Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31352e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: 7zVrNHeo1agoi0y9o8Pu2bIJWxIxQUNT9fZTuz7f2+M=
Subject key identifier: 9D:2C:78:CC:E2:CC:49:F0:69:F5:CD:F8:08:55:A8:E2:1D:C9:EC:7D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 238F4C623929FB83D67457FD6521A24230954478
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
Signing time: Thu 06 Mar 2025 13:20:37 +0000
ROA not before: Thu 06 Mar 2025 13:15:37 +0000
ROA not after: Thu 05 Mar 2026 13:20:37 +0000
asID: 215764
IP address blocks: 31.6.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8f:4c:62:39:29:fb:83:d6:74:57:fd:65:21:a2:42:30:95:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 6 13:15:37 2025 GMT
Not After : Mar 5 13:20:37 2026 GMT
Subject: CN=9D2C78CCE2CC49F069F5CDF80855A8E21DC9EC7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:92:3e:33:54:6b:24:8c:17:32:43:7d:aa:
6c:d3:01:2e:c3:f1:41:00:09:e5:30:e0:27:e2:10:
73:46:ab:83:36:31:14:dd:0d:17:cc:af:0f:44:d4:
44:34:0a:7b:37:94:4e:ca:ca:4e:68:60:dd:a0:05:
9a:8f:74:58:76:95:44:d5:55:df:14:10:89:34:53:
53:c6:90:7c:85:65:5c:db:77:4b:cf:5e:f1:43:de:
ff:f0:4b:59:90:10:a2:fb:e7:1f:3e:49:24:b2:2f:
a3:35:c0:40:eb:c2:88:23:ae:4e:ae:2b:67:a6:c7:
60:6f:dc:b4:3f:bf:7b:ae:cb:ac:51:3f:49:37:79:
cb:97:ea:3d:1a:26:21:3d:fa:b5:2c:7c:24:d2:12:
8b:32:2c:f4:e7:a8:80:2f:38:09:dd:fe:c7:50:bf:
b4:a6:0b:1f:c4:1c:3d:d9:2d:d5:a0:ff:72:de:66:
b6:b8:28:0a:0f:80:f0:6d:ea:7f:00:62:4e:23:c1:
05:ea:47:10:3c:d5:cf:07:95:99:98:d8:41:12:f5:
88:be:dc:69:c8:97:86:69:78:78:ed:3d:bb:83:44:
49:b1:31:df:b2:02:33:a8:6c:ba:df:90:63:1d:84:
76:e4:dd:ba:20:76:09:ca:e0:07:f4:e3:55:df:ed:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:78:CC:E2:CC:49:F0:69:F5:CD:F8:08:55:A8:E2:1D:C9:EC:7D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1a:0e:4c:81:34:51:ac:6b:a3:cf:ea:9a:69:30:dc:94:1f:
7a:b7:3c:23:d1:ca:98:40:ec:9c:50:58:b4:dd:2e:6b:ec:9b:
8f:d5:bb:fb:20:a3:8a:d4:50:93:c5:bf:3d:0f:47:6f:25:4a:
59:73:f8:f3:5b:a5:79:f7:f3:d8:85:80:4b:06:df:ab:78:52:
64:1c:63:2f:6c:6e:64:02:0b:8c:a4:c5:30:9a:46:97:cf:79:
2a:74:78:da:e3:a2:3b:07:be:18:b4:e7:c0:eb:d8:93:79:7c:
75:db:76:c0:e0:0f:4c:6b:46:cb:d5:bc:91:b0:4d:8f:fd:f7:
c5:ed:d8:ef:19:3f:69:ff:55:f4:bc:10:6b:83:0e:3b:4d:4a:
ef:5b:4c:ca:9e:16:c9:78:17:9e:fd:50:14:d0:75:2a:58:3d:
d3:f7:c2:c2:da:2d:f5:d6:fb:47:6a:0a:27:ca:86:29:8c:7c:
61:49:9c:5a:f5:2d:51:9f:7d:e3:35:7b:a3:c3:4f:b3:0f:8a:
6b:db:3f:74:06:54:36:85:1d:7a:c1:e5:7c:db:ae:d8:0a:65:
46:1d:90:59:88:ae:42:46:4c:f1:39:6d:63:88:8e:f0:9e:06:
7a:97:55:8f:b3:de:e0:99:80:a9:0b:ac:68:98:74:ef:f4:a6:
c2:a4:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:00:17 2025 by rpki-client