Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS38082.roa
File: AS38082.roa (raw, json)
Hash identifier: eQV6TaNz8rozElyhQvM0J1jtnIdaTS3cVUerJn72nM0=
Subject key identifier: 1C:0B:1B:AC:D0:FE:78:75:B4:6A:41:E0:AF:56:08:5E:F0:59:AA:73
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E852141B6369F52E1765B4601A37DF4EEB5948F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS38082.roa
Signing time: Sun 22 Dec 2024 08:30:44 +0000
ROA not before: Sun 22 Dec 2024 08:25:44 +0000
ROA not after: Sun 21 Dec 2025 08:30:44 +0000
asID: 38082
IP address blocks: 96.62.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:85:21:41:b6:36:9f:52:e1:76:5b:46:01:a3:7d:f4:ee:b5:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Dec 22 08:25:44 2024 GMT
Not After : Dec 21 08:30:44 2025 GMT
Subject: CN=1C0B1BACD0FE7875B46A41E0AF56085EF059AA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:fb:75:28:c9:6e:09:17:29:36:62:37:fe:
f2:00:dc:e9:e9:df:c1:22:e4:21:44:d7:ee:f3:bd:
60:38:31:c0:be:6c:3a:19:65:4b:d9:0f:e3:ed:d3:
20:b0:47:e6:d9:a1:7f:cc:c0:51:10:bb:cb:e4:d1:
06:f1:25:bc:34:f4:33:4c:dd:c9:61:99:e5:e6:5b:
3b:ea:2e:54:9b:10:48:09:c2:48:aa:b9:9a:7c:09:
33:c0:32:00:47:60:12:19:c2:23:a9:e0:cd:23:89:
3d:20:29:02:ce:21:c8:49:81:5d:49:54:ef:3f:f0:
26:a4:d0:cc:85:8f:cc:3c:ed:44:82:ae:7a:44:59:
d1:36:e2:ea:71:67:57:be:0d:83:c0:38:0f:68:ad:
9d:71:9e:35:dd:88:45:ee:c3:50:8d:3d:0a:e0:25:
06:85:05:14:e1:2c:29:4d:ee:1a:b6:f1:96:12:25:
00:da:a6:d6:29:e4:3b:61:ab:73:80:b1:89:e2:9b:
74:8e:2a:ad:79:34:7b:e1:24:2b:cc:e2:de:f5:66:
10:68:15:2b:e2:b1:a3:a4:9f:2a:66:c4:9e:30:d1:
bd:2e:57:84:9e:4b:3f:47:1d:3c:a2:07:6c:f0:27:
6d:92:8b:d9:cb:c3:8f:3e:71:cc:83:ba:98:4a:19:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:1B:AC:D0:FE:78:75:B4:6A:41:E0:AF:56:08:5E:F0:59:AA:73
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS38082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a6:a5:30:36:18:06:5b:1d:61:50:b2:45:07:3f:7c:b2:51:
13:79:2d:68:30:88:7e:db:eb:6a:ff:86:0b:37:35:b3:5a:14:
85:93:29:49:33:c5:ed:95:25:3b:6b:16:5d:6e:9c:c1:2b:6e:
fe:d0:8a:37:77:3d:b6:fa:97:73:ac:82:2f:47:3b:e6:31:95:
18:2f:f4:83:ab:00:dc:be:98:d8:4d:00:80:5f:f7:c9:4e:f4:
b3:e2:b2:9f:bf:3d:b5:08:a0:1c:c3:90:88:fa:2d:7c:63:f2:
87:bd:7c:c0:1f:0c:75:c2:69:39:77:81:0f:72:ed:45:dd:b5:
52:8e:73:6f:0a:56:b7:35:f3:7a:ec:b2:85:f3:ba:41:40:5f:
32:5f:e7:a1:0a:09:66:e7:42:10:43:63:9d:3a:87:0c:78:5f:
65:fb:a7:01:01:76:7a:f2:ca:e5:f9:87:be:74:31:6f:d7:0d:
c2:18:a1:74:74:b9:05:ca:0d:56:61:0a:2c:2b:cb:cd:27:5e:
d5:41:11:93:25:de:30:48:c5:58:d1:b8:a1:4e:99:a5:b8:eb:
01:b9:7c:2c:2d:34:33:b3:0a:d4:af:af:4c:f0:5f:8d:a5:1e:
cb:8d:88:65:44:4a:d3:82:1a:59:04:c7:7b:52:0d:9f:4e:9f:
39:20:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:11 2025 by rpki-client