Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 54onyJkiy/zNlSvmM5kK8RSPxWvU7JSo6egKFwNQtTU=
Subject key identifier: 8F:75:A4:5B:B9:B6:70:43:3A:76:2A:CE:61:22:4B:F3:00:C5:7F:D1
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 2ACE390A15380F442B2616F8D4A7F4E58F76E985
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20383334.roa
Signing time: Sun 30 Apr 2023 11:10:13 +0000
ROA not before: Sun 30 Apr 2023 11:05:13 +0000
ROA not after: Sun 28 Apr 2024 11:10:13 +0000
asID: 834
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ce:39:0a:15:38:0f:44:2b:26:16:f8:d4:a7:f4:e5:8f:76:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 30 11:05:13 2023 GMT
Not After : Apr 28 11:10:13 2024 GMT
Subject: CN=8F75A45BB9B670433A762ACE61224BF300C57FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:ff:cc:9a:ed:2a:14:a2:eb:20:5e:d7:58:
f4:df:d1:bd:d0:a5:40:ec:42:37:50:58:65:45:70:
dd:48:de:c9:17:66:fc:02:9a:80:4a:3a:8e:33:ba:
4f:e8:32:74:57:7a:8a:d6:6c:16:74:66:e1:b4:af:
01:fe:ee:0a:22:94:e1:78:b2:ab:79:a7:4b:9e:61:
e3:f8:05:5d:2c:70:51:72:a1:f5:14:35:7e:3f:66:
a8:25:c6:38:86:57:2d:92:9a:d6:f1:d4:4d:60:f2:
47:d5:bb:1f:c0:a6:ac:9c:69:bc:52:33:be:88:18:
dc:87:87:81:df:ef:a6:d8:d8:11:59:af:c9:26:11:
5e:8e:5d:16:1d:be:97:00:a3:cf:2f:ff:dc:ff:62:
45:ba:9f:95:54:3b:f2:59:b2:c6:75:bc:10:26:29:
c7:9c:b9:ed:5b:49:70:a8:b8:70:80:ff:3e:3e:ee:
57:39:ca:49:57:a8:4e:85:70:de:84:8a:8d:7f:49:
f6:f5:7d:37:b0:f0:13:a8:f9:a0:b5:68:ba:ff:66:
84:8d:66:09:dc:95:ad:d5:77:aa:a5:b4:bf:ae:fb:
a6:50:0b:b8:b1:ec:ae:a6:3a:d2:67:be:37:d7:e3:
67:3e:b2:5b:e9:7a:60:0c:04:f7:a1:12:ce:91:93:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:A4:5B:B9:B6:70:43:3A:76:2A:CE:61:22:4B:F3:00:C5:7F:D1
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:6e:10:62:55:2e:a9:bd:98:37:c8:8c:c6:a6:61:fc:02:cc:
87:fc:a6:5b:f9:3f:ec:92:40:99:05:28:36:ab:c2:06:d2:bd:
92:d1:9a:a5:75:35:b4:6e:39:9d:ad:13:7a:78:b1:0a:65:ea:
19:17:87:f9:63:a9:49:3b:fc:76:28:6e:0f:f1:bb:95:91:17:
f4:aa:5b:7c:f6:c9:c2:a2:c2:63:48:52:2e:4c:05:2d:89:53:
08:95:c1:62:34:63:8b:f5:ed:a7:f6:b0:db:ec:06:7f:fc:c2:
99:cb:60:13:e2:f2:ca:19:b8:44:98:25:7a:42:a3:fe:61:3c:
a1:6f:63:11:db:ad:03:c5:31:5b:12:38:e1:84:26:be:3c:af:
dd:de:af:24:0f:ed:7c:26:5c:00:71:bf:5b:8b:e7:ec:11:a5:
dd:5a:de:fa:ba:49:7f:25:7d:a5:31:05:c5:3c:fd:c2:a1:cc:
82:31:64:e4:79:16:66:b4:d3:a7:ff:d7:10:a3:63:1d:50:55:
ca:b9:da:d9:1e:60:38:f6:98:49:57:01:14:f2:41:73:5d:9e:
fe:29:60:22:0d:bb:2c:8f:0e:56:fc:b5:ab:11:c0:90:82:50:
c4:43:ed:42:a7:06:0e:fc:30:e8:25:b1:51:f6:7c:fa:bd:38:
e9:81:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org