Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
File: 33312e362e33362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: +JmRpGqt080Pgt1UkLFkkHRChgQYGQlyh3IT85+Mju0=
Subject key identifier: 5E:C4:0C:82:1E:00:31:6D:2C:3E:1F:CF:56:EC:71:A2:8D:70:E4:09
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3C88CED668EE63E8D96BA4E265614EEAA3D22AEA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
Signing time: Sat 21 Dec 2024 12:39:28 +0000
ROA not before: Sat 21 Dec 2024 12:34:28 +0000
ROA not after: Sat 20 Dec 2025 12:39:28 +0000
asID: 61317
IP address blocks: 31.6.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:88:ce:d6:68:ee:63:e8:d9:6b:a4:e2:65:61:4e:ea:a3:d2:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 21 12:34:28 2024 GMT
Not After : Dec 20 12:39:28 2025 GMT
Subject: CN=5EC40C821E00316D2C3E1FCF56EC71A28D70E409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:08:c7:20:94:51:84:05:54:fe:1d:46:81:
2e:b9:01:a0:1b:7c:73:81:d4:ea:de:93:48:55:b7:
08:d0:c6:78:0b:75:6e:b8:fc:46:47:d8:44:69:4b:
e9:80:54:3d:8d:85:bb:e5:b0:c1:1b:6a:e2:8e:56:
67:c2:44:a8:61:a9:dd:da:09:97:1c:dd:ed:de:7a:
39:7a:60:36:16:a7:57:52:52:f7:2d:39:d4:76:00:
2f:42:5e:cc:8d:08:a7:d1:eb:b8:8f:5e:47:ff:45:
20:a0:67:22:12:ab:e0:b9:53:67:a6:c5:7c:41:4d:
95:5a:78:50:a8:ca:20:8c:b9:81:1d:d7:d8:21:11:
b0:f9:9f:47:18:af:5a:6a:5c:8d:a5:e2:9e:46:99:
90:24:04:70:fc:4e:40:15:a9:f0:b1:6a:38:42:d6:
91:b5:3c:2c:d1:99:90:f3:2d:e6:fc:55:c8:da:b6:
1a:94:a4:57:fd:22:3b:db:0e:a0:48:d1:fb:cd:64:
27:ad:71:16:cc:ea:b2:6e:12:7e:97:07:33:77:43:
92:3a:f3:7e:2a:64:55:5d:7b:4a:2d:f5:58:af:24:
ae:fe:26:3f:10:9f:5f:74:19:2e:55:1f:63:e8:81:
44:4a:ff:e8:df:f3:b0:22:77:bd:cc:84:b5:8a:aa:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:0C:82:1E:00:31:6D:2C:3E:1F:CF:56:EC:71:A2:8D:70:E4:09
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7f:f2:c4:06:24:ce:cb:f8:f7:f0:dc:64:22:17:88:1b:49:
b3:00:bd:8b:a9:38:69:0a:49:c4:35:7f:d1:e1:f8:4a:5d:22:
f7:06:d3:d0:d8:df:34:70:ff:b6:19:c1:83:a5:1e:f4:d8:ee:
02:48:1d:df:e2:31:14:02:35:b7:40:99:75:18:83:54:e4:c8:
62:ff:c7:c2:f0:cd:6d:e8:92:4c:c8:f1:82:d3:ca:d2:fe:c8:
82:3b:72:b4:b8:9e:3c:78:b6:24:d6:ae:eb:7e:aa:36:ee:5d:
31:9a:5b:37:f2:e8:f0:67:56:d4:55:5d:dd:4d:f3:38:75:fc:
bb:54:73:65:6b:56:85:28:b6:86:26:1e:1a:02:cd:c9:f8:c9:
0f:4e:99:be:6f:47:e3:66:f4:69:45:42:16:f7:dd:cb:95:2a:
49:29:7c:bc:2f:a5:d3:b9:00:54:5e:e3:24:08:34:74:d9:f9:
e3:0d:05:69:d7:43:fc:a7:34:bb:6f:5d:a3:00:6b:14:e7:83:
2a:da:7d:3a:34:ab:45:3b:c9:49:df:16:2a:36:fe:43:4e:55:
b8:56:d8:55:6c:34:70:eb:f7:ce:f8:e0:b9:43:d9:b6:91:0f:
5a:43:e2:84:45:45:14:17:6d:5d:62:4e:8f:49:52:88:84:60:
be:3d:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:55 2025 by rpki-client