Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e203432303535.roa
File: 33312e3231372e3235302e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: u0iq5IpHk1no33NTYqTHYFlcdBIlUHBWDuof5cU51uk=
Subject key identifier: 11:6C:D2:7E:B6:D6:44:81:6B:49:82:9B:D2:65:18:76:99:DC:8B:80
Certificate issuer: /CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
Certificate serial: 3936ACCF8F2AE0DB67967983B71A0A110812F2DA
Authority key identifier: D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e203432303535.roa
Signing time: Tue 03 Oct 2023 15:18:50 +0000
ROA not before: Tue 03 Oct 2023 15:13:50 +0000
ROA not after: Tue 01 Oct 2024 15:18:50 +0000
asID: 42055
IP address blocks: 31.217.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:36:ac:cf:8f:2a:e0:db:67:96:79:83:b7:1a:0a:11:08:12:f2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
Validity
Not Before: Oct 3 15:13:50 2023 GMT
Not After : Oct 1 15:18:50 2024 GMT
Subject: CN=116CD27EB6D644816B49829BD265187699DC8B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:df:f0:8c:93:11:d7:f5:d5:aa:66:40:da:
8a:a6:11:69:96:e8:7f:0e:ad:97:24:31:e5:38:f2:
c2:1d:34:28:9c:9e:96:99:b6:5e:40:3b:31:61:7a:
88:00:32:46:ea:77:47:34:21:f6:d5:36:88:ad:1d:
21:eb:87:d2:75:b9:9e:3a:68:87:70:de:86:ec:93:
77:38:7c:31:45:db:86:dd:a8:65:17:cc:e7:6b:a6:
67:d3:88:43:76:4d:6a:19:b1:1f:52:56:d9:41:b3:
e8:eb:ec:44:a6:3d:ba:e9:a5:a7:d6:9b:0c:40:11:
ac:05:c4:72:04:a7:6d:c1:a6:28:09:4f:71:da:86:
ad:58:54:43:87:8e:ed:79:14:dc:09:4b:e5:e8:3a:
ea:12:f0:d5:30:89:c5:6e:a1:73:7e:9e:44:43:d0:
3e:c7:81:17:99:a3:3a:74:9e:a1:0f:01:67:d3:7a:
18:a3:c0:9b:b6:50:92:93:44:e7:e3:e7:4e:a2:e3:
f3:eb:9d:50:c3:d1:e2:e0:43:36:a0:33:06:69:e5:
0f:9e:6d:9e:ad:68:d9:23:8b:31:6c:a0:9c:cc:ff:
f2:28:70:f4:b0:05:55:84:da:5d:9b:e7:e2:61:15:
79:8a:26:0e:2f:61:69:c6:72:35:7d:93:18:4a:ac:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:D2:7E:B6:D6:44:81:6B:49:82:9B:D2:65:18:76:99:DC:8B:80
X509v3 Authority Key Identifier:
keyid:D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:43:24:25:be:1a:09:c8:c0:f9:40:70:b8:96:61:2f:47:b0:
40:12:86:eb:cc:5b:30:14:28:c6:ec:a3:f2:8d:f5:45:84:bf:
9a:73:d6:b0:21:73:c0:7e:e6:cd:41:d9:83:05:f6:38:25:ec:
b2:4a:aa:db:74:67:61:45:fe:39:5d:e4:78:26:75:5b:fa:86:
6b:28:08:67:93:bf:bc:e3:be:c7:b3:a9:96:47:bd:34:6b:36:
4f:aa:6f:2b:5c:a7:13:ee:ee:3f:a5:25:e1:b3:2a:00:c4:ed:
58:f1:1b:77:2f:89:9d:c3:54:6f:18:3a:c7:28:09:9f:03:ef:
ef:87:90:82:48:fd:1a:8a:73:c5:e9:b8:4b:a7:c5:4d:22:af:
a9:2e:77:68:db:c0:71:06:b6:2a:43:78:0c:25:13:68:6a:48:
7c:83:ed:bb:b1:a1:35:69:03:49:16:1a:7e:2f:53:e8:a1:85:
ce:f1:12:da:bf:12:4a:52:7a:de:07:19:eb:65:d8:33:d6:2b:
52:c3:cd:ff:38:ab:f3:15:58:94:03:da:87:75:97:90:87:e8:
02:3f:a0:9c:bb:43:82:46:34:1d:44:a0:ba:fd:0d:cd:c6:98:
f0:89:b7:10:9b:ef:f9:9e:0f:af:0e:89:f4:a6:73:e0:c0:0c:
89:83:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org