Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa
File: 33312e362e32382e302f32332d3233203d3e20323132343737.roa (raw, json)
Hash identifier: sjHngUqAxqh6pWs6210VNsMfjXjMH/yLAEOg32VXSlM=
Subject key identifier: F4:58:26:D8:86:FC:41:C7:35:AF:58:50:63:95:BF:18:CE:EC:79:1E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 56D7110E696E421C59574F150A56C19C42BAF9C9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa
Signing time: Thu 09 Jan 2025 18:53:51 +0000
ROA not before: Thu 09 Jan 2025 18:48:51 +0000
ROA not after: Thu 08 Jan 2026 18:53:51 +0000
asID: 212477
IP address blocks: 31.6.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d7:11:0e:69:6e:42:1c:59:57:4f:15:0a:56:c1:9c:42:ba:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 9 18:48:51 2025 GMT
Not After : Jan 8 18:53:51 2026 GMT
Subject: CN=F45826D886FC41C735AF58506395BF18CEEC791E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a4:76:ac:53:36:b2:7c:5b:fd:72:57:52:e2:
df:1f:dc:df:16:eb:c0:2f:d4:87:24:75:7a:58:4f:
d9:fc:b6:9f:2e:a8:46:e6:e3:b1:3f:85:e1:d1:f5:
55:ed:60:60:fb:e9:25:87:08:d6:88:96:ce:d9:d3:
b2:8b:16:d4:ed:17:0e:4b:55:ad:54:aa:a4:5e:61:
b1:6c:7a:ea:52:59:54:cd:0f:2d:c9:41:b7:27:6e:
e2:c0:26:3a:ad:63:45:dd:97:f9:0c:c0:d5:9b:c9:
4e:ba:14:b8:80:9e:a0:ef:44:d3:1f:f5:dd:c0:09:
72:fc:63:11:7c:23:70:3e:ea:7b:ea:87:ad:13:7d:
a7:fa:08:8c:49:44:07:26:c2:59:d1:0a:73:3f:ca:
63:f1:13:98:c6:ae:e4:b2:7a:87:16:cf:db:36:a5:
2d:fb:56:b3:d9:b8:64:0b:58:1b:84:c2:00:ac:5f:
9f:1d:1d:83:64:76:83:95:fe:73:de:29:4a:fb:eb:
dd:e9:54:9b:56:22:44:37:18:43:7b:f2:86:dc:ca:
6f:8b:cb:f9:2a:5a:16:c3:b0:12:f6:99:48:4a:11:
35:11:08:90:7a:c7:83:a2:5d:2b:1b:d3:60:ac:10:
c9:eb:78:73:70:9a:cf:11:f9:45:c5:c3:df:fd:d4:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:26:D8:86:FC:41:C7:35:AF:58:50:63:95:BF:18:CE:EC:79:1E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.28.0/23
Signature Algorithm: sha256WithRSAEncryption
44:38:6b:5f:cc:5f:85:c7:96:10:bf:35:3d:d7:b7:dd:eb:f4:
71:23:d7:ba:0d:d5:16:eb:69:7a:15:8f:b9:d0:4e:dd:50:77:
34:fc:ec:79:cf:2d:76:4d:d6:92:9b:6b:f6:0a:0a:93:c4:fb:
f5:f9:14:ed:da:1b:13:fe:47:16:be:fa:ab:08:ee:3e:2e:49:
6f:99:1f:92:ab:e4:ff:02:19:7f:4d:36:67:ff:d4:0f:71:20:
d0:8a:70:44:dc:a4:40:a7:b9:a2:84:76:14:d5:b9:ae:1c:06:
bc:71:a6:ac:51:1b:1e:56:2e:da:44:32:aa:0e:cf:10:1c:63:
6d:f2:1e:14:6c:ea:43:5a:d2:57:67:f4:b8:08:b1:29:c3:5e:
93:57:25:18:b7:82:43:e4:07:1d:ce:e7:a1:bc:8c:f7:dd:6c:
fe:62:cd:df:0b:11:f0:7e:8b:8c:e8:66:45:19:53:73:47:3c:
f8:cb:9c:c5:fe:54:8c:dd:35:a1:83:d2:e7:e4:7f:bb:9e:43:
53:a6:2a:42:8e:ab:9c:f3:99:60:e4:09:bf:5a:7e:14:bb:b9:
bd:b3:9d:d3:1d:19:64:05:7d:6b:fb:a7:5b:1c:a9:23:c4:76:
33:bd:8a:2e:5d:9f:82:58:04:5e:ba:c4:a6:75:44:d9:21:e7:
08:bf:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:45 2025 by rpki-client