Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20323039323630.roa
File: 38322e3131382e32352e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: fUEE93ZvduJ30KRGCI1zGe+fLOjAHS9BnyTMmSDaEdI=
Subject key identifier: A0:AC:AF:FE:B5:CD:92:EA:42:C3:82:38:A0:90:46:73:F3:7C:09:B9
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 594DBCB231D5B9AE00B5547217A718C7944EA9FA
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20323039323630.roa
Signing time: Sat 29 Apr 2023 09:32:27 +0000
ROA not before: Sat 29 Apr 2023 09:27:27 +0000
ROA not after: Sat 27 Apr 2024 09:32:27 +0000
asID: 209260
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4d:bc:b2:31:d5:b9:ae:00:b5:54:72:17:a7:18:c7:94:4e:a9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:27:27 2023 GMT
Not After : Apr 27 09:32:27 2024 GMT
Subject: CN=A0ACAFFEB5CD92EA42C38238A0904673F37C09B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:cf:78:db:76:7d:59:ae:6a:ad:44:e2:03:
50:2e:ef:ac:a1:f4:29:a9:f9:a5:2f:b6:1d:cb:69:
98:9b:a5:cb:e8:63:42:9f:66:cd:ce:0f:b9:81:d6:
b6:91:b0:87:8a:3f:0f:fa:02:16:c5:c6:e8:c1:1e:
d9:86:05:e3:ac:b3:06:49:39:af:7b:c0:57:10:94:
59:6c:c3:8f:05:a0:91:76:7d:ec:c7:55:c9:8a:4d:
84:f7:9c:bd:90:a2:37:29:70:76:4a:2b:e3:be:ff:
a0:26:e2:56:dd:6b:6b:23:a7:e7:ae:f6:d8:38:af:
0b:53:d0:2a:b2:19:31:39:b9:50:9d:e8:32:08:cb:
6e:d0:15:dd:f6:1f:32:67:8a:8b:ef:5f:07:b3:03:
66:db:a1:5e:35:5e:14:bb:b8:6a:40:8a:f4:53:61:
4b:41:f7:23:83:4d:be:14:87:d7:e8:52:69:35:af:
ab:9d:89:6d:88:c5:e3:77:0b:a4:ed:e9:dc:19:7d:
52:45:40:0c:40:51:45:ca:9f:2b:13:4b:ba:ba:12:
fe:80:f0:82:16:60:88:49:4b:87:16:21:f1:5c:57:
fd:93:25:19:84:74:50:d5:f8:5f:8b:e1:08:65:9e:
ee:ae:82:c7:af:fe:3e:87:3c:d0:fc:31:b3:73:79:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:AF:FE:B5:CD:92:EA:42:C3:82:38:A0:90:46:73:F3:7C:09:B9
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ec:22:e5:28:69:9b:4c:1b:c2:39:8e:32:1b:93:be:e8:c2:
e0:88:81:7e:0a:b5:3f:0b:c4:5e:0c:3c:dc:a2:e9:1e:ca:7c:
a4:9f:1f:65:c9:a9:ec:bc:88:df:0b:1c:85:be:69:82:12:dd:
f2:94:0c:2c:e8:b2:24:13:8e:a6:33:79:ff:cb:96:eb:8b:47:
c0:bc:13:c6:60:23:52:36:d4:e8:85:c3:e5:03:9c:fc:33:00:
1f:45:5e:2b:31:a2:37:7c:c3:a3:ca:cf:3c:c6:e1:9e:3f:78:
f6:9b:fa:4b:6a:aa:a5:66:14:77:9b:3f:c9:23:43:f2:85:0c:
52:21:b5:ba:fb:81:da:c7:71:67:26:41:21:88:de:80:d1:bc:
30:26:49:95:7b:89:33:0f:54:e8:79:15:41:12:d9:e5:ed:bf:
54:e6:12:d9:f1:da:44:19:9d:21:f6:dc:30:18:b5:ea:73:ba:
11:f1:55:3e:d0:07:e9:b1:0b:ec:ac:68:22:ac:7e:99:b6:58:
de:37:4d:2d:52:c4:7c:f7:20:a2:09:c2:c3:fe:f4:7c:da:19:
73:a1:21:b9:d5:25:3f:fd:82:21:97:08:3d:68:39:07:b9:7a:
a7:0a:8d:a7:02:03:c9:25:35:a0:0f:38:fe:6d:78:4f:72:46:
16:25:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org