Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
File: 33312e362e33322e302f32342d3234203d3e20323135363933.roa (raw, json)
Hash identifier: peX5FK0Y9DfRwR+SwSKEvb3gG+ex/5CnjoBNrrOe8Uo=
Subject key identifier: 5E:3C:3A:A0:C9:F2:32:75:37:53:42:6A:7E:29:30:25:FF:05:9F:16
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 57E450F6B15FAA908EDD76D5519410AC6F41C03B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
Signing time: Tue 04 Feb 2025 17:53:53 +0000
ROA not before: Tue 04 Feb 2025 17:48:53 +0000
ROA not after: Tue 03 Feb 2026 17:53:53 +0000
asID: 215693
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e4:50:f6:b1:5f:aa:90:8e:dd:76:d5:51:94:10:ac:6f:41:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 4 17:48:53 2025 GMT
Not After : Feb 3 17:53:53 2026 GMT
Subject: CN=5E3C3AA0C9F232753753426A7E293025FF059F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:c4:53:c4:d9:6d:b1:b3:e5:e3:c0:2f:d9:
49:43:20:67:8e:4d:aa:dd:1d:72:67:3a:51:e3:ce:
4e:8e:0b:46:88:1a:00:b3:a8:0d:cb:68:8e:de:51:
c3:64:e9:26:90:3a:eb:82:ba:ab:e6:67:b5:9a:7d:
f5:d5:f1:bb:cb:e9:37:08:c2:04:54:9e:66:04:b1:
83:96:80:57:c9:3a:d9:27:2f:c7:7a:fb:b7:14:65:
8d:d5:f9:6c:76:16:a9:ed:3c:5f:9f:31:29:30:00:
3d:8c:f1:44:ca:a8:a4:1b:1f:46:0c:9a:58:85:c8:
e5:66:03:af:57:aa:b8:fc:6d:2e:c2:47:fa:26:db:
ea:7f:13:90:27:bf:a1:28:5b:43:28:28:4c:39:69:
86:6f:3f:5d:07:0b:20:ed:8e:d5:c3:ad:da:b8:55:
26:3e:7e:c8:cc:90:79:a4:ca:95:47:b1:82:bb:9e:
3b:6a:b0:62:13:84:3a:f4:66:bd:b3:ba:57:a5:31:
8c:72:f7:6d:e7:74:0c:3f:da:88:e6:4a:15:01:3c:
54:29:fd:bb:52:8d:5a:41:9e:2b:11:7f:86:3a:0e:
38:68:9e:07:94:b1:82:ac:7c:6a:a1:8b:e8:d3:03:
06:d7:bd:a1:99:c0:3e:02:70:0e:fd:d7:8c:b6:36:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:3A:A0:C9:F2:32:75:37:53:42:6A:7E:29:30:25:FF:05:9F:16
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:46:48:81:7b:9d:a7:f3:4a:01:9f:f6:66:45:a4:59:1a:39:
77:ad:5d:7c:6a:ea:a5:8b:37:d5:d5:4c:8d:fb:02:45:49:1d:
f5:53:dc:e3:3f:1d:81:be:fe:8e:c6:20:8a:93:86:ce:6a:a1:
6c:01:6f:a0:27:1c:a9:85:86:d5:9d:07:18:cd:1d:fd:95:8f:
2b:32:a7:bd:4b:bf:9b:de:1d:53:a8:cd:4b:82:b4:19:49:46:
a1:7a:da:11:36:9d:66:70:aa:33:48:10:b5:7d:ab:5e:df:1f:
78:a7:95:52:73:11:5f:0a:f7:74:ae:61:fc:0e:10:08:65:60:
ce:df:cb:ff:b2:c8:9c:c3:e4:3c:cc:c1:59:9f:c7:dc:6b:21:
5d:9d:2b:4e:09:57:71:85:4f:15:2a:19:d5:8c:b5:29:bb:89:
4f:2f:e4:37:45:7f:56:78:08:87:39:49:8c:9e:e4:97:6f:f9:
1a:8d:49:f7:6f:46:5a:10:2d:f9:f6:b8:7a:08:b6:c6:b3:ca:
4b:65:41:52:be:2d:0a:5d:77:9c:03:db:6e:73:4a:70:35:f7:
5f:02:99:f7:05:ef:7a:d5:1d:5b:f4:a8:3d:21:1b:6e:f7:2e:
f6:f1:e0:09:88:3e:df:bd:48:6b:20:b5:fb:a0:dd:3c:c6:6d:
0c:95:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:22 2025 by rpki-client