Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e203136323736.roa
File: 33312e32342e3235332e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: lqqtBBWw7H+BIaFzlu+HUCeNDetSUo6AnfJBO7VI8lA=
Subject key identifier: 7F:37:78:BB:F8:42:D2:19:09:D5:6E:6C:9C:3F:50:99:C6:9A:99:DA
Certificate issuer: /CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Certificate serial: 3497115D979E9C815445762A76A72C3257BD5E1B
Authority key identifier: 4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e203136323736.roa
Signing time: Tue 11 Jun 2024 19:49:40 +0000
ROA not before: Tue 11 Jun 2024 19:44:40 +0000
ROA not after: Tue 10 Jun 2025 19:49:40 +0000
asID: 16276
IP address blocks: 31.24.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:11:5d:97:9e:9c:81:54:45:76:2a:76:a7:2c:32:57:bd:5e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dd60da35a0a9fba440fd44a61e5d27d7dceb1
Validity
Not Before: Jun 11 19:44:40 2024 GMT
Not After : Jun 10 19:49:40 2025 GMT
Subject: CN=7F3778BBF842D21909D56E6C9C3F5099C69A99DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:39:16:3b:c4:36:0f:6e:67:61:87:71:31:
cd:e7:b5:51:62:38:b1:18:85:38:bb:ac:41:7e:b7:
bd:07:bb:8c:51:a9:36:3f:95:bf:dd:bb:d7:11:29:
7b:3b:f8:de:fe:84:5c:a0:56:64:87:98:76:47:80:
56:07:4c:13:7f:27:6a:45:ee:fd:eb:88:f4:e7:d1:
57:14:55:c9:44:86:a3:f2:2f:49:a5:43:94:94:88:
cc:b2:9c:50:58:2a:5a:11:3f:46:fb:cf:f4:9d:6a:
a1:03:27:39:8e:3c:f8:87:3d:d7:f6:06:01:10:21:
d3:68:33:79:dc:f0:20:9d:7d:54:87:f3:2b:f0:df:
65:89:b6:47:69:d5:96:3b:8f:db:d9:fd:97:3c:ac:
2c:fd:7e:72:fa:41:1b:86:b1:91:51:eb:eb:a7:15:
12:af:08:07:81:12:a0:34:31:d8:02:64:8f:12:e6:
1d:b3:93:2a:92:54:fe:84:40:87:fc:3c:69:93:1a:
bd:b5:e8:48:33:91:92:ed:85:2b:90:b7:69:b3:ce:
8f:ff:e8:2b:75:fe:9b:9f:c1:f2:0e:02:bd:2e:74:
9b:42:4d:55:ff:0d:51:b4:5b:09:d3:5e:b1:b2:8c:
4a:95:de:a9:64:22:2f:68:e8:c3:5e:e2:cb:76:4f:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:78:BB:F8:42:D2:19:09:D5:6E:6C:9C:3F:50:99:C6:9A:99:DA
X509v3 Authority Key Identifier:
keyid:4F:4D:D6:0D:A3:5A:0A:9F:BA:44:0F:D4:4A:61:E5:D2:7D:7D:CE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/4F4DD60DA35A0A9FBA440FD44A61E5D27D7DCEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03WDaNaCp-6RA_USmHl0n19zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83711608-b3d2-469e-9ab5-68b1cbf9be25/0/33312e32342e3235332e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.253.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1e:b2:eb:e3:ee:ca:80:3a:cb:67:43:ca:c6:da:02:d3:12:
77:0e:1c:88:54:67:69:b4:6d:47:b9:88:03:93:3d:fe:3b:7c:
c9:6a:c1:e7:15:19:ef:1b:6b:3f:6c:b1:85:c6:35:ae:19:91:
03:c5:35:cb:37:c1:8e:e5:30:c2:1e:44:7c:ad:d5:1e:fe:4e:
4b:db:72:fa:32:be:9c:05:3a:76:92:a7:33:c7:6b:3b:f8:bb:
f2:a5:03:fb:b8:bf:3e:8d:1a:b4:9a:2e:6c:31:7a:e7:20:d6:
27:03:53:c2:5a:9b:6a:d2:31:55:f6:27:58:32:69:bc:7a:0a:
59:fe:c3:27:f9:49:3d:ff:af:35:3d:e1:20:e7:b6:b9:2b:e8:
5a:bc:b8:fa:b1:02:e8:55:a3:7c:59:d2:90:6c:0d:c3:cb:60:
8d:0f:66:b1:8a:1f:23:cc:6b:30:7d:15:43:b3:1b:e2:c7:83:
51:b4:90:e4:47:7d:f5:3f:9b:9f:a8:f0:4b:35:1b:e5:3d:00:
b2:d0:10:8a:85:49:75:5e:99:89:6d:15:f8:64:f9:83:3a:fa:
09:c0:04:7a:60:88:52:17:f8:89:18:61:b6:7f:81:cf:8a:2b:
27:ea:b9:da:6b:51:87:95:3d:fd:42:f3:9d:e2:7f:ff:1c:bc:
3f:eb:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 16:02:47 2024 by rpki-client on console-fra.rpki-client.org