Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036303932.roa
File: 38322e3131382e33302e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: CSIPdGv4EgC3wvnvkW4oJu7g3gDz0+aAyD8ICqVL95Y=
Subject key identifier: 77:C9:C4:CA:47:A2:C4:13:6D:C1:E2:07:51:F5:91:29:9D:80:A0:8E
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 0A6BF245A7F5DCE0ADE522E12426376227E6789B
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036303932.roa
Signing time: Sat 29 Apr 2023 09:34:31 +0000
ROA not before: Sat 29 Apr 2023 09:29:31 +0000
ROA not after: Sat 27 Apr 2024 09:34:31 +0000
asID: 206092
IP address blocks: 82.118.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6b:f2:45:a7:f5:dc:e0:ad:e5:22:e1:24:26:37:62:27:e6:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:29:31 2023 GMT
Not After : Apr 27 09:34:31 2024 GMT
Subject: CN=77C9C4CA47A2C4136DC1E20751F591299D80A08E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:fb:31:1a:90:00:5e:19:62:3a:9d:7f:e1:
16:22:1d:16:29:d8:fb:e1:38:5c:cf:0e:94:b7:be:
4f:ff:ad:b9:a2:af:fb:44:aa:8f:0d:9d:d2:97:b5:
7d:1c:b7:dc:64:d3:6c:7b:d4:ea:67:7a:b5:f2:35:
79:5a:bf:17:98:2c:0e:13:b8:22:96:fc:f7:ae:53:
65:c4:a7:87:3d:5f:68:9d:c9:cf:3d:44:b7:da:7f:
ac:9a:94:fb:67:8e:88:28:e7:6c:f7:ea:ab:29:04:
e6:9b:5b:e4:e7:83:79:21:ed:0d:a7:63:58:f4:a7:
18:06:fe:63:99:db:bb:28:df:dd:fa:39:a9:5f:71:
00:70:07:9d:88:60:b9:48:bb:a9:e4:13:2a:9e:4b:
9f:3c:57:cf:1c:c8:fa:d7:24:2c:46:7c:12:66:66:
57:50:0e:36:14:35:71:78:a5:64:15:8a:5f:11:30:
9a:e9:84:08:a7:42:70:5f:6c:b4:97:81:5a:45:27:
18:f2:d3:6f:ba:37:75:bf:f0:36:98:20:3a:69:69:
54:ef:cb:e9:cc:18:85:d9:88:5b:6e:27:06:1f:60:
bb:06:12:25:ab:a0:36:78:bd:cd:8e:a4:07:3d:3c:
8c:b7:ef:d8:aa:2f:3b:46:91:2c:21:f9:f4:6d:8b:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:C4:CA:47:A2:C4:13:6D:C1:E2:07:51:F5:91:29:9D:80:A0:8E
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a6:d2:ca:e6:c2:82:e2:b6:a0:0e:f3:83:73:ff:be:2e:37:
84:16:cc:44:8d:fb:a2:ea:46:29:fd:f8:77:bd:f4:f1:26:01:
b0:38:ef:71:b5:47:c4:07:47:e3:4d:2a:3b:19:da:76:8d:a6:
75:ad:e4:4e:90:2d:de:c9:79:3a:52:2f:66:b4:de:a5:dc:f8:
0e:f5:9f:79:66:f9:9a:1f:52:66:03:57:c9:4c:ea:c2:2d:27:
f7:6a:53:7a:0d:d9:d2:85:6f:c0:09:32:32:9b:c8:c0:3d:e9:
d0:55:a4:85:78:4a:91:a3:8e:2b:2f:16:54:0a:a0:c5:64:cf:
5e:1a:50:bb:1d:ae:72:e0:c4:1b:78:e1:62:db:54:a4:50:6f:
ce:86:03:31:06:76:08:43:b5:f3:1c:b5:2c:f0:ca:17:8a:3d:
8b:27:dc:e6:16:0d:07:b8:d1:7f:6e:e8:12:a6:9c:8f:24:db:
bc:bf:e3:5f:a1:70:f9:2a:1b:5f:2f:51:fe:3b:8d:25:8d:d3:
70:09:f9:a1:99:52:6a:66:8a:d9:3b:f3:7c:1d:47:30:8a:a8:
d3:89:39:8e:e3:8c:b3:ce:27:cc:fa:cd:a8:13:46:ec:6e:39:
6b:1c:a0:d7:67:4b:71:e3:52:80:35:e5:b4:3d:8b:5e:d7:15:
a8:66:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org