Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e203433323630.roa
File: 38322e3131382e32362e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: flIIaeXrscynZe1x/4QirzO+GOsqFmCZhRz8P3nBIlY=
Subject key identifier: 51:34:B4:EA:F4:D4:38:5C:A2:A7:62:6D:52:55:50:87:D4:F4:C4:74
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 539F41A30CBD5487DC4A74863C334A8E8B8DA546
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e203433323630.roa
Signing time: Sun 30 Apr 2023 11:09:15 +0000
ROA not before: Sun 30 Apr 2023 11:04:15 +0000
ROA not after: Sun 28 Apr 2024 11:09:15 +0000
asID: 43260
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9f:41:a3:0c:bd:54:87:dc:4a:74:86:3c:33:4a:8e:8b:8d:a5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 30 11:04:15 2023 GMT
Not After : Apr 28 11:09:15 2024 GMT
Subject: CN=5134B4EAF4D4385CA2A7626D52555087D4F4C474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:97:47:94:5e:71:a4:d0:c0:b4:5e:ad:da:
4f:e9:90:28:bf:e1:a1:eb:b4:89:fc:77:a3:63:a3:
99:7c:0d:fa:19:01:ea:e6:7c:82:6d:0c:5c:96:1a:
e2:60:09:2d:32:74:91:03:b0:78:5d:9b:46:f4:87:
ea:18:44:f1:71:3e:d6:7c:e8:3a:d3:44:86:1e:45:
28:b0:17:b8:91:38:14:29:bd:60:3c:ea:3a:48:4b:
a1:95:c0:fa:2c:13:ef:ee:45:40:52:c7:b5:62:9d:
62:ef:3f:bf:d1:da:d6:33:43:0c:63:3c:74:1a:51:
bf:c8:c2:a6:50:dc:3c:4f:df:92:a0:62:42:23:dc:
46:f0:26:a0:ac:55:a4:b7:7a:ec:a8:8a:9d:f4:86:
49:53:99:00:fb:4b:13:59:4d:fa:a5:b4:11:ae:16:
c5:a3:2a:33:d8:c8:4f:4a:c5:07:5d:3e:e8:71:4b:
92:e4:3d:21:16:a9:90:eb:ce:d9:29:32:8b:27:0f:
00:c1:ab:9c:e0:d7:3f:c4:1c:f1:67:da:7e:93:5d:
bc:db:73:06:24:18:5e:2b:ff:9b:3b:75:9c:dc:ed:
4b:7b:e6:0f:d2:e9:94:18:c7:ea:e7:98:2b:b5:b7:
a8:79:21:4d:c7:04:d7:56:ed:89:6d:22:9a:1d:33:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:B4:EA:F4:D4:38:5C:A2:A7:62:6D:52:55:50:87:D4:F4:C4:74
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:90:c9:5d:c8:82:12:65:cc:f9:ed:0d:ea:15:13:fe:c9:6d:
6e:31:02:7d:72:df:c9:3c:4c:f6:37:21:ed:8f:14:76:eb:65:
80:35:4e:fb:5c:03:c3:4f:70:e3:ba:e5:79:81:7d:30:28:ae:
64:4d:b0:85:69:9d:d3:cb:16:82:ad:2b:9d:72:86:ca:f8:e2:
f3:68:b3:8a:17:b8:8e:8c:da:18:00:67:92:ab:f0:66:0b:75:
3e:3c:7c:97:5a:cb:ca:4d:db:00:c9:4d:d0:07:1a:e1:e5:3d:
ff:79:4b:3e:e2:ea:17:e3:58:80:3a:a2:ff:2d:f6:f6:6a:5c:
00:b8:16:bc:3c:3a:a7:7f:a9:6c:7c:be:58:ea:ec:8f:1f:7a:
72:85:8e:e9:a2:30:a7:3b:c3:d4:c9:86:48:ab:ba:05:a5:db:
7a:c2:95:f2:23:66:cf:da:9d:73:46:bc:2d:79:d3:05:47:bf:
d8:45:f4:e7:6e:a0:57:a6:f6:30:c1:a0:f5:78:4c:6e:e4:96:
40:f4:c7:26:da:0b:d5:22:a5:6f:a7:79:8a:98:f7:51:c4:b7:
3b:d1:8c:5a:98:66:66:7e:bc:1c:59:5f:ce:e1:0a:d7:93:7e:
37:d3:bf:14:d6:80:cd:d3:33:6c:8c:14:9b:e5:93:73:0d:49:
b5:4d:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:29 2025 by rpki-client