Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
File: 38352e3230382e34392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: jv2hgoZ2wYU6JVghjZIxtCwwMZOM3iZlgfLzCpvmg/E=
Subject key identifier: BC:CC:D1:41:C3:57:03:23:C3:92:0C:62:0D:3D:82:33:49:74:AC:F7
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 2C1DDF8C7FD21E9027B1C906DA5701F131F1650F
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
Signing time: Mon 27 Mar 2023 08:27:24 +0000
ROA not before: Mon 27 Mar 2023 08:22:24 +0000
ROA not after: Mon 25 Mar 2024 08:27:24 +0000
asID: 19437
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1d:df:8c:7f:d2:1e:90:27:b1:c9:06:da:57:01:f1:31:f1:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:24 2023 GMT
Not After : Mar 25 08:27:24 2024 GMT
Subject: CN=BCCCD141C3570323C3920C620D3D82334974ACF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:81:18:8f:da:18:cd:f5:19:2a:ba:0d:42:
87:23:81:41:8f:e4:62:d0:d1:4d:96:1a:e7:92:d8:
10:58:5d:02:0c:d7:cd:c2:bf:15:91:f7:86:f8:63:
47:c5:af:70:5e:94:b4:d4:df:66:e8:8f:18:08:12:
4b:b6:85:1f:24:ce:24:25:71:98:3b:77:01:ac:1a:
2c:96:6c:e4:97:d9:02:1f:c3:f8:21:cd:12:b1:c7:
49:da:31:a2:92:c1:07:9c:61:61:70:87:f6:7e:62:
34:05:b1:c6:3a:ce:d3:bb:c8:98:14:b8:68:e4:17:
21:0c:af:52:60:5a:f7:72:01:48:75:c9:24:15:98:
b0:83:7b:12:26:db:8e:73:b7:d2:27:db:81:49:21:
9d:5c:00:df:1e:3a:85:15:74:51:30:ab:62:49:52:
a6:dc:ce:4e:19:bd:13:19:e4:7f:36:3b:e3:0e:37:
92:36:f4:ff:9f:db:2e:48:b9:1d:4e:2f:2d:3b:0c:
60:85:6a:9b:94:7a:7d:1e:0d:52:d9:29:4c:e0:53:
62:05:dd:32:d5:cf:2c:5a:e5:be:ee:9b:af:d2:16:
bd:cd:13:88:48:37:89:67:55:87:d8:56:da:c8:2a:
3d:f7:fc:ed:5f:b8:79:7f:23:b4:ce:ec:15:83:fc:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:D1:41:C3:57:03:23:C3:92:0C:62:0D:3D:82:33:49:74:AC:F7
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e34392e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
89:18:13:a0:72:e4:fd:72:b7:c9:d6:d8:78:c3:6b:c2:a3:67:
f3:ae:08:b9:0c:4a:21:e0:59:05:6e:79:6e:4e:fc:ab:84:82:
cb:0e:84:59:7a:f0:12:9e:95:82:13:59:56:c1:de:08:2f:cc:
c5:e7:db:4d:2c:c5:f9:5c:dd:b8:8b:21:25:86:de:96:d8:2c:
4f:7d:a0:26:77:55:17:14:09:53:fb:bf:83:b1:12:86:a7:fd:
be:50:ec:2a:5b:5c:45:73:f5:f2:49:17:5f:d7:87:e7:8c:db:
f2:73:c3:e2:79:37:03:a8:ef:dd:46:8f:e2:13:d0:c5:9d:15:
1f:48:c7:ae:49:9a:04:70:2a:c7:dd:2b:39:de:7a:3b:4f:57:
49:b1:4c:01:33:58:cd:d6:31:68:aa:65:dc:de:06:11:a6:ba:
38:c0:9f:2e:8c:eb:fc:f3:5d:c8:9a:4a:19:e7:da:f9:7f:73:
c9:08:47:7a:3c:d3:62:60:4e:76:0a:dd:29:5f:2f:45:16:4f:
d9:47:b0:e1:85:14:95:8f:6c:40:59:52:43:ac:53:1c:03:b0:
a4:c1:14:a1:f8:30:b6:05:aa:37:48:d5:fe:08:b7:3e:79:61:
52:8d:67:1b:5f:f1:88:82:46:1f:f7:22:35:ff:e3:dd:62:39:
7b:20:0c:8f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULB3fjH/SHpAnsckG2lcB8THxZQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMjRaFw0yNDAzMjUwODI3MjRaMDMxMTAvBgNV
BAMTKEJDQ0NEMTQxQzM1NzAzMjNDMzkyMEM2MjBEM0Q4MjMzNDk3NEFDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoIEYj9oYzfUZKroNQocjgUGP
5GLQ0U2WGueS2BBYXQIM183CvxWR94b4Y0fFr3BelLTU32bojxgIEku2hR8kziQl
cZg7dwGsGiyWbOSX2QIfw/ghzRKxx0naMaKSwQecYWFwh/Z+YjQFscY6ztO7yJgU
uGjkFyEMr1JgWvdyAUh1ySQVmLCDexIm245zt9In24FJIZ1cAN8eOoUVdFEwq2JJ
Uqbczk4ZvRMZ5H82O+MON5I29P+f2y5IuR1OLy07DGCFapuUen0eDVLZKUzgU2IF
3TLVzyxa5b7um6/SFr3NE4hIN4lnVYfYVtrIKj33/O1fuHl/I7TO7BWD/LInAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUvMzRQcNXAyPDkgxiDT2CM0l0rPcwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzgzNTJlMzIzMDM4MmUzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXQ
MTANBgkqhkiG9w0BAQsFAAOCAQEAiRgToHLk/XK3ydbYeMNrwqNn864IuQxKIeBZ
BW55bk78q4SCyw6EWXrwEp6VghNZVsHeCC/MxefbTSzF+VzduIshJYbeltgsT32g
JndVFxQJU/u/g7EShqf9vlDsKltcRXP18kkXX9eH54zb8nPD4nk3A6jv3UaP4hPQ
xZ0VH0jHrkmaBHAqx90rOd56O09XSbFMATNYzdYxaKpl3N4GEaa6OMCfLozr/PNd
yJpKGefa+X9zyQhHejzTYmBOdgrdKV8vRRZP2Uew4YUUlY9sQFlSQ6xTHAOwpMEU
ofgwtgWqN0jV/gi3PnlhUo1nG1/xiIJGH/ciNf/j3WI5eyAMjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org