Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32372e302f32342d3234203d3e203239383032.roa
File: 38322e3131382e32372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: ycUy3l8Jf/Z/zsoVk0Nm95QZ9nhNjns03ko3YbfNTbY=
Subject key identifier: 7F:26:6D:8E:0C:F3:07:44:DA:D1:FC:2C:3C:AC:24:29:B2:69:64:F8
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 03D73B744C6D5BFE09BCA6D29DE5EC8967BA6E0A
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32372e302f32342d3234203d3e203239383032.roa
Signing time: Sat 29 Apr 2023 09:33:42 +0000
ROA not before: Sat 29 Apr 2023 09:28:42 +0000
ROA not after: Sat 27 Apr 2024 09:33:42 +0000
asID: 29802
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d7:3b:74:4c:6d:5b:fe:09:bc:a6:d2:9d:e5:ec:89:67:ba:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:28:42 2023 GMT
Not After : Apr 27 09:33:42 2024 GMT
Subject: CN=7F266D8E0CF30744DAD1FC2C3CAC2429B26964F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:11:61:e0:31:e9:83:19:07:ab:46:01:37:
48:94:eb:02:3b:4a:07:e5:f2:4c:ce:4a:ce:3a:19:
de:58:7c:9c:3c:5a:b0:9a:4c:21:c3:68:27:c4:c7:
52:ad:89:b1:f7:e5:c7:bd:75:0b:d0:77:e5:33:50:
89:09:d2:23:ac:7a:ef:a3:f0:c6:99:2f:14:c6:dd:
17:28:e9:b8:42:66:f0:e3:28:cf:43:80:19:d3:b8:
9a:de:e1:1f:eb:ef:4b:8d:86:25:7d:49:b0:a8:85:
22:81:a6:62:c9:93:a9:b8:4c:de:d7:20:56:27:fe:
7d:f6:5b:4b:ff:af:db:a5:24:9b:ca:6e:14:0f:6d:
ed:b0:b9:b9:de:41:fb:5d:ee:8a:33:12:16:f1:8c:
db:34:88:f9:85:9f:91:b8:44:c6:35:e3:3b:6a:b5:
8c:50:68:ad:34:c1:d2:49:0a:4b:4a:58:bd:60:0e:
81:7b:8a:29:c6:34:fa:b4:18:ae:53:2d:30:76:c5:
f2:62:7d:73:cf:da:cb:90:67:3f:61:58:c1:c4:0f:
b4:a7:ea:56:a9:a6:99:d6:e9:b0:1c:36:77:9d:34:
7a:d4:58:01:f4:3c:66:bb:f0:eb:15:f9:b8:4f:61:
08:41:32:11:f7:e7:df:5e:50:a9:dc:27:1e:7c:4d:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:26:6D:8E:0C:F3:07:44:DA:D1:FC:2C:3C:AC:24:29:B2:69:64:F8
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e5:96:74:7a:1e:72:ff:40:7b:38:37:06:65:a5:42:33:e7:
8f:e2:22:2e:d5:30:da:48:a6:2e:41:05:d2:d6:e5:5c:e6:04:
f9:26:1a:80:c2:9b:a8:b9:2e:bf:36:aa:18:19:17:91:20:a2:
23:c4:f0:11:bb:2f:f4:70:98:d8:c4:1a:87:68:21:de:fe:5a:
c7:b5:ea:29:0a:b5:44:f8:17:e4:46:60:7e:81:96:35:06:b2:
4a:cc:ce:99:b0:17:f9:2b:5a:5a:87:c8:5a:4e:31:9b:48:a1:
99:4c:03:6f:7f:8c:32:3a:36:b1:c3:3d:b1:d0:bb:b5:68:86:
28:e4:09:f1:0f:5a:02:39:22:79:60:1b:11:b0:d8:9b:ac:84:
de:b5:29:b9:14:3c:c1:63:03:d9:7f:8a:2e:03:61:18:4c:2a:
11:62:01:62:5a:04:a5:21:07:58:67:a5:f6:de:2e:85:f6:3e:
53:07:1f:bd:0e:17:b6:3b:c3:26:38:47:3f:a7:a5:b5:34:5b:
cf:9d:04:80:dc:cf:26:f9:14:24:a3:fe:a3:c1:4c:af:14:b3:
ee:7b:d9:ff:e8:cd:21:3a:0a:ca:a5:05:5d:80:51:da:43:b3:
88:2f:3b:1d:f3:51:4d:9f:5d:4e:4b:cc:22:96:7f:c3:b0:bd:
38:a4:88:b7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUA9c7dExtW/4JvKbSneXsiWe6bgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI4NDJaFw0yNDA0MjcwOTMzNDJaMDMxMTAvBgNV
BAMTKDdGMjY2RDhFMENGMzA3NDREQUQxRkMyQzNDQUMyNDI5QjI2OTY0RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwRFh4DHpgxkHq0YBN0iU6wI7
Sgfl8kzOSs46Gd5YfJw8WrCaTCHDaCfEx1KtibH35ce9dQvQd+UzUIkJ0iOseu+j
8MaZLxTG3Rco6bhCZvDjKM9DgBnTuJre4R/r70uNhiV9SbCohSKBpmLJk6m4TN7X
IFYn/n32W0v/r9ulJJvKbhQPbe2wubneQftd7oozEhbxjNs0iPmFn5G4RMY14ztq
tYxQaK00wdJJCktKWL1gDoF7iinGNPq0GK5TLTB2xfJifXPP2suQZz9hWMHED7Sn
6lapppnW6bAcNnedNHrUWAH0PGa78OsV+bhPYQhBMhH3599eUKncJx58TX21AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfyZtjgzzB0Ta0fwsPKwkKbJpZPgwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzgzMjJlMzEzMTM4MmUzMjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFJ2
GzANBgkqhkiG9w0BAQsFAAOCAQEABeWWdHoecv9Aezg3BmWlQjPnj+IiLtUw2kim
LkEF0tblXOYE+SYagMKbqLkuvzaqGBkXkSCiI8TwEbsv9HCY2MQah2gh3v5ax7Xq
KQq1RPgX5EZgfoGWNQaySszOmbAX+StaWofIWk4xm0ihmUwDb3+MMjo2scM9sdC7
tWiGKOQJ8Q9aAjkieWAbEbDYm6yE3rUpuRQ8wWMD2X+KLgNhGEwqEWIBYloEpSEH
WGel9t4uhfY+UwcfvQ4XtjvDJjhHP6eltTRbz50EgNzPJvkUJKP+o8FMrxSz7nvZ
/+jNIToKyqUFXYBR2kOziC87HfNRTZ9dTkvMIpZ/w7C9OKSItw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org