Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323133353936.roa
File: 38322e3131382e32382e302f32342d3234203d3e20323133353936.roa (raw, json)
Hash identifier: 8S6yt+f7hND37iUUakoOnVK2Qv0vybkT9i9CCKnQa2s=
Subject key identifier: 2C:75:AE:29:90:07:83:1A:99:96:0F:AC:51:00:0A:AB:25:9C:15:FA
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5F85FAB7E862B9AF41EB41A21CC7E60BCB78AAC5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323133353936.roa
Signing time: Wed 15 Jan 2025 14:59:52 +0000
ROA not before: Wed 15 Jan 2025 14:54:52 +0000
ROA not after: Wed 14 Jan 2026 14:59:52 +0000
asID: 213596
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:85:fa:b7:e8:62:b9:af:41:eb:41:a2:1c:c7:e6:0b:cb:78:aa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jan 15 14:54:52 2025 GMT
Not After : Jan 14 14:59:52 2026 GMT
Subject: CN=2C75AE299007831A99960FAC51000AAB259C15FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:fe:03:27:c5:b9:f8:f1:ed:16:9e:d0:31:
39:05:6b:0d:27:5d:99:c7:a0:2c:d9:15:48:55:20:
72:07:5d:ed:48:7b:5b:5d:bc:9e:25:3d:b5:32:41:
97:ec:07:7e:c7:9c:8f:0d:82:eb:46:1a:b0:dc:8e:
a6:98:b3:12:67:0c:75:d1:58:f3:46:67:c6:a4:b1:
52:2e:a9:d8:d4:97:af:aa:99:7b:75:c5:63:67:2e:
ae:b7:c5:ed:98:1b:55:5f:d7:e8:f3:01:e5:b5:2b:
d4:74:86:72:c3:27:10:bf:8a:0f:ed:95:d2:cd:c2:
b5:bf:97:ef:da:d9:9e:57:ed:eb:a0:46:00:17:14:
6a:b6:e1:f0:7b:ae:5c:69:a3:c4:36:93:e9:d5:8d:
9d:de:85:11:42:da:75:18:1f:f6:8c:34:64:5d:79:
9c:0e:88:1e:1d:23:f9:12:6e:d1:fd:7b:af:e1:6a:
cd:85:ed:64:8f:33:e0:06:07:a8:16:e0:fd:cc:90:
04:ac:15:ec:50:b1:69:30:fb:12:32:9c:bc:da:14:
65:e9:06:e3:10:bc:de:aa:62:ae:87:4c:c2:31:d3:
b0:6a:bd:d1:a9:12:49:be:8e:65:5c:ca:61:69:2e:
82:3e:8f:de:f5:94:13:79:dd:91:50:85:43:66:ac:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:AE:29:90:07:83:1A:99:96:0F:AC:51:00:0A:AB:25:9C:15:FA
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e20323133353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
81:30:c9:7b:fc:5d:cb:61:94:68:41:f2:e2:dd:a4:b2:62:ac:
f2:9d:8b:62:fc:0a:28:eb:d6:ca:91:f0:2d:3a:69:7c:ca:11:
d5:0b:57:fd:46:c5:5f:f3:01:49:a6:ed:b1:91:50:09:34:2b:
a1:67:09:69:1b:c4:c1:af:5f:9a:b9:04:7f:5b:6b:36:54:46:
0b:4d:a9:c3:ae:4f:84:ad:49:44:58:32:70:df:fd:e2:d8:19:
54:a7:a2:47:3f:1b:fc:20:c8:8c:79:fe:33:ae:f1:d5:a3:27:
1f:92:66:82:a6:66:17:bc:cc:b9:41:f4:93:bc:23:c1:5d:3e:
a9:25:9c:70:4d:d5:ea:b2:24:58:49:8c:50:dd:ce:d2:9f:6a:
43:76:12:70:04:b7:33:14:b9:e8:f3:91:eb:b7:ce:ab:c6:93:
58:62:d1:f9:20:21:42:35:27:eb:26:d0:f0:11:e0:92:71:f4:
c5:b3:62:ce:57:65:f8:55:fe:4c:45:16:be:6f:6a:af:a8:6f:
77:76:62:f5:1b:8f:60:d4:ed:66:4d:20:95:b8:db:d7:6c:e1:
8f:3f:4e:a8:f6:98:f8:b8:15:d6:0a:a0:a9:57:e5:2c:27:77:
14:b0:9a:48:7a:3b:ef:b4:0f:58:19:38:76:16:5f:0d:6c:2a:
75:1c:ae:b4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUX4X6t+hiua9B60GiHMfmC8t4qsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNTAxMTUxNDU0NTJaFw0yNjAxMTQxNDU5NTJaMDMxMTAvBgNV
BAMTKDJDNzVBRTI5OTAwNzgzMUE5OTk2MEZBQzUxMDAwQUFCMjU5QzE1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKh/4DJ8W5+PHtFp7QMTkFaw0n
XZnHoCzZFUhVIHIHXe1Ie1tdvJ4lPbUyQZfsB37HnI8NgutGGrDcjqaYsxJnDHXR
WPNGZ8aksVIuqdjUl6+qmXt1xWNnLq63xe2YG1Vf1+jzAeW1K9R0hnLDJxC/ig/t
ldLNwrW/l+/a2Z5X7eugRgAXFGq24fB7rlxpo8Q2k+nVjZ3ehRFC2nUYH/aMNGRd
eZwOiB4dI/kSbtH9e6/has2F7WSPM+AGB6gW4P3MkASsFexQsWkw+xIynLzaFGXp
BuMQvN6qYq6HTMIx07BqvdGpEkm+jmVcymFpLoI+j971lBN53ZFQhUNmrMTXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULHWuKZAHgxqZlg+sUQAKqyWcFfowHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzgzMjJlMzEzMTM4MmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzUzOTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UnYcMA0GCSqGSIb3DQEBCwUAA4IBAQCBMMl7/F3LYZRoQfLi3aSyYqzynYti/Aoo
69bKkfAtOml8yhHVC1f9RsVf8wFJpu2xkVAJNCuhZwlpG8TBr1+auQR/W2s2VEYL
TanDrk+ErUlEWDJw3/3i2BlUp6JHPxv8IMiMef4zrvHVoycfkmaCpmYXvMy5QfST
vCPBXT6pJZxwTdXqsiRYSYxQ3c7Sn2pDdhJwBLczFLno85Hrt86rxpNYYtH5ICFC
NSfrJtDwEeCScfTFs2LOV2X4Vf5MRRa+b2qvqG93dmL1G49g1O1mTSCVuNvXbOGP
P06o9pj4uBXWCqCpV+UsJ3cUsJpIejvvtA9YGTh2Fl8NbCp1HK60
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:51:51 2025 by rpki-client