Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323132353938.roa
File: 38322e3131382e32382e302f32342d3234203d3e20323132353938.roa (raw, json)
Hash identifier: pj3ECrCzhz5lS60Z70WjwbreHq3a6obKFyE8YqL2xYc=
Subject key identifier: 09:6F:59:76:93:2D:16:C9:BF:09:C0:3B:2A:E7:6E:8D:02:A4:F7:9A
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 3D2FE8BBD122965C348F3A98B9FFD2AB1D17DD3D
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323132353938.roa
Signing time: Wed 08 Jan 2025 10:26:17 +0000
ROA not before: Wed 08 Jan 2025 10:21:17 +0000
ROA not after: Wed 07 Jan 2026 10:26:17 +0000
asID: 212598
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2f:e8:bb:d1:22:96:5c:34:8f:3a:98:b9:ff:d2:ab:1d:17:dd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jan 8 10:21:17 2025 GMT
Not After : Jan 7 10:26:17 2026 GMT
Subject: CN=096F5976932D16C9BF09C03B2AE76E8D02A4F79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:58:b7:cf:9e:7d:d1:cb:ea:3a:33:18:a6:
2f:98:7e:cc:08:b5:d5:ec:00:5a:16:0d:49:fb:0e:
ce:89:a6:32:cc:10:00:bf:c2:2b:6d:60:17:18:92:
65:dc:eb:6e:dc:da:83:16:42:76:58:5c:ed:73:30:
73:a1:2b:ea:a6:7f:d0:39:b9:b8:0e:4e:89:ec:cb:
dd:53:30:77:ba:4c:db:73:41:4c:a2:20:d7:73:6e:
63:f2:23:17:41:12:7e:3d:a3:a7:b6:6b:36:be:25:
37:a7:d4:7c:af:57:d5:02:b6:7f:35:1d:61:bd:f0:
c3:3e:7a:94:5f:cd:6f:2a:ca:e6:b3:3e:e5:90:b7:
a3:c8:6f:d2:43:68:48:17:9d:98:1c:2a:12:e1:f5:
ed:fd:d7:8f:38:1c:29:2e:cf:8a:67:db:a9:70:94:
e3:58:02:45:66:61:0b:92:94:5e:67:da:6e:e9:b4:
ea:ed:ef:b3:44:c6:37:91:28:44:c6:44:31:5b:79:
91:7f:fc:e3:4d:67:e2:8f:78:29:7f:60:84:06:87:
59:0a:1e:4d:5f:a2:21:55:be:ed:a8:28:2d:4e:39:
3f:48:70:9b:6a:4f:9d:0d:0f:f5:2e:e6:cf:68:f2:
c2:f0:52:c1:eb:df:89:8d:ca:6d:79:26:cd:96:8f:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:59:76:93:2D:16:C9:BF:09:C0:3B:2A:E7:6E:8D:02:A4:F7:9A
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323132353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6d:ed:fc:64:be:cb:1a:5c:5a:7d:78:18:d4:03:94:6b:90:
d8:17:b7:4d:5d:d9:ea:6f:c9:8e:96:45:83:21:85:c0:ef:be:
cd:72:d1:0d:f2:ed:09:92:7c:45:eb:38:95:82:28:86:cb:5a:
2e:6c:92:4c:f5:c2:2a:d0:d5:72:1b:a0:4b:8e:1e:f1:0b:95:
cd:08:13:69:ab:e8:76:32:9e:34:28:dc:d9:52:3c:48:f1:4a:
f1:2d:b3:1a:38:2b:7d:6f:d9:e5:f9:34:97:a1:a4:10:ef:90:
6c:fd:44:7a:6a:fc:88:ac:45:12:f0:b7:6f:dc:04:c8:5b:a2:
ba:3e:cd:85:1e:2d:bc:6c:64:c2:2e:49:b5:e7:54:46:60:d3:
fd:83:dc:ce:05:ea:c1:b5:87:c4:3e:d1:a5:a8:26:b2:a9:62:
c2:66:1b:cf:b4:39:da:e3:a8:95:13:45:32:81:42:02:7c:f9:
e3:25:e8:fa:60:f3:d1:d9:47:c2:fd:a6:4c:e3:e2:1f:27:20:
e6:8b:0d:39:71:23:ac:78:94:81:41:55:cf:71:11:4d:86:eb:
55:88:21:b5:4e:36:b8:8c:5c:1f:c2:54:de:19:e9:17:72:52:
a4:de:c4:e0:22:55:62:7c:14:59:83:28:68:56:6b:c2:2e:17:
af:a3:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:43 2025 by rpki-client