Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20313337383937.roa
File: 38322e3131382e32382e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: o6CrgiOis+FzbmQ6katG0ikcJU2QqoFZjBkkMemMqJQ=
Subject key identifier: C8:94:14:DA:C6:03:9A:58:95:2A:5E:55:1D:8E:09:E0:54:F7:91:3D
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 4B748CE946A7B47D9EFA8A5CDFD3FFD8D0B809EA
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20313337383937.roa
Signing time: Wed 26 Mar 2025 12:36:45 +0000
ROA not before: Wed 26 Mar 2025 12:31:45 +0000
ROA not after: Wed 25 Mar 2026 12:36:45 +0000
asID: 137897
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:74:8c:e9:46:a7:b4:7d:9e:fa:8a:5c:df:d3:ff:d8:d0:b8:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 26 12:31:45 2025 GMT
Not After : Mar 25 12:36:45 2026 GMT
Subject: CN=C89414DAC6039A58952A5E551D8E09E054F7913D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:dc:03:83:0b:c0:82:88:9d:47:55:3d:89:
88:ac:75:6f:32:39:4e:07:98:ee:8b:62:ae:a0:57:
ca:78:9d:41:0c:17:b7:df:27:12:f9:89:0c:3c:12:
95:b8:c2:11:49:87:17:d3:89:9f:eb:df:96:1e:af:
d0:2f:18:54:b2:b1:b5:14:10:87:b8:0f:68:7b:c0:
1c:d5:c6:9e:a7:1d:22:8b:8c:a5:b1:50:6b:55:df:
07:92:af:85:97:9b:73:0e:e1:7f:32:7e:1a:92:5d:
4a:9d:36:4d:8c:14:1d:37:86:89:53:08:d0:88:f3:
5d:12:f4:69:54:da:0c:8f:e6:60:7e:fb:a9:30:e8:
27:ca:6d:51:67:b7:94:51:af:06:dd:96:3b:f6:80:
17:de:20:28:6d:07:32:2a:0b:3e:06:8f:f7:36:39:
bc:a8:b8:d7:3a:52:f8:5c:ce:67:7b:6a:c0:2b:c1:
b3:1f:75:ce:ef:7d:0a:67:17:1f:35:d1:55:1f:95:
3c:dd:cc:47:0d:c8:47:48:b6:72:bb:5f:0e:27:3b:
97:cb:20:59:7c:fb:19:c8:63:a6:6c:b8:c1:68:f8:
9a:25:e6:9d:cf:4a:71:98:b8:76:a1:d5:f8:23:87:
5a:75:77:44:3b:21:e7:2c:b0:1e:26:28:e2:6f:5b:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:14:DA:C6:03:9A:58:95:2A:5E:55:1D:8E:09:E0:54:F7:91:3D
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:42:6f:e6:3f:1c:5b:12:58:01:2a:f2:2d:82:0e:84:72:70:
1c:e7:61:cb:d0:e4:fd:c6:82:5d:54:56:14:0c:9f:92:28:68:
8d:ac:e3:20:d7:0a:fc:e0:0a:46:58:a3:a5:78:c7:61:2d:71:
5f:4d:02:8a:7f:64:b6:bb:94:e1:86:ae:1b:5c:97:5e:db:cc:
ed:fc:ee:dd:0a:88:71:3d:25:dc:11:ed:19:04:cd:c5:8e:c2:
48:a2:b5:44:40:e7:9a:f9:7b:79:1a:f1:f3:03:62:a6:ab:d9:
21:a2:23:33:73:5a:12:06:9a:d4:72:bc:3f:29:ce:58:91:2a:
65:42:aa:ff:fe:ce:8a:6b:bf:65:5d:0b:e1:27:cd:d8:19:ed:
12:d6:0e:af:89:a8:17:6d:c6:67:48:da:64:7a:ec:ec:e1:32:
18:df:b5:c4:ec:b7:3a:f7:c3:0e:04:f1:90:81:1b:d1:89:0b:
5a:1e:74:3a:50:1e:21:3c:0d:ce:1b:f9:8b:27:b2:fb:15:31:
31:0d:45:eb:39:65:30:fa:f8:cd:1c:c6:9f:dd:3f:f5:16:06:
6b:d5:dd:aa:ae:29:66:d2:96:55:90:5e:f0:01:20:26:51:bc:
32:00:4e:be:a7:80:11:cc:e2:cc:2e:d1:58:03:ce:f2:d3:20:
d6:00:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:26 2025 by rpki-client