Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
File: 33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 5uuO6zWPaY4Ee18cVuXEugAXxR+J43eKU6BYJw2gjtI=
Subject key identifier: 8F:74:CC:F6:08:A0:D4:FC:97:1C:07:2D:04:CA:EE:75:74:89:F4:E7
Certificate issuer: /CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
Certificate serial: 60664425BD1DFE6743745A1C81D78DA5F3B91884
Authority key identifier: AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:49 +0000
ROA not before: Mon 27 Mar 2023 08:22:49 +0000
ROA not after: Mon 25 Mar 2024 08:27:49 +0000
asID: 201341
IP address blocks: 31.222.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:66:44:25:bd:1d:fe:67:43:74:5a:1c:81:d7:8d:a5:f3:b9:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd0eee5a7b094b5866aa5da844ff80d24ceffc
Validity
Not Before: Mar 27 08:22:49 2023 GMT
Not After : Mar 25 08:27:49 2024 GMT
Subject: CN=8F74CCF608A0D4FC971C072D04CAEE757489F4E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:34:32:da:32:90:82:4f:e6:24:c2:27:47:
40:be:1d:62:ee:1c:69:0b:bc:08:66:a0:df:50:82:
65:10:f6:9f:e8:28:9c:30:53:f4:cb:6d:26:eb:dd:
9e:77:d8:76:59:46:ff:0e:a4:64:d3:64:07:c5:48:
eb:dd:1d:60:36:c1:06:54:ef:0e:4d:b6:0a:19:66:
6a:ae:0c:30:fc:f6:a5:a7:87:14:25:d5:5d:de:68:
33:50:c8:39:e8:7f:3a:35:de:a4:99:1f:1b:cb:0b:
1a:45:c7:c4:c4:ce:3d:f1:4c:22:a7:9f:42:f0:0d:
8a:a6:00:21:5a:15:f2:bc:49:16:55:ce:f0:20:2d:
6a:ab:c8:b2:c9:37:f2:c0:46:d8:90:82:41:0c:01:
b7:23:76:37:cc:f7:72:eb:96:80:7f:1c:a9:27:d1:
6c:a9:c4:5e:62:c2:5d:47:30:ed:b5:5c:66:31:6a:
af:1b:e0:d4:35:cd:fc:82:dd:b3:56:b0:b0:8e:18:
a4:8d:c5:e9:28:d0:f8:d3:18:7e:94:bd:24:21:5a:
fe:d3:98:98:84:86:93:8b:6d:1a:78:b7:1e:bd:0a:
5c:0c:8d:13:f6:8e:c1:5f:51:eb:6e:f9:a1:a9:ed:
fc:f2:05:47:d3:84:b2:e5:e3:d9:35:64:9b:03:3e:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:CC:F6:08:A0:D4:FC:97:1C:07:2D:04:CA:EE:75:74:89:F4:E7
X509v3 Authority Key Identifier:
keyid:AD:BD:0E:EE:5A:7B:09:4B:58:66:AA:5D:A8:44:FF:80:D2:4C:EF:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/ADBD0EEE5A7B094B5866AA5DA844FF80D24CEFFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb0O7lp7CUtYZqpdqET_gNJM7_w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/212/33312e3232322e3233312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.231.0/24
Signature Algorithm: sha256WithRSAEncryption
61:84:f5:c2:e1:97:04:11:f4:34:1f:a8:b2:ae:47:26:3d:13:
d4:68:99:69:58:0f:f5:62:df:89:d7:3b:a3:0c:82:69:c8:08:
e7:72:0d:2b:bc:af:f2:34:ad:cf:2f:04:0e:d1:c8:31:29:e5:
a9:f2:51:c6:d4:6f:bc:fb:f0:a0:66:4f:1e:11:36:7c:3a:36:
89:c6:e9:bc:12:38:2b:67:47:f0:a9:b2:9b:25:44:5f:d7:df:
5a:4f:13:04:27:b8:1f:d6:1e:15:68:ff:0d:26:ea:66:61:7d:
04:11:7a:7b:c7:25:a3:f3:e3:20:e4:eb:56:82:5a:b0:c6:c2:
b1:b3:a5:a7:51:ec:80:51:69:8a:8b:31:3a:41:06:8b:e1:54:
f0:4c:36:e8:b3:8d:05:34:6d:2e:aa:cd:ab:c2:34:10:4b:55:
52:42:41:76:d4:8e:30:b3:e3:9a:f1:1c:3c:46:8a:0d:ac:fe:
11:50:64:5e:da:a3:ff:ae:56:8e:1e:4d:30:ce:59:a1:13:a3:
10:57:b6:d0:0c:45:df:b0:99:89:f8:9b:c2:0e:ae:fb:ce:ad:
68:e7:d3:70:6f:4e:6a:4b:76:9e:05:c8:5f:f8:c3:6e:87:9c:
31:1c:19:55:56:c8:67:40:ac:34:fc:5a:9a:26:52:cb:85:91:
31:95:9c:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:04 2025 by rpki-client