Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
File: 33312e362e35372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cVUmNSJ9klCQt+tT5XHSp8Xgzqa2WDrxcAn3VuIBqY4=
Subject key identifier: DA:AD:C3:2E:EB:E4:5D:58:08:84:2E:93:E5:C0:D6:54:47:EF:E5:84
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 06300F00D248DF00FB1B4A43C542CDBD705FDC4D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
Signing time: Sat 15 Mar 2025 00:05:01 +0000
ROA not before: Sat 15 Mar 2025 00:00:01 +0000
ROA not after: Sat 14 Mar 2026 00:05:01 +0000
asID: 834
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:30:0f:00:d2:48:df:00:fb:1b:4a:43:c5:42:cd:bd:70:5f:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 15 00:00:01 2025 GMT
Not After : Mar 14 00:05:01 2026 GMT
Subject: CN=DAADC32EEBE45D5808842E93E5C0D65447EFE584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:4d:91:56:3c:d4:ff:52:99:dc:46:3d:2e:
ce:65:76:ec:b4:70:97:a9:54:88:fa:db:c2:dc:5e:
bf:b5:29:2c:f3:ec:98:ec:a9:59:64:41:f4:bd:e2:
20:b9:a5:17:94:66:56:6b:d8:43:a8:78:1c:0f:84:
df:09:c6:b1:a1:74:5e:c4:3f:d8:d1:e9:76:e6:46:
83:1f:ac:f3:54:07:4b:a3:8a:2f:72:e6:e9:de:ba:
de:ab:8f:ef:e3:33:38:22:4f:cb:ee:4b:56:b0:84:
43:42:a5:ba:54:c6:fc:ae:75:c7:f9:6f:81:a0:07:
29:8a:97:64:94:5a:9b:b9:dd:bc:a8:79:10:a3:7a:
af:ee:65:0f:f4:fc:c4:46:5f:a6:1c:5b:c1:28:c4:
af:0a:e0:47:1a:7c:e0:ed:c3:cb:b8:e2:cf:7a:26:
d5:ea:e9:e2:80:19:39:d3:64:53:bc:c8:0d:96:f1:
a5:a2:1a:dc:1f:42:89:f7:da:1d:67:a4:32:da:7d:
53:7c:14:21:9d:9e:3a:22:98:18:90:94:a8:65:5d:
60:af:26:8f:05:4a:39:61:b3:dc:f4:54:f6:c6:12:
d9:da:74:1d:ad:a2:2f:40:da:c8:7c:d9:6e:d1:23:
1a:81:a9:ab:00:31:02:f7:f9:b0:09:dc:44:75:f0:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:C3:2E:EB:E4:5D:58:08:84:2E:93:E5:C0:D6:54:47:EF:E5:84
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
54:71:78:c0:1b:53:fa:5c:fc:69:70:cb:9c:ee:12:a0:19:9b:
f8:0f:d7:78:9c:14:c0:29:6e:f9:5e:a7:78:06:24:7e:48:ee:
06:dd:44:f1:b6:29:34:83:69:36:e0:f4:b0:f5:85:70:1c:89:
f1:fb:6e:e0:58:cb:da:b2:cf:79:94:57:75:0b:0d:e1:79:89:
a1:9f:81:28:ce:c2:8b:a6:c9:da:a6:69:4c:50:d1:ee:c7:06:
4e:c1:23:09:51:9c:82:be:ef:ae:84:36:63:95:a0:9f:7c:f2:
fd:15:95:f9:2f:03:55:79:b8:9c:87:23:95:e0:eb:0d:32:24:
9d:9b:62:2c:23:e9:ff:c9:d4:ea:2d:1b:f3:ad:98:11:6c:69:
10:fa:dd:30:f5:4f:b6:48:7d:b3:6e:08:15:1a:f1:45:76:e3:
75:38:cd:97:38:24:65:93:a8:0f:e0:a8:ed:54:c4:44:21:25:
aa:d2:05:e3:50:4c:4c:eb:8c:58:59:db:d8:06:19:72:52:45:
97:15:a6:9d:f8:b9:26:44:24:ca:85:84:dc:91:f3:e6:b0:58:
fc:5a:50:d6:ab:5c:ab:c4:a0:22:11:63:10:62:1d:3b:a4:00:
99:e2:36:bf:e5:ad:ff:dd:3e:29:50:f2:2a:1d:53:75:55:6b:
34:86:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:09:40 2025 by rpki-client