Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
File: 33312e362e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: MEGnG4O49EYUEi8CORWUQbmQrVoW9tJbsiOWrkveXc4=
Subject key identifier: 2D:48:F2:CA:2A:4C:5C:ED:B1:C9:7A:A9:EA:03:CF:B3:53:D9:86:8B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3486A38553E00B469CA28A4995EC4ECD3EDE520B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
Signing time: Thu 06 Mar 2025 00:02:35 +0000
ROA not before: Wed 05 Mar 2025 23:57:35 +0000
ROA not after: Thu 05 Mar 2026 00:02:35 +0000
asID: 834
IP address blocks: 31.6.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:86:a3:85:53:e0:0b:46:9c:a2:8a:49:95:ec:4e:cd:3e:de:52:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 5 23:57:35 2025 GMT
Not After : Mar 5 00:02:35 2026 GMT
Subject: CN=2D48F2CA2A4C5CEDB1C97AA9EA03CFB353D9868B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:3e:f6:86:2e:1e:c4:51:7f:20:ed:ba:b0:
10:7c:8c:bf:48:3b:02:8a:8d:a1:c5:a8:d3:a1:51:
c5:e6:46:28:34:02:a3:2d:71:87:ef:aa:5e:e3:5f:
31:63:68:7e:68:7a:a0:ad:91:61:4f:bc:17:67:9f:
ed:0b:1f:d3:87:dd:41:67:9f:dd:69:f5:b2:98:2f:
d0:37:44:fc:9a:b9:5e:94:54:45:bb:06:82:5f:6c:
ee:c5:aa:ee:a7:b8:d5:8e:3f:12:29:99:f2:21:ed:
3b:10:aa:39:92:d6:40:47:30:57:57:13:d7:33:5b:
73:7a:fc:fd:70:21:da:7b:07:d6:93:cb:d9:39:9d:
b6:5c:80:17:ab:ee:7f:bb:56:75:31:b3:b7:48:b1:
4d:44:78:90:0e:e0:f5:de:65:b3:4c:d9:0f:a8:15:
3b:0c:ee:52:b7:72:2a:d6:ff:ae:9f:c8:71:1a:e0:
6a:32:c2:34:36:d7:4e:93:40:ca:b8:42:f1:47:37:
74:2d:6d:65:55:68:1e:87:20:80:8a:4f:6f:00:69:
3a:1f:28:ba:1f:fd:9f:b8:7d:68:2a:2a:27:65:1b:
17:0a:e0:0c:d1:4e:3a:db:18:da:d7:2d:18:98:b1:
09:96:20:b1:70:31:2d:57:bb:d1:0c:a6:0a:ad:22:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:F2:CA:2A:4C:5C:ED:B1:C9:7A:A9:EA:03:CF:B3:53:D9:86:8B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.15.0/24
Signature Algorithm: sha256WithRSAEncryption
27:93:54:a4:3b:3a:6b:9d:75:76:65:f0:66:79:9d:de:22:65:
58:4c:5f:73:93:a7:83:6c:e5:8d:74:81:56:ab:88:ab:6b:70:
89:0b:86:a4:3c:54:27:fe:81:b9:ed:cb:7e:88:cb:91:f3:86:
d6:f6:34:35:45:6e:01:ae:c1:a1:3b:78:53:bf:61:66:aa:01:
e9:57:30:31:c5:a1:02:19:1f:4b:c4:00:34:98:16:6f:36:4c:
f5:63:55:5a:0b:f7:ff:5e:06:60:e2:bf:58:9f:88:1d:66:3b:
ee:d4:48:df:eb:13:fd:21:85:46:58:fe:b5:09:a0:e0:51:ab:
29:b4:d4:f8:34:29:66:7f:85:4b:e5:30:e4:10:db:93:fd:29:
c3:9f:2f:13:08:ae:7d:c9:a6:4f:27:1f:38:0c:11:8e:d2:5f:
f5:ce:80:99:51:b0:d5:f3:91:d4:ad:ee:ff:16:7e:52:3a:0d:
35:8f:e2:db:87:80:7c:1b:14:94:1b:90:87:9e:bf:5d:e8:46:
7f:a3:0f:a3:86:7c:35:df:23:d6:8f:f2:73:6b:69:e7:f1:44:
79:bb:5b:a6:46:97:3d:42:4b:37:f8:bd:9e:ce:fb:e2:8f:94:
fc:f3:a7:a2:c6:be:a9:32:89:d6:bd:66:f9:fb:a3:a0:26:00:
93:38:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:22 2025 by rpki-client