Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32342e302f32342d3234203d3e203537323338.roa
File: 38322e3131382e32342e302f32342d3234203d3e203537323338.roa (raw, json)
Hash identifier: veUxJNp6G1xAlAOH7GUXnnpA5QnZAT/5c/X8T+UyrUc=
Subject key identifier: 20:E4:97:7E:34:AE:28:D0:15:15:FE:6C:AA:2C:A0:FA:97:80:C3:35
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 2FD1A86061A799169B526C1BED77699D1132D74A
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32342e302f32342d3234203d3e203537323338.roa
Signing time: Sat 29 Apr 2023 14:13:18 +0000
ROA not before: Sat 29 Apr 2023 14:08:18 +0000
ROA not after: Sat 27 Apr 2024 14:13:18 +0000
asID: 57238
IP address blocks: 82.118.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d1:a8:60:61:a7:99:16:9b:52:6c:1b:ed:77:69:9d:11:32:d7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 14:08:18 2023 GMT
Not After : Apr 27 14:13:18 2024 GMT
Subject: CN=20E4977E34AE28D01515FE6CAA2CA0FA9780C335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:c0:8d:70:db:31:4f:7d:b3:31:30:d9:fd:
bf:8f:05:88:ce:13:19:f3:eb:1f:1c:b8:a3:a1:0c:
8a:39:de:62:40:56:e7:fe:8b:93:92:ae:89:05:f2:
d8:0e:28:d9:1c:29:9f:cb:de:b0:15:8e:de:fa:df:
20:45:ee:06:2e:80:cb:c6:67:0f:36:98:00:da:98:
05:52:da:b3:09:be:11:bc:1b:5f:61:14:ac:d3:2c:
57:f2:41:50:c8:16:81:e0:a3:f0:69:a3:36:e6:9a:
e7:d6:41:a7:7e:65:05:5a:b3:bf:4e:66:ee:13:3b:
8d:c7:fd:19:f0:5e:9f:5b:e6:2c:70:00:4b:9c:96:
78:19:62:3c:42:37:f7:d6:5d:f3:0c:be:05:f9:77:
60:c6:b4:10:4b:58:db:c2:7d:c7:fc:52:26:75:37:
e2:0f:e4:e5:4c:3d:34:3d:10:b4:0c:ff:9e:d8:39:
1d:eb:98:8a:08:b7:6d:82:72:25:f4:21:aa:79:eb:
71:59:17:92:cc:c2:e5:12:97:ba:76:37:6a:a3:cd:
d6:ab:bf:24:70:a2:64:32:85:b4:a8:37:1c:25:eb:
3e:aa:ac:3d:06:ab:2b:d7:79:8e:38:78:a7:57:cd:
31:e2:49:d5:e5:47:56:78:dc:d0:2c:28:3e:8a:1c:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:97:7E:34:AE:28:D0:15:15:FE:6C:AA:2C:A0:FA:97:80:C3:35
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32342e302f32342d3234203d3e203537323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e5:25:b0:2a:5b:12:dd:40:e6:8b:18:a4:25:53:5c:42:b5:
44:77:78:b1:5a:1b:a4:88:b3:38:24:e5:c4:4a:1d:2b:70:f6:
36:ac:3f:d4:66:bf:53:e2:90:c1:17:97:10:0e:b2:ec:df:1c:
a7:55:5e:bb:ab:6a:45:02:69:13:b3:62:5e:32:2d:c7:7e:db:
d4:02:47:dc:7c:9c:59:54:1c:93:5c:75:d0:6a:e6:09:08:74:
66:31:80:2f:c5:09:55:93:b8:ce:a3:fa:4c:aa:bf:88:a6:78:
87:ef:39:54:a9:28:ae:9a:f2:c7:f5:d0:a2:55:5d:58:ab:be:
4a:d0:de:8d:87:5c:88:3e:62:11:c7:0b:72:15:a5:18:5d:f9:
ff:33:2d:08:95:85:f9:ef:f5:13:cd:75:bc:fc:46:a9:62:f5:
17:00:e5:11:b7:b3:f5:1d:d5:da:11:7f:4b:ec:6b:83:2f:e5:
21:46:a0:42:f9:1d:5e:63:17:99:ef:2a:6c:0b:94:de:58:49:
84:2b:f3:f6:67:06:8c:54:fa:b7:f5:fc:5f:00:89:a4:e7:f4:
1c:20:46:53:cc:7d:0a:ab:b8:07:55:a5:bb:c2:98:6a:31:59:
f1:24:b0:20:bf:8f:c3:0f:8b:17:ac:0e:67:27:01:5c:a2:a0:
0c:69:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org