1:02:10:5B:80:E6:E1:7F:F5:08:33:81:4E:C8:42
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 36B979ACD644472954CA57F9DAE72B96FB5097CE
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 0
IP address blocks: 83.136.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b9:79:ac:d6:44:47:29:54:ca:57:f9:da:e7:2b:96:fb:50:97:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=50E1C482A9F102105B80E6E17FF50833814EC842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:4f:9c:0c:f6:1f:19:0d:d8:05:77:e5:22:
18:29:d6:ff:2c:9b:eb:25:38:9a:49:28:ea:49:62:
66:01:2c:27:a7:28:99:78:77:90:b7:81:fc:41:ea:
f2:0a:34:0b:c3:82:cd:03:71:cd:26:38:ad:4d:74:
44:29:30:17:13:d2:05:85:5d:e5:7b:5c:00:08:41:
0a:52:92:0a:10:de:b0:ec:5c:83:13:0c:19:83:06:
9c:f8:cd:aa:fc:1b:c2:aa:d1:31:8a:97:df:2d:5a:
f8:cf:84:bc:e4:4c:e6:d2:54:48:ca:ee:08:0a:dc:
e4:3e:4f:5a:86:d1:e6:27:7e:d2:c1:d1:61:a9:a0:
c7:27:6c:1e:1d:67:df:b3:e4:22:e7:af:26:9c:00:
a2:bc:04:a5:e7:9f:ed:af:47:c9:f7:3c:68:bb:a4:
9b:5d:f2:12:aa:b2:96:e2:17:6b:82:31:b2:f9:66:
ec:18:e9:b1:1b:28:52:ea:ee:90:f7:49:2a:24:f6:
bf:c1:f6:c8:cc:ca:39:7e:54:ed:21:06:88:74:37:
e5:94:be:39:e2:90:5f:67:88:84:d8:be:55:1f:48:
af:23:31:ed:a8:a2:11:69:1b:3b:24:32:ca:2a:53:
ac:a8:ae:a3:ed:02:75:15:d1:52:a9:87:7c:1c:b8:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:C4:82:A9:F1:02:10:5B:80:E6:E1:7F:F5:08:33:81:4E:C8:42
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38332e3133362e3138332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:72:72:9a:13:27:1f:d2:e7:c6:ff:48:a4:e2:42:20:b7:7f:
c5:26:e8:73:8b:89:5a:a9:7d:1d:93:cb:13:4e:06:67:e8:25:
2a:99:63:84:1d:ab:90:49:e3:da:70:c9:9f:d4:1d:e0:42:48:
97:8b:d5:cb:40:4c:1a:74:b4:90:44:4d:29:84:cf:1c:69:e0:
05:06:be:d4:54:0d:3a:a3:c0:5b:4f:2f:91:d4:8d:3d:90:d4:
21:6f:af:d0:08:a6:80:31:e3:c6:40:89:27:5c:55:5e:9d:b3:
89:04:59:04:53:e0:19:4b:31:b2:52:7a:8e:26:77:57:7b:c3:
98:e5:c5:ce:1c:50:ee:cf:35:93:8a:7d:5c:d9:f2:3b:e7:96:
9e:d7:8d:d4:de:3a:64:e3:4a:27:b2:3a:23:5b:0a:da:37:ab:
06:8c:34:2a:2e:0c:19:31:2c:92:8c:a9:18:92:b2:7b:bf:0d:
ec:18:c0:c9:3b:46:61:8a:eb:5f:3f:df:ee:88:93:c3:cc:87:
65:f1:ba:1b:2c:cb:4f:f2:71:d0:b4:14:41:18:6b:4c:81:dc:
f1:70:f3:a9:ad:6e:1f:86:71:05:8e:1f:8b:6e:ae:8a:5d:b6:
b4:5e:5d:3a:f7:95:00:07:91:43:86:ef:a5:81:8e:b1:07:09:
5c:88:15:43
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUNrl5rNZERylUylf52ucrlvtQl84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTFaFw0yNDAzMjUwODI3MTFaMDMxMTAvBgNV
BAMTKDUwRTFDNDgyQTlGMTAyMTA1QjgwRTZFMTdGRjUwODMzODE0RUM4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/E+cDPYfGQ3YBXflIhgp1v8s
m+slOJpJKOpJYmYBLCenKJl4d5C3gfxB6vIKNAvDgs0Dcc0mOK1NdEQpMBcT0gWF
XeV7XAAIQQpSkgoQ3rDsXIMTDBmDBpz4zar8G8Kq0TGKl98tWvjPhLzkTObSVEjK
7ggK3OQ+T1qG0eYnftLB0WGpoMcnbB4dZ9+z5CLnryacAKK8BKXnn+2vR8n3PGi7
pJtd8hKqspbiF2uCMbL5ZuwY6bEbKFLq7pD3SSok9r/B9sjMyjl+VO0hBoh0N+WU
vjnikF9niITYvlUfSK8jMe2oohFpGzskMsoqU6yorqPtAnUV0VKph3wcuGevAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUUOHEgqnxAhBbgObhf/UIM4FOyEIwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzgzMzJlMzEzMzM2MmUzMTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOItzANBgkq
hkiG9w0BAQsFAAOCAQEAPnJymhMnH9Lnxv9IpOJCILd/xSboc4uJWql9HZPLE04G
Z+glKpljhB2rkEnj2nDJn9Qd4EJIl4vVy0BMGnS0kERNKYTPHGngBQa+1FQNOqPA
W08vkdSNPZDUIW+v0AimgDHjxkCJJ1xVXp2ziQRZBFPgGUsxslJ6jiZ3V3vDmOXF
zhxQ7s81k4p9XNnyO+eWnteN1N46ZONKJ7I6I1sK2jerBow0Ki4MGTEskoypGJKy
e78N7BjAyTtGYYrrXz/f7oiTw8yHZfG6GyzLT/Jx0LQUQRhrTIHc8XDzqa1uH4Zx
BY4fi26uil22tF5dOveVAAeRQ4bvpYGOsQcJXIgVQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org