Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036313530.roa
File: 38322e3131382e32392e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier: ETPADSAMgXMxAxIOb1FIZycgRoHn3amlr75wHohmezU=
Subject key identifier: 29:E1:53:0A:10:DC:98:24:23:17:1A:D1:22:C6:BA:EE:7D:0C:C6:B2
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5D7105C425626D757DA408ED5C301E220F05E4C6
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036313530.roa
Signing time: Sat 29 Apr 2023 09:34:16 +0000
ROA not before: Sat 29 Apr 2023 09:29:16 +0000
ROA not after: Sat 27 Apr 2024 09:34:16 +0000
asID: 206150
IP address blocks: 82.118.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:71:05:c4:25:62:6d:75:7d:a4:08:ed:5c:30:1e:22:0f:05:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:29:16 2023 GMT
Not After : Apr 27 09:34:16 2024 GMT
Subject: CN=29E1530A10DC982423171AD122C6BAEE7D0CC6B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:25:b9:5f:27:b5:7c:2d:1e:ab:d1:65:d8:
f5:e0:b4:c1:a6:9f:92:10:3b:de:77:81:b4:f6:f5:
a7:78:29:b1:c6:d1:5a:d7:a6:d4:eb:b2:93:18:a0:
93:89:d5:ab:35:bd:a5:75:a2:27:0d:2e:a6:b3:d4:
eb:8a:a1:cc:8f:48:11:0c:cc:83:a5:98:c2:52:4d:
d7:5f:8d:9b:4b:7b:ae:4f:4a:e7:d7:fa:1c:3b:c4:
df:44:1e:0c:78:6b:ee:ab:92:1b:80:18:59:22:08:
11:9c:34:39:24:49:4a:06:e7:86:b8:c1:cb:00:7a:
62:57:b1:5a:90:45:fa:c9:14:9a:45:b7:ac:0a:2a:
5b:c3:9c:1b:8b:73:c8:8b:e4:0f:35:ff:48:ba:a2:
63:cf:3e:6d:c1:da:b4:bf:37:db:8f:76:23:8a:d1:
e5:7b:82:5b:1b:e1:0b:02:51:64:d9:d9:6e:11:d0:
7c:0d:b4:b8:04:7e:e1:b3:a3:12:2a:84:9e:48:b3:
4c:6a:74:33:f7:7a:82:59:1a:0d:ac:eb:f0:7d:a6:
01:a9:0e:9b:8c:6c:ff:40:1c:39:a3:54:a6:35:64:
cd:93:51:15:2f:a8:a8:92:a6:3a:7b:23:67:6f:53:
7a:c3:49:32:e6:ab:a3:39:df:89:e3:25:f5:37:50:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E1:53:0A:10:DC:98:24:23:17:1A:D1:22:C6:BA:EE:7D:0C:C6:B2
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e32392e302f32342d3234203d3e20323036313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:80:cf:7d:9e:ce:1d:88:fe:2a:d3:e6:9b:a3:ae:9b:d0:09:
f8:03:8b:e8:eb:bc:7d:dc:02:88:c4:d7:16:c5:5f:33:74:d5:
c8:fa:7f:94:65:ce:b1:cf:05:f5:b7:6d:67:79:91:ce:e3:be:
2b:ef:db:11:86:7f:3c:b4:d8:84:ce:0b:90:f0:fc:71:e7:7d:
d9:c8:9c:66:07:69:31:14:da:43:fe:2b:b8:b7:bd:29:0b:74:
f3:10:d8:a3:2c:37:4b:39:3a:46:b1:d8:39:ab:5b:58:4c:9c:
62:8c:02:f4:20:65:72:0c:13:f8:92:d1:bb:52:7e:92:cd:c5:
f5:3f:e3:ea:b7:82:f7:64:12:56:9c:8f:3b:21:0a:c3:22:d7:
aa:5e:05:3d:c4:2f:c3:42:40:02:52:c1:f3:3e:9a:3b:7d:e8:
44:03:1d:21:28:eb:cd:9d:d7:af:e2:f0:d6:bf:e4:73:22:b2:
2c:28:e1:11:c3:d9:3b:63:1a:2e:04:1d:d3:7f:2e:cf:4a:ca:
cf:67:74:19:3d:e7:3b:70:34:0b:5e:9c:98:87:30:10:8f:c9:
b2:b8:29:67:7e:ee:86:b2:d7:27:f4:b0:5a:2d:80:c1:62:f1:
d6:c2:ed:66:6b:36:5b:d5:84:19:40:67:e6:97:31:92:65:60:
51:ef:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org