Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33312e302f32342d3234203d3e203134363138.roa
File: 38322e3131382e33312e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: cnGR+v5qwxt0Knr/M9vH5eYNG+mMBIb9w9/98nEKKUo=
Subject key identifier: A3:D0:E5:99:7E:2E:FE:44:20:D8:07:1E:92:99:F7:97:BB:CC:D9:A3
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 6DB1BF1EE973FFD75CAF641ED5C6580874D055AD
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33312e302f32342d3234203d3e203134363138.roa
Signing time: Sat 29 Apr 2023 09:35:17 +0000
ROA not before: Sat 29 Apr 2023 09:30:17 +0000
ROA not after: Sat 27 Apr 2024 09:35:17 +0000
asID: 14618
IP address blocks: 82.118.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b1:bf:1e:e9:73:ff:d7:5c:af:64:1e:d5:c6:58:08:74:d0:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:30:17 2023 GMT
Not After : Apr 27 09:35:17 2024 GMT
Subject: CN=A3D0E5997E2EFE4420D8071E9299F797BBCCD9A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:eb:3a:da:62:65:0c:1e:52:17:16:5e:3f:
8d:be:60:3f:38:1f:1d:5f:d7:c7:f4:78:d5:ab:b6:
5f:3a:d2:a1:d7:eb:ea:e7:c8:af:a0:cf:09:27:5b:
2b:38:08:e7:ce:d7:1c:e2:2e:ae:6c:d3:26:fb:f3:
49:bc:d0:99:17:d8:44:88:52:89:cd:bb:c7:b6:0c:
6b:76:48:f4:97:7f:41:4d:b2:1b:a0:49:aa:14:84:
76:88:ea:bf:e4:b4:58:ca:76:7e:53:7a:bc:f4:4d:
e7:01:91:3b:6b:e3:44:20:76:f6:85:49:61:3b:d6:
8b:88:b0:95:02:d6:a6:7c:70:fe:76:fa:c5:90:f1:
de:ab:39:d5:95:0d:7f:81:9b:4e:54:8a:47:33:ed:
fb:67:fa:47:46:60:10:a6:e6:17:55:1a:29:af:66:
f1:dd:a8:e1:71:5f:0a:fc:12:57:b9:33:b2:48:5b:
a2:80:c1:82:9a:ab:a8:db:f1:e1:f3:cc:16:39:1a:
dc:eb:c9:69:70:0d:9d:a5:d2:65:89:22:73:78:16:
31:9f:d3:76:b7:28:80:86:6c:06:db:a1:68:0e:c2:
53:fd:91:b6:2f:c1:ef:29:20:33:73:90:06:c1:60:
57:e6:51:9d:eb:78:f2:52:0c:3d:f7:c6:90:1e:23:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:E5:99:7E:2E:FE:44:20:D8:07:1E:92:99:F7:97:BB:CC:D9:A3
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/38322e3131382e33312e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c4:a5:8e:95:43:a3:0b:70:e9:74:dc:81:7b:0d:91:af:de:
c4:4a:4c:eb:24:67:17:03:3f:94:af:2d:3a:18:4c:e5:f1:ea:
d8:49:09:1c:45:1f:43:25:3d:64:e6:c4:01:26:b8:28:4c:eb:
4e:af:3b:27:2e:37:3b:f2:22:4a:23:23:b6:13:84:57:8d:ae:
79:e9:ba:48:e2:43:31:92:30:f3:f3:03:34:2e:ad:8f:bb:51:
0c:b6:64:a0:a1:b8:56:6c:ba:74:59:c6:3b:83:ea:ba:60:07:
3f:a4:e0:01:a6:d2:ae:e4:7d:61:7f:22:7e:b9:ae:f1:c4:68:
53:1d:5c:a8:80:5e:a6:c0:f0:ca:91:17:3a:3a:85:9e:93:35:
25:38:f0:be:e8:cf:20:1a:98:08:59:60:ca:86:55:5f:68:ce:
d6:bc:77:e9:2c:86:1c:07:9c:f1:c0:fb:2f:4e:e5:65:95:b5:
e8:bc:ef:21:13:58:7f:5c:c3:d6:71:e8:17:ba:c6:6f:5c:63:
99:53:12:4f:a0:d9:d5:92:94:e2:93:e6:c7:16:ca:d1:ac:dc:
f7:a2:83:e8:f4:c9:3d:7f:c0:bc:c5:f4:43:84:44:0c:bf:63:
01:a9:16:36:37:30:ab:22:7d:8e:17:eb:f0:d8:58:7a:d2:cb:
c5:ba:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org