Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
File: 38352e3230382e35302e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: GDuU7cdE+8cl2X2s8/4qSVQjwsZ71hnOGALbHON3qQg=
Subject key identifier: 9C:3D:26:04:29:36:84:F3:B5:B8:41:A1:38:DA:3E:41:67:57:94:46
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 4E2B0E3A8AFE9625E66F9CBA7223E38947D2A925
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 25098
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2b:0e:3a:8a:fe:96:25:e6:6f:9c:ba:72:23:e3:89:47:d2:a9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=9C3D2604293684F3B5B841A138DA3E4167579446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:2e:48:d6:f1:4e:78:8f:d8:89:08:e4:10:
8b:5d:d3:2a:ad:56:11:48:13:98:e0:35:8d:bd:0d:
4b:a5:ec:5c:b2:1f:d9:e8:7e:24:2e:46:00:cc:37:
08:70:3d:89:6d:a8:2e:e7:d6:ef:8f:3c:57:ef:20:
9d:94:82:ff:fc:fd:30:b9:02:51:7b:b0:17:ad:21:
31:a8:93:d1:50:c5:8c:d8:89:6a:c7:41:e7:e5:7e:
5c:d0:89:2a:e0:44:d1:08:c9:be:b5:fd:8a:5e:1e:
1a:8f:bd:eb:d1:9f:77:60:5d:ed:c8:ed:f0:78:69:
67:dc:a7:79:3a:ee:0e:66:6d:2e:d2:1c:e7:ef:db:
f2:82:fc:25:73:e3:6e:c6:d7:f4:b7:6a:5a:ce:63:
9b:65:af:a2:3a:ec:7d:3d:aa:54:c8:48:7d:8a:50:
96:1e:6c:f9:0b:1a:ad:92:fb:01:71:50:b1:c3:92:
1d:4e:7c:8a:97:96:2d:90:ce:3f:a2:9f:89:9e:b9:
3b:98:ab:78:4a:43:07:6e:6c:11:b6:d4:b4:a2:ba:
84:1f:a8:17:06:1c:3c:2d:77:06:a6:46:72:b5:06:
27:e1:40:93:a8:de:18:0a:b4:08:ed:ee:d2:6c:23:
c1:79:a8:db:87:e5:40:31:84:5a:b6:4f:10:d6:0c:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:26:04:29:36:84:F3:B5:B8:41:A1:38:DA:3E:41:67:57:94:46
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
66:dc:ab:e1:c7:bb:03:23:44:0a:f4:6d:9f:f8:42:a5:b5:93:
bf:74:b8:3f:82:35:15:94:f1:94:e0:0f:40:c4:30:ac:b0:49:
91:35:31:72:4e:85:1d:b3:aa:7b:41:d4:e3:21:01:25:fa:17:
f9:64:5b:83:31:26:dc:98:ce:ff:bb:7c:51:fc:bb:ce:9a:f3:
1d:c7:f5:cf:75:3e:5f:60:e6:97:e6:2b:97:75:cc:0e:e0:77:
74:02:33:ba:f1:d4:0d:76:7e:da:8c:0b:43:fb:37:45:43:dc:
6d:2c:f5:3b:15:8e:56:f6:b4:0f:0a:fc:e3:ac:4e:97:4f:8f:
06:14:59:21:aa:70:49:b4:7b:d6:37:f5:a3:7a:93:19:f2:41:
79:a7:c6:af:ed:f3:69:7a:86:1a:4a:b3:9f:11:3a:dc:49:69:
c8:46:8b:56:6d:da:d8:c9:85:23:db:bc:2b:7f:6a:d1:36:cc:
c5:da:89:db:66:94:63:60:e4:68:30:bc:ee:66:e0:ff:05:2f:
9d:75:48:92:9c:5c:8c:69:c4:90:ed:1e:72:18:c6:8c:c2:8f:
cb:91:5b:8b:1a:39:13:0b:65:ce:d5:ee:50:76:9f:ae:e0:61:
f4:50:0f:df:f0:6f:8e:be:7a:2b:b7:26:df:60:ff:ff:c1:1f:
f1:8d:15:5c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTisOOor+liXmb5y6ciPjiUfSqSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI4YTJjODhjNTI1NTRkNDlmNmI3OTAxMzdjM2JhYjY4
N2IyZjk1NjAeFw0yMzAzMjcwODIyMTVaFw0yNDAzMjUwODI3MTVaMDMxMTAvBgNV
BAMTKDlDM0QyNjA0MjkzNjg0RjNCNUI4NDFBMTM4REEzRTQxNjc1Nzk0NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9y5I1vFOeI/YiQjkEItd0yqt
VhFIE5jgNY29DUul7FyyH9nofiQuRgDMNwhwPYltqC7n1u+PPFfvIJ2Ugv/8/TC5
AlF7sBetITGok9FQxYzYiWrHQeflflzQiSrgRNEIyb61/YpeHhqPvevRn3dgXe3I
7fB4aWfcp3k67g5mbS7SHOfv2/KC/CVz427G1/S3alrOY5tlr6I67H09qlTISH2K
UJYebPkLGq2S+wFxULHDkh1OfIqXli2Qzj+in4meuTuYq3hKQwdubBG21LSiuoQf
qBcGHDwtdwamRnK1BifhQJOo3hgKtAjt7tJsI8F5qNuH5UAxhFq2TxDWDPU/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnD0mBCk2hPO1uEGhONo+QWdXlEYwHwYDVR0j
BBgwFoAUu4osiMUlVNSfa3kBN8O6toey+VYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzYvQkI4QTJDODhDNTI1NTRENDlGNkI3OTAxMzdDM0JBQjY4N0IyRjk1Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0b3NpTVVsVk5TZmEza0JOOE82dG9l
eS1WWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzYvMzgzNTJlMzIzMDM4MmUzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMwMzkzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXQ
MjANBgkqhkiG9w0BAQsFAAOCAQEAZtyr4ce7AyNECvRtn/hCpbWTv3S4P4I1FZTx
lOAPQMQwrLBJkTUxck6FHbOqe0HU4yEBJfoX+WRbgzEm3JjO/7t8Ufy7zprzHcf1
z3U+X2Dml+Yrl3XMDuB3dAIzuvHUDXZ+2owLQ/s3RUPcbSz1OxWOVva0Dwr846xO
l0+PBhRZIapwSbR71jf1o3qTGfJBeafGr+3zaXqGGkqznxE63ElpyEaLVm3a2MmF
I9u8K39q0TbMxdqJ22aUY2DkaDC87mbg/wUvnXVIkpxcjGnEkO0echjGjMKPy5Fb
ixo5EwtlztXuUHafruBh9FAP3/Bvjr56K7cm32D//8Ef8Y0VXA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:32 2025 by rpki-client