Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32382e302f32342d3234203d3e203631333137.roa
File: 38322e3131382e32382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 4WN/wlWD0tsGKxjSeMhjN9kzVYLD/aeyYeauwY4QawQ=
Subject key identifier: D0:09:12:4B:8F:67:7D:13:0A:F5:78:D0:8B:D6:DB:4D:5C:D2:3E:9C
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 6D6D7C09B560C3AB4B8845E2D7589DDB913FFB85
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32382e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:33:54 +0000
ROA not before: Sat 29 Apr 2023 09:28:54 +0000
ROA not after: Sat 27 Apr 2024 09:33:54 +0000
asID: 61317
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6d:7c:09:b5:60:c3:ab:4b:88:45:e2:d7:58:9d:db:91:3f:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:28:54 2023 GMT
Not After : Apr 27 09:33:54 2024 GMT
Subject: CN=D009124B8F677D130AF578D08BD6DB4D5CD23E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:fa:88:2f:bf:7c:06:8c:09:f3:a7:19:12:
0d:94:2b:61:e4:c9:93:b4:f8:83:cb:2b:15:13:26:
cc:d2:1b:8b:08:f3:cd:07:09:ac:cf:42:17:27:7a:
70:8b:4a:44:01:dd:6c:65:c3:e0:cf:fe:1c:e2:a3:
c2:fb:58:4c:18:05:13:43:52:0d:cc:5d:bf:92:eb:
ac:11:7f:fe:d3:85:5b:13:bb:15:4a:fd:87:8a:77:
8a:e4:8f:71:e6:bb:91:f8:65:22:84:68:17:76:c0:
af:25:3b:2d:7a:62:39:54:62:ad:12:62:a8:b9:3e:
73:2a:9d:d1:6e:12:36:e0:f8:19:33:55:df:37:bf:
ab:55:55:e9:40:3c:51:8f:d1:2f:18:52:44:42:59:
5c:2a:3b:65:8e:b3:c7:22:e6:1c:45:a0:10:8f:e1:
70:10:7b:e8:e6:5c:4e:1f:1f:1a:3f:6f:19:44:c5:
94:40:f6:6a:d5:8a:e3:f4:ae:6b:6f:99:6c:e8:72:
76:03:bf:b2:99:ca:c4:41:da:95:06:c6:bd:3f:0d:
7c:f3:9f:83:aa:12:bb:2a:2a:54:b7:2e:f4:b8:a5:
69:2c:1f:d3:bd:6b:5d:a9:5b:be:bd:74:90:28:a5:
b2:78:78:cf:e8:3d:de:ff:22:d8:67:b5:92:02:88:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:12:4B:8F:67:7D:13:0A:F5:78:D0:8B:D6:DB:4D:5C:D2:3E:9C
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e7:17:f3:33:10:dd:10:43:9c:e1:0a:73:94:11:75:bc:5c:
12:f8:ee:12:40:59:f8:64:7a:1f:4c:82:42:88:a6:1b:9a:33:
30:4d:94:b5:13:57:bf:d7:f7:9d:1a:11:9a:84:18:c9:45:fc:
e9:c5:be:6c:f4:9d:03:b6:fa:af:8a:f4:b7:65:86:6a:54:5a:
af:92:f9:b9:ca:67:85:53:f7:e1:cf:ad:72:34:36:7b:c8:02:
9f:dd:d3:33:2c:38:1b:8c:b7:b3:18:e7:28:3f:24:d7:8f:66:
52:ba:24:a9:d3:a5:86:1e:41:9c:fa:ae:17:e4:34:59:0f:13:
9b:1c:d2:fe:db:a7:94:57:83:e4:33:df:c2:1f:ed:87:5d:31:
86:f1:2b:5e:71:4e:ff:2f:e8:e8:cc:fe:38:01:fd:5d:f4:2a:
ad:be:c1:95:68:f4:6a:a6:49:64:69:0c:c6:82:87:7d:62:35:
b9:a3:8e:b7:6d:32:15:7d:dd:63:40:0f:fa:41:09:b6:87:0c:
b1:6c:92:45:21:38:09:70:24:02:55:63:30:0b:aa:7e:cb:eb:
bf:be:ca:0b:0a:df:aa:82:24:8b:a7:07:29:11:a8:51:8b:2f:
45:4d:a1:ab:9e:1a:ce:d2:ea:a4:26:29:34:42:10:be:67:a5:
b5:46:3c:66
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbW18CbVgw6tLiEXi11id25E/+4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI4NTRaFw0yNDA0MjcwOTMzNTRaMDMxMTAvBgNV
BAMTKEQwMDkxMjRCOEY2NzdEMTMwQUY1NzhEMDhCRDZEQjRENUNEMjNFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJS/qIL798BowJ86cZEg2UK2Hk
yZO0+IPLKxUTJszSG4sI880HCazPQhcnenCLSkQB3Wxlw+DP/hzio8L7WEwYBRND
Ug3MXb+S66wRf/7ThVsTuxVK/YeKd4rkj3Hmu5H4ZSKEaBd2wK8lOy16YjlUYq0S
Yqi5PnMqndFuEjbg+BkzVd83v6tVVelAPFGP0S8YUkRCWVwqO2WOs8ci5hxFoBCP
4XAQe+jmXE4fHxo/bxlExZRA9mrViuP0rmtvmWzocnYDv7KZysRB2pUGxr0/DXzz
n4OqErsqKlS3LvS4pWksH9O9a12pW769dJAopbJ4eM/oPd7/IthntZICiLWHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0AkSS49nfRMK9XjQi9bbTVzSPpwwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzgzMjJlMzEzMTM4MmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFJ2
HDANBgkqhkiG9w0BAQsFAAOCAQEAVucX8zMQ3RBDnOEKc5QRdbxcEvjuEkBZ+GR6
H0yCQoimG5ozME2UtRNXv9f3nRoRmoQYyUX86cW+bPSdA7b6r4r0t2WGalRar5L5
ucpnhVP34c+tcjQ2e8gCn93TMyw4G4y3sxjnKD8k149mUrokqdOlhh5BnPquF+Q0
WQ8TmxzS/tunlFeD5DPfwh/th10xhvErXnFO/y/o6Mz+OAH9XfQqrb7BlWj0aqZJ
ZGkMxoKHfWI1uaOOt20yFX3dY0AP+kEJtocMsWySRSE4CXAkAlVjMAuqfsvrv77K
CwrfqoIki6cHKRGoUYsvRU2hq54aztLqpCYpNEIQvmeltUY8Zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org