Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35392e302f32342d3234203d3e20383334.roa
File: 33312e362e35392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: P5ezF9O8uY9rbAqebS0QjgQp38FTtAcfntflpFxf0Nk=
Subject key identifier: 25:E4:7C:CE:C1:15:23:DC:24:53:F6:5A:92:9A:BC:CF:DC:FC:2E:8C
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 681F28ED8FA6B59607DD45B1985F38B5566D3D29
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35392e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:47 +0000
ROA not before: Wed 22 Mar 2023 15:24:47 +0000
ROA not after: Wed 20 Mar 2024 15:29:47 +0000
asID: 834
IP address blocks: 31.6.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1f:28:ed:8f:a6:b5:96:07:dd:45:b1:98:5f:38:b5:56:6d:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:47 2023 GMT
Not After : Mar 20 15:29:47 2024 GMT
Subject: CN=25E47CCEC11523DC2453F65A929ABCCFDCFC2E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:0c:66:7d:d5:77:b1:1b:1d:92:ac:d3:f3:
da:c7:fd:b8:9f:d0:2e:84:dc:81:c8:84:68:d4:99:
d8:04:30:d2:dd:ea:eb:7e:85:1d:86:82:33:cc:6d:
da:8e:2c:77:41:fd:16:f3:7a:4f:25:d8:0b:2b:15:
34:3f:43:83:ad:f7:9d:df:eb:03:81:25:06:12:09:
56:c0:da:40:b4:f5:a1:9f:0d:1e:c5:40:8b:94:32:
e1:7b:1c:78:ef:14:41:09:3d:41:59:b8:91:32:47:
09:88:7a:48:69:cf:46:f0:b8:e8:4c:b5:89:d1:9c:
44:e9:45:5a:fa:4f:a1:bb:72:a3:21:13:08:0a:1b:
a3:05:2c:d8:fd:4e:a7:be:59:2f:3d:98:bb:1f:f5:
fb:93:e7:a0:b1:f4:29:c5:93:8c:19:46:f0:88:cc:
0d:d3:5e:09:5e:79:26:eb:cc:98:df:bb:61:d3:ca:
b0:8b:39:2e:ca:50:6e:b9:62:98:0a:6c:ba:13:74:
88:9a:02:af:50:79:c4:d5:60:f6:35:f5:61:70:90:
a9:c4:d8:37:6d:fc:ed:f9:e4:e6:e1:3e:5b:d4:ad:
d0:3e:b1:e8:ed:5b:1e:75:bb:66:f2:5c:c3:92:36:
08:5d:38:12:b8:3c:de:95:19:0d:ed:67:09:33:47:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:7C:CE:C1:15:23:DC:24:53:F6:5A:92:9A:BC:CF:DC:FC:2E:8C
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ca:58:cb:41:bc:39:8b:f4:e4:83:bc:18:aa:39:d9:3e:c0:
2a:45:6a:b1:5a:c4:e6:27:38:31:e9:a0:d1:03:4b:e0:b2:5b:
f2:3d:7b:5c:7f:3e:3b:b2:d1:68:60:ab:ca:65:cc:62:9c:dd:
92:0d:18:1c:13:b2:52:26:20:ed:a1:f6:7b:0b:f8:a9:84:d0:
58:a2:92:41:7a:ee:10:95:c8:59:6f:ef:62:d1:c3:7f:f0:81:
55:f1:a2:fc:36:5b:22:be:a6:21:1b:90:0e:92:f9:d9:32:17:
9b:df:ec:63:91:73:3a:61:34:85:9d:ae:77:9a:6b:48:53:99:
01:1d:65:2b:e2:b9:7b:da:1f:43:ad:ea:cd:61:18:3e:a6:32:
cc:1b:35:fc:0b:9e:9c:5e:b3:cd:fb:d4:36:cf:6e:0e:10:ea:
cc:de:7d:f1:86:07:b1:41:e9:02:61:1f:91:53:93:0f:8d:9a:
b1:77:fe:ff:c2:5f:f7:df:b7:1a:a5:cc:06:73:4d:5c:3e:ee:
f9:02:3c:9f:10:5d:78:83:69:73:51:97:ba:12:af:cf:92:67:
f3:68:9e:05:b2:50:65:af:b3:cc:e4:42:43:8f:85:29:89:d6:
b7:06:81:bc:2e:0f:66:cf:a7:77:ea:83:ec:93:4f:95:b1:ef:
38:bc:b5:62
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUaB8o7Y+mtZYH3UWxmF84tVZtPSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDdaFw0yNDAzMjAxNTI5NDdaMDMxMTAvBgNV
BAMTKDI1RTQ3Q0NFQzExNTIzREMyNDUzRjY1QTkyOUFCQ0NGRENGQzJFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExQxmfdV3sRsdkqzT89rH/bif
0C6E3IHIhGjUmdgEMNLd6ut+hR2GgjPMbdqOLHdB/Rbzek8l2AsrFTQ/Q4Ot953f
6wOBJQYSCVbA2kC09aGfDR7FQIuUMuF7HHjvFEEJPUFZuJEyRwmIekhpz0bwuOhM
tYnRnETpRVr6T6G7cqMhEwgKG6MFLNj9Tqe+WS89mLsf9fuT56Cx9CnFk4wZRvCI
zA3TXgleeSbrzJjfu2HTyrCLOS7KUG65YpgKbLoTdIiaAq9QecTVYPY19WFwkKnE
2Ddt/O355ObhPlvUrdA+sejtWx51u2byXMOSNghdOBK4PN6VGQ3tZwkzR/eJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUJeR8zsEVI9wkU/Zakpq8z9z8LowwHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTM1MzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjswDQYJKoZI
hvcNAQELBQADggEBAFTKWMtBvDmL9OSDvBiqOdk+wCpFarFaxOYnODHpoNEDS+Cy
W/I9e1x/Pjuy0Whgq8plzGKc3ZINGBwTslImIO2h9nsL+KmE0FiikkF67hCVyFlv
72LRw3/wgVXxovw2WyK+piEbkA6S+dkyF5vf7GORczphNIWdrneaa0hTmQEdZSvi
uXvaH0Ot6s1hGD6mMswbNfwLnpxes8371DbPbg4Q6szeffGGB7FB6QJhH5FTkw+N
mrF3/v/CX/fftxqlzAZzTVw+7vkCPJ8QXXiDaXNRl7oSr8+SZ/NongWyUGWvs8zk
QkOPhSmJ1rcGgbwuD2bPp3fqg+yTT5Wx7zi8tWI=
-----END CERTIFICATE-----
Generated at Tue Feb 18 06:49:42 2025 by rpki-client