Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e2037303138.roa
File: 33312e3231372e3235302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: Qlp1I3a0S/tGKeNdQY8upXdyVDTmzYkTbhZM7V7AsAk=
Subject key identifier: 8A:CB:2D:77:8B:BF:A3:FF:78:BF:93:1F:A5:F0:6E:C9:08:12:A0:09
Certificate issuer: /CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
Certificate serial: 193C5EC40AC6780608C4306A5A95E739B05E8B47
Authority key identifier: D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e2037303138.roa
Signing time: Mon 03 Jul 2023 11:55:13 +0000
ROA not before: Mon 03 Jul 2023 11:50:13 +0000
ROA not after: Mon 01 Jul 2024 11:55:13 +0000
asID: 7018
IP address blocks: 31.217.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3c:5e:c4:0a:c6:78:06:08:c4:30:6a:5a:95:e7:39:b0:5e:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70c18f610931a5e0df5cad1d69b7e6a20363bff
Validity
Not Before: Jul 3 11:50:13 2023 GMT
Not After : Jul 1 11:55:13 2024 GMT
Subject: CN=8ACB2D778BBFA3FF78BF931FA5F06EC90812A009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:b5:8c:9f:a0:e0:fd:1b:38:41:c7:60:0d:
b1:94:ef:30:e2:c0:1c:04:fb:39:14:60:f7:b1:bb:
85:26:f0:06:29:53:16:68:c0:b1:af:08:6a:03:f7:
95:ce:76:cd:cd:7c:fc:c4:54:11:d2:13:0d:6f:dd:
63:52:6e:28:d9:06:22:d7:04:df:3a:0a:1b:e9:5b:
8e:42:04:df:28:f4:4f:a9:58:fb:af:72:b0:de:50:
22:73:67:b4:95:57:8a:34:ae:3f:3a:1d:82:f0:62:
f9:60:10:d4:58:11:ae:23:9f:3c:f7:ae:19:7d:52:
42:22:2b:65:4e:86:2a:7e:c9:59:41:03:cf:65:63:
c3:91:d6:d7:52:93:77:8c:ad:14:37:0a:a3:02:67:
9f:fd:d0:ec:f3:a8:2a:88:c1:2a:d2:92:26:f9:4a:
2f:f8:4f:ea:7f:84:13:e4:22:09:9b:4b:bc:55:0e:
ad:e5:71:a8:f1:a7:89:42:5c:43:83:57:94:b2:15:
b4:95:0f:d5:00:0d:54:64:7d:c9:d3:28:f0:e2:fa:
ef:bc:38:c8:b8:39:ea:de:c0:15:81:06:3a:03:c3:
94:32:43:38:58:a5:3f:14:98:3b:30:27:ee:0c:90:
49:d0:8c:47:cb:73:49:52:77:71:9b:61:2b:99:bc:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:2D:77:8B:BF:A3:FF:78:BF:93:1F:A5:F0:6E:C9:08:12:A0:09
X509v3 Authority Key Identifier:
keyid:D7:0C:18:F6:10:93:1A:5E:0D:F5:CA:D1:D6:9B:7E:6A:20:36:3B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/D70C18F610931A5E0DF5CAD1D69B7E6A20363BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wwY9hCTGl4N9crR1pt-aiA2O_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd140e86-c26b-4533-9d49-29fc424f0d6c/0/33312e3231372e3235302e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.250.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4d:5d:d6:68:0e:e2:5b:70:6e:7d:20:12:50:1f:49:ba:7b:
17:81:72:62:59:89:d9:13:40:08:b6:cc:bd:22:95:ff:d4:bc:
55:43:d5:46:27:78:b0:40:a3:53:dc:f8:ab:93:8f:b3:25:03:
c1:f7:ff:33:39:df:09:94:26:7f:33:3c:e4:7d:c6:e3:84:2c:
7f:85:cd:0b:fb:a9:20:9b:ca:43:3c:89:e4:03:f2:86:40:3b:
ea:4e:b8:d5:20:a8:5f:e2:18:fb:c0:bf:0c:f3:36:f8:83:c1:
bc:25:15:2a:e2:3d:94:66:2a:98:78:85:68:f0:83:b6:3d:b8:
cb:f4:c0:fe:8f:d2:28:51:84:61:26:64:bc:33:e1:c0:ae:2e:
e9:bf:43:02:72:54:bb:05:ad:85:41:1d:a6:d3:7f:fe:34:4a:
7e:86:2a:f0:6c:ba:35:30:58:70:da:ff:cc:c6:7f:73:2b:7d:
77:50:6e:b1:18:45:04:4e:e8:ee:7f:9f:78:5b:51:0d:60:fc:
91:06:07:08:24:15:82:13:12:5d:ba:43:54:e4:e0:81:2a:1b:
cf:59:32:cd:2b:11:85:65:50:55:c7:f9:c4:1f:eb:17:ec:62:
15:ef:42:ad:c6:bc:b2:c4:a1:be:ba:1b:9f:7b:b1:5c:27:9a:
42:16:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:48 2025 by rpki-client