Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036313530.roa
File: 38322e3131382e33302e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier: xI/t/p2uqllxuDJ+EAA7pLGDf3qzPeWj4pYRk5UVzrM=
Subject key identifier: F2:49:36:8F:E8:CB:78:13:3E:DB:39:00:DD:73:37:A5:D4:49:79:07
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 1BB7FB8DDECFC8DAF7DA0440D3D7068FDB4348EF
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036313530.roa
Signing time: Sat 29 Apr 2023 09:34:40 +0000
ROA not before: Sat 29 Apr 2023 09:29:40 +0000
ROA not after: Sat 27 Apr 2024 09:34:40 +0000
asID: 206150
IP address blocks: 82.118.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b7:fb:8d:de:cf:c8:da:f7:da:04:40:d3:d7:06:8f:db:43:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:29:40 2023 GMT
Not After : Apr 27 09:34:40 2024 GMT
Subject: CN=F249368FE8CB78133EDB3900DD7337A5D4497907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:8f:ff:52:2e:dc:38:48:8c:4b:f1:5a:eb:
bb:30:92:54:4f:43:5a:4e:5e:12:67:a8:55:95:f5:
51:6c:33:5f:a7:b0:3a:bc:c3:c6:93:05:06:ac:c0:
7c:a5:96:ab:87:4b:66:93:2f:86:53:2b:c2:ed:7e:
a9:e2:21:aa:bd:fa:16:99:1e:f7:89:50:39:31:cf:
61:80:24:d7:61:56:12:8c:8e:40:57:00:3f:1f:71:
df:0f:38:7e:06:a0:4a:cd:26:83:03:2f:4d:bb:8f:
f4:5c:26:ca:0a:ac:ab:fb:37:0a:2e:21:8d:ac:06:
c1:46:86:73:f0:4a:ba:c4:16:16:72:68:e5:c7:82:
d3:6e:46:18:da:11:28:22:a2:a4:14:eb:9c:eb:c4:
c3:2b:60:e2:de:3c:b4:fa:37:d6:11:d4:9b:78:8d:
5b:ed:b9:e0:a4:b2:d3:73:7b:a2:3a:04:3a:4d:d3:
a3:17:8d:ee:47:e9:86:1e:8a:a9:8d:79:d4:d7:19:
16:29:1a:26:b0:4f:f8:dc:ea:60:c1:89:10:46:87:
cd:92:72:d2:dd:fd:e1:99:fc:b3:b5:40:79:3e:09:
fe:9a:a3:90:8f:d1:24:be:8d:47:4a:9d:09:7f:36:
76:8a:86:be:43:9e:a1:a3:4c:11:39:89:39:06:fc:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:36:8F:E8:CB:78:13:3E:DB:39:00:DD:73:37:A5:D4:49:79:07
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33302e302f32342d3234203d3e20323036313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.30.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f2:81:81:84:f5:17:56:5d:b1:18:d2:71:f0:fb:5f:e4:2e:
09:fd:06:28:51:80:16:c8:a8:0b:b1:eb:21:12:69:3b:53:19:
5a:98:e4:e2:57:e1:b1:ff:e6:ae:e7:90:65:20:80:83:d5:90:
af:22:95:90:73:99:30:95:97:39:c9:8f:1f:07:a0:32:12:bc:
c4:5b:94:e4:35:d3:56:44:d6:3b:32:b5:62:46:f5:84:01:c3:
be:bd:a5:bb:bc:44:af:0f:2d:62:a2:52:48:4c:0b:f9:1d:f8:
b9:b6:74:bb:c6:d4:3c:bb:df:ca:53:e9:8b:29:50:4e:29:b7:
a4:79:e0:ed:c0:9b:30:1e:38:46:42:ad:57:3b:4b:84:7c:19:
49:af:be:9e:2a:b0:78:5a:8d:db:5a:6f:2c:ae:bc:4b:e5:ff:
9c:8d:36:8e:b3:e5:c0:53:fe:cd:63:ef:1f:f8:dc:b2:63:68:
61:4e:aa:9a:25:7c:12:d4:46:ee:d5:9f:d0:2c:a1:62:6f:5e:
dd:58:7e:d7:af:c3:ca:5b:4b:90:b3:fa:7c:54:a4:41:12:de:
59:d3:32:34:b8:b3:69:df:5b:d0:00:1f:74:b3:b4:91:13:2d:
6c:eb:2b:b0:9a:40:67:e5:4b:4b:1b:28:35:30:5a:43:8e:2d:
bf:50:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org