Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e2034353135.roa
File: 38322e3131382e32382e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier: X/DhygSlrPVO/eF/GlFtoVCSofbVFOhLzL3AIGC/ojw=
Subject key identifier: A8:E3:87:DD:AF:0B:C1:68:1E:68:71:5F:38:47:75:41:4B:1E:7F:2A
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 65FF9EA78740C4E45586900A895770A48ADD6DAE
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e2034353135.roa
Signing time: Wed 26 Mar 2025 12:36:45 +0000
ROA not before: Wed 26 Mar 2025 12:31:45 +0000
ROA not after: Wed 25 Mar 2026 12:36:45 +0000
asID: 4515
IP address blocks: 82.118.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ff:9e:a7:87:40:c4:e4:55:86:90:0a:89:57:70:a4:8a:dd:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 26 12:31:45 2025 GMT
Not After : Mar 25 12:36:45 2026 GMT
Subject: CN=A8E387DDAF0BC1681E68715F384775414B1E7F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:b3:dc:f1:1f:65:ac:b5:a0:70:f7:31:3a:
ab:97:67:3f:c3:2e:cb:36:5f:1c:d5:54:93:56:0e:
3d:a9:d2:bb:af:ca:ea:15:39:dc:78:c3:92:d4:ec:
b8:a2:7b:66:ea:e3:06:d6:88:0a:ff:7d:4c:0e:ba:
d9:22:38:96:ae:fb:a6:2b:12:05:b1:6c:89:df:b2:
64:a1:09:20:e3:b1:d1:70:9a:29:a7:c1:43:21:6a:
5c:8f:99:6d:5d:04:92:05:71:f1:34:dc:fa:b9:69:
c3:fa:69:0c:ed:1a:d2:42:c4:6c:a1:72:f2:6d:de:
3e:61:5c:53:24:67:b4:02:05:84:9e:c8:c0:04:7a:
50:6f:c3:ee:29:65:9a:50:7c:6d:45:1c:c1:b2:eb:
23:cc:c6:be:69:60:80:93:e5:d5:9d:6a:ad:69:0a:
5d:10:b0:94:cf:be:c2:9e:3d:f5:92:7e:e0:62:15:
98:2f:e3:d2:4c:c6:e9:6c:5b:82:91:23:2b:fb:e3:
83:22:b9:ac:a5:55:10:70:13:7f:50:03:07:1b:f9:
da:27:64:8f:7c:0b:e7:6e:db:bb:33:5c:72:a3:98:
c5:d6:92:ca:2a:ba:c3:bd:18:71:5f:9a:c5:49:ea:
91:be:96:cf:a6:10:10:d2:f0:ca:ce:05:1f:23:e2:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:87:DD:AF:0B:C1:68:1E:68:71:5F:38:47:75:41:4B:1E:7F:2A
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32382e302f32342d3234203d3e2034353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9a:dd:ad:8b:a7:9f:73:61:5b:cb:63:61:9a:21:32:bd:b9:
7a:f7:43:1d:78:02:88:e2:18:a4:bc:1a:12:bc:86:05:c8:ff:
9e:45:cb:ae:86:69:ae:a3:a5:3d:61:f8:ea:6d:81:4b:b4:8b:
8d:14:11:af:69:9c:65:43:b1:0d:ee:fc:a4:6d:d6:63:49:c7:
99:da:0a:89:31:e4:33:35:44:84:36:a3:3e:fa:8c:62:6c:19:
7a:b7:34:79:fc:62:f8:aa:91:9f:ce:03:5e:f4:67:c4:32:46:
57:c5:2e:ed:34:e8:4c:4b:ed:ce:8b:69:ad:87:ce:b2:af:ef:
0e:f8:46:bb:d5:6d:f8:3f:62:db:c6:88:d6:f2:d3:f4:49:2c:
fa:2c:12:be:01:b1:58:6d:43:6d:7a:ae:66:0a:c1:de:5a:54:
b5:36:f1:ed:44:f3:1a:78:51:ae:a2:7e:27:d5:b4:42:04:2e:
28:a2:02:6b:e3:fe:39:13:1d:2d:76:bb:70:ee:17:98:80:5f:
01:58:1f:c6:f2:74:57:de:80:fc:7d:b9:34:9d:f8:10:f9:e0:
ca:2b:6b:60:f5:ee:01:9f:e8:62:88:51:08:c7:45:09:85:a6:
5c:58:bc:59:8c:0a:9a:b6:3a:68:81:57:b6:9b:c2:78:48:d3:
0f:49:3d:d1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUZf+ep4dAxORVhpAKiVdwpIrdba4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNTAzMjYxMjMxNDVaFw0yNjAzMjUxMjM2NDVaMDMxMTAvBgNV
BAMTKEE4RTM4N0REQUYwQkMxNjgxRTY4NzE1RjM4NDc3NTQxNEIxRTdGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+47Pc8R9lrLWgcPcxOquXZz/D
Lss2XxzVVJNWDj2p0ruvyuoVOdx4w5LU7Liie2bq4wbWiAr/fUwOutkiOJau+6Yr
EgWxbInfsmShCSDjsdFwmimnwUMhalyPmW1dBJIFcfE03Pq5acP6aQztGtJCxGyh
cvJt3j5hXFMkZ7QCBYSeyMAEelBvw+4pZZpQfG1FHMGy6yPMxr5pYICT5dWdaq1p
Cl0QsJTPvsKePfWSfuBiFZgv49JMxulsW4KRIyv744MiuaylVRBwE39QAwcb+don
ZI98C+du27szXHKjmMXWksoqusO9GHFfmsVJ6pG+ls+mEBDS8MrOBR8j4uqRAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUqOOH3a8LwWgeaHFfOEd1QUsefyowHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzgzMjJlMzEzMTM4MmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMxMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSdhww
DQYJKoZIhvcNAQELBQADggEBAA2a3a2Lp59zYVvLY2GaITK9uXr3Qx14AojiGKS8
GhK8hgXI/55Fy66Gaa6jpT1h+OptgUu0i40UEa9pnGVDsQ3u/KRt1mNJx5naCokx
5DM1RIQ2oz76jGJsGXq3NHn8YviqkZ/OA170Z8QyRlfFLu006ExL7c6Laa2HzrKv
7w74RrvVbfg/YtvGiNby0/RJLPosEr4BsVhtQ216rmYKwd5aVLU28e1E8xp4Ua6i
fifVtEIELiiiAmvj/jkTHS12u3DuF5iAXwFYH8bydFfegPx9uTSd+BD54Mora2D1
7gGf6GKIUQjHRQmFplxYvFmMCpq2OmiBV7abwnhI0w9JPdE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:17 2025 by rpki-client