Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
File: 33312e34302e3231332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: eN3ZGIGCwyPUITFzL15Ge5/FTrPkuAQDOxzT9n5Ulps=
Subject key identifier: 9D:1C:F6:26:9D:9E:DF:B2:A9:17:96:92:33:74:B8:A0:9D:B8:D9:9A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 336FA6B42C6D49678047808A3BF19DE088FEA358
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:05 +0000
ROA not before: Mon 27 Mar 2023 08:23:05 +0000
ROA not after: Mon 25 Mar 2024 08:28:05 +0000
asID: 0
IP address blocks: 31.40.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6f:a6:b4:2c:6d:49:67:80:47:80:8a:3b:f1:9d:e0:88:fe:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:05 2023 GMT
Not After : Mar 25 08:28:05 2024 GMT
Subject: CN=9D1CF6269D9EDFB2A91796923374B8A09DB8D99A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:16:11:6d:10:c4:77:a2:e4:ca:75:d0:f8:
cf:a4:96:d4:d4:0f:35:72:b7:6c:94:e6:21:28:c6:
c6:1e:24:95:0a:01:55:a9:03:56:04:08:fe:cc:a1:
51:ad:3c:84:45:68:c8:15:0b:3a:29:e4:a5:bf:b0:
b7:f0:2e:5a:3c:68:51:ff:b9:68:1c:2c:26:9b:96:
9f:67:87:6b:6a:23:8b:a4:d7:58:13:a8:c2:3d:20:
41:d1:90:35:eb:4f:77:d4:95:57:ea:1e:55:e1:5f:
9b:f6:cd:10:62:23:56:b9:3f:c6:6a:64:32:8b:f0:
3e:cc:6b:10:be:64:ce:bf:bb:f8:b1:e8:56:03:f3:
18:e8:71:28:11:9a:a0:8c:1a:a9:5a:53:e8:c3:f5:
96:97:55:04:27:dc:6d:ec:b7:db:b0:63:e3:ba:5f:
ad:29:62:bd:a2:09:e1:33:d2:d0:0c:d7:f5:8d:84:
df:db:f7:f0:dd:70:1c:a5:ba:0c:92:3c:a4:64:e9:
d4:f8:8a:d4:f9:91:f9:56:a3:e6:46:7c:ae:d9:a4:
15:aa:8e:d4:0c:87:18:4f:54:27:07:6a:41:36:80:
b9:35:af:41:6c:85:9f:68:54:c2:8b:61:d4:ac:0a:
16:1f:19:c2:a4:cf:b4:71:30:43:44:30:a8:85:a4:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:F6:26:9D:9E:DF:B2:A9:17:96:92:33:74:B8:A0:9D:B8:D9:9A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/33312e34302e3231332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7d:0c:3e:20:c9:6a:b3:9f:b8:b2:dd:d3:fd:55:c9:27:02:
8e:94:ee:0a:bf:bd:c5:db:e4:29:fc:3b:d9:8b:4f:d9:01:b6:
33:bc:0c:27:50:45:58:ba:8a:7c:5b:9b:8e:fd:68:11:9b:26:
22:6c:62:98:03:a7:97:c3:83:b3:89:71:05:de:d8:9d:c3:32:
ac:4b:ec:6c:f1:b7:f1:7a:61:6a:99:e7:1e:b7:10:dc:8b:87:
05:46:a9:b6:a3:f8:7c:44:7c:17:bc:f5:fd:1b:2b:06:04:f9:
17:0f:f2:a8:df:26:9d:86:eb:ea:b3:08:3d:49:5a:dc:60:58:
61:65:b7:d7:20:f5:84:75:01:09:41:5a:f3:14:4f:f7:b8:b8:
e7:6e:a5:54:9d:2a:02:57:2b:98:89:7b:a7:0f:be:b9:c9:a3:
5d:4c:c3:09:19:d4:db:0f:a7:15:15:84:ab:dc:56:3f:c8:7e:
25:05:89:3c:8a:e1:91:f0:f6:e8:2e:a1:1a:5b:3f:6d:26:31:
17:19:f2:72:d5:32:15:54:fb:4f:7b:b5:ce:e6:d9:cf:f8:2a:
f7:65:a5:01:2b:c5:30:ec:fc:4a:14:5d:3f:fd:49:5c:4d:d3:
49:15:9a:82:1c:b3:0d:e4:46:d0:b0:10:7c:30:8a:a1:3e:3e:
7c:54:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:46 2025 by rpki-client