Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e20383334.roa
File: 38322e3131382e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mugiPqW1MICE1WsAxAb/C4XrZ7M1VVQz32Df+x9Rv94=
Subject key identifier: 8B:FA:AE:4F:95:36:3C:76:A4:C7:46:E1:24:F3:B3:63:7B:02:BA:75
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 56B961A93298B5D8DB4E84ACA02547B12DB8A50F
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e20383334.roa
Signing time: Sat 29 Apr 2023 09:33:16 +0000
ROA not before: Sat 29 Apr 2023 09:28:16 +0000
ROA not after: Sat 27 Apr 2024 09:33:16 +0000
asID: 834
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b9:61:a9:32:98:b5:d8:db:4e:84:ac:a0:25:47:b1:2d:b8:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:28:16 2023 GMT
Not After : Apr 27 09:33:16 2024 GMT
Subject: CN=8BFAAE4F95363C76A4C746E124F3B3637B02BA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:f6:d6:51:5f:8f:e0:c8:2f:03:c1:64:62:
73:c2:09:05:a1:81:42:bf:f3:86:28:22:09:fa:a2:
c4:ad:f4:b9:bf:e7:1e:60:eb:e5:f1:f1:fb:38:9a:
8a:08:a9:94:4b:06:cb:ea:9c:0e:72:c4:6c:c2:cf:
a1:3d:45:88:ff:25:b3:81:d7:08:1f:99:31:4a:88:
71:77:29:03:13:24:37:55:4d:4b:a8:b5:03:39:9d:
89:f4:ac:07:de:98:2c:fd:cb:c4:86:75:eb:96:a5:
3f:1a:2f:04:d3:c9:42:a0:04:76:dc:c1:89:5e:ea:
f8:0e:fa:f8:1c:93:0d:33:e9:53:b1:0f:cc:12:fd:
7a:b6:bd:2f:3a:f1:95:52:f3:0d:4d:98:31:87:e1:
fd:6d:0d:8e:6a:fd:58:36:15:a3:7e:d5:33:1c:51:
88:f1:e3:f2:8d:11:fc:36:9e:55:20:98:85:ff:17:
50:df:3a:08:f8:36:85:d2:ff:86:b9:81:5a:0b:5c:
4f:6a:3b:b8:33:b2:00:e7:3c:8c:4d:77:95:3b:6f:
4d:5c:50:7c:88:73:00:fd:31:db:43:bd:83:76:28:
72:06:dd:cb:61:ed:cd:ce:ba:9c:83:0d:17:ad:42:
d4:e3:03:dd:2c:3a:55:a6:f0:34:06:bf:09:df:3c:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FA:AE:4F:95:36:3C:76:A4:C7:46:E1:24:F3:B3:63:7B:02:BA:75
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:72:02:a9:91:c5:a2:8c:70:3f:0f:37:01:8d:f4:aa:ec:9b:
60:07:9b:0a:f7:e5:c6:11:12:25:57:f1:db:8c:5d:2c:69:0a:
18:9a:04:f5:09:ff:a2:bd:80:0a:6c:d8:fa:03:24:41:3e:4a:
43:d7:b7:e6:9a:9d:a0:ed:58:c7:ae:b5:95:65:4f:bd:f4:d8:
65:7c:63:b7:cb:9b:73:1b:22:3d:4d:12:33:d0:46:12:cf:cb:
81:55:80:71:0f:44:fa:91:b7:7d:42:2e:7e:c6:a2:a2:a8:89:
05:bd:46:24:66:52:b5:f2:f3:2f:de:95:fe:c1:b7:cd:6b:dd:
42:2a:48:2b:e2:55:57:dc:7c:b9:50:de:4a:da:c9:e7:5f:36:
b8:6d:2e:c3:2a:f9:b2:2c:07:0f:d9:8a:e5:a7:e0:d1:95:d5:
c7:00:ef:89:1b:ca:e3:94:ba:9a:1f:a6:c6:9c:d6:0c:58:e6:
9c:6c:19:36:5b:14:87:70:c0:68:52:3d:44:ab:05:34:6f:b2:
e7:fd:c9:fb:29:ea:0f:ea:c0:f6:53:36:57:ff:f8:39:f9:f1:
7d:21:3e:e2:5d:f6:aa:f5:9f:d2:55:cf:65:be:80:66:1e:ca:
75:70:2b:4d:81:7c:7c:8c:26:c8:44:4f:90:22:90:ed:c0:7e:
6e:3e:29:8d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUVrlhqTKYtdjbToSsoCVHsS24pQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI4MTZaFw0yNDA0MjcwOTMzMTZaMDMxMTAvBgNV
BAMTKDhCRkFBRTRGOTUzNjNDNzZBNEM3NDZFMTI0RjNCMzYzN0IwMkJBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cPbWUV+P4MgvA8FkYnPCCQWh
gUK/84YoIgn6osSt9Lm/5x5g6+Xx8fs4mooIqZRLBsvqnA5yxGzCz6E9RYj/JbOB
1wgfmTFKiHF3KQMTJDdVTUuotQM5nYn0rAfemCz9y8SGdeuWpT8aLwTTyUKgBHbc
wYle6vgO+vgckw0z6VOxD8wS/Xq2vS868ZVS8w1NmDGH4f1tDY5q/Vg2FaN+1TMc
UYjx4/KNEfw2nlUgmIX/F1DfOgj4NoXS/4a5gVoLXE9qO7gzsgDnPIxNd5U7b01c
UHyIcwD9MdtDvYN2KHIG3cth7c3OupyDDRetQtTjA90sOlWm8DQGvwnfPMdPAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUi/quT5U2PHakx0bhJPOzY3sCunUwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzgzMjJlMzEzMTM4MmUzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnYaMA0G
CSqGSIb3DQEBCwUAA4IBAQAccgKpkcWijHA/DzcBjfSq7JtgB5sK9+XGERIlV/Hb
jF0saQoYmgT1Cf+ivYAKbNj6AyRBPkpD17fmmp2g7VjHrrWVZU+99NhlfGO3y5tz
GyI9TRIz0EYSz8uBVYBxD0T6kbd9Qi5+xqKiqIkFvUYkZlK18vMv3pX+wbfNa91C
Kkgr4lVX3Hy5UN5K2snnXza4bS7DKvmyLAcP2Yrlp+DRldXHAO+JG8rjlLqaH6bG
nNYMWOacbBk2WxSHcMBoUj1EqwU0b7Ln/cn7KeoP6sD2UzZX//g5+fF9IT7iXfaq
9Z/SVc9lvoBmHsp1cCtNgXx8jCbIRE+QIpDtwH5uPimN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org