Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36352e302f32342d3234203d3e20323031333431.roa
File: 33312e3138372e36352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: yPhRq9HQ/HpnMebVJfvYfLJ8jU/VBNXha9wsWqvZFnk=
Subject key identifier: 2A:13:31:69:33:01:BC:C6:95:24:A5:18:25:91:D3:8A:30:40:2F:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D96CB9422877BE6CEEB1DAAFE41C26996E1B68A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36352e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Jan 2025 09:44:57 +0000
ROA not before: Mon 27 Jan 2025 09:39:57 +0000
ROA not after: Mon 26 Jan 2026 09:44:57 +0000
asID: 201341
IP address blocks: 31.187.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:96:cb:94:22:87:7b:e6:ce:eb:1d:aa:fe:41:c2:69:96:e1:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:57 2025 GMT
Not After : Jan 26 09:44:57 2026 GMT
Subject: CN=2A1331693301BCC69524A5182591D38A30402F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:c2:c9:6f:10:9a:29:c5:aa:97:c1:26:5e:
73:a9:21:ad:bb:30:41:ac:8d:04:3c:7d:02:57:54:
92:4d:2d:2b:13:80:6f:3c:15:cf:46:12:ab:e3:cb:
67:ea:e1:22:15:8f:07:52:82:b7:c8:4c:92:2f:ec:
cc:5b:8a:fa:70:1d:2c:32:37:00:88:da:d4:2b:cd:
a3:9b:26:cb:e0:e1:46:f6:79:92:bf:cd:e6:ad:a5:
11:5d:48:9e:60:7c:f6:9b:0d:6a:b8:50:ae:f7:ff:
93:a8:4d:4d:48:d5:f8:d7:a7:a7:2b:f6:5b:43:e4:
78:b5:67:95:6d:38:bc:b8:39:76:ea:85:8a:01:4c:
d1:a0:fa:d6:ae:29:b5:97:0e:b7:45:5c:6b:12:14:
8b:1a:21:22:bb:07:e8:b4:68:4d:f7:3a:20:7d:25:
ea:03:18:df:ab:62:d0:ec:7b:0c:c2:ec:d3:a6:4a:
bc:ef:5e:e7:d6:44:30:32:43:e7:d7:e4:50:9d:6e:
3b:59:2d:3a:a4:9b:03:ef:57:12:c8:b3:2f:15:d0:
73:0e:e0:23:a8:a8:ca:77:97:a5:43:22:51:f4:2f:
ba:43:ba:95:67:4e:8b:48:c6:f5:58:6d:7c:c6:d7:
72:e7:c2:4c:64:a6:50:81:77:8d:75:d5:34:4e:00:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:13:31:69:33:01:BC:C6:95:24:A5:18:25:91:D3:8A:30:40:2F:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:74:86:2a:48:56:b2:8b:24:d9:a1:d3:fb:0e:71:76:0d:00:
28:d9:b9:8a:4d:7d:dc:4d:5c:17:c5:94:b0:79:35:7c:0f:05:
6c:3e:b3:dc:94:3c:d0:9f:22:f5:81:8e:e4:3e:4d:3f:b2:e7:
54:48:90:4b:53:80:ef:18:e5:c8:c9:8d:7b:6a:ea:62:c3:fd:
49:a0:1b:ea:95:ab:5d:f7:1b:3f:93:1a:0c:19:bc:5d:c9:37:
92:13:20:15:12:c9:97:28:27:d0:30:33:3f:60:ca:21:d4:a0:
8d:9e:65:02:66:90:52:bf:0f:f5:8a:d1:40:e9:e5:93:ee:b1:
d2:57:a2:1c:04:6d:f3:82:b2:e2:f1:5b:3a:72:a0:5b:9c:e9:
b4:a2:55:60:36:c6:b7:04:1b:01:ac:7f:4e:fc:88:f4:7c:bb:
50:1b:be:57:24:3c:1c:f6:83:b5:e6:72:2e:72:d1:19:74:ca:
a6:71:50:9e:b7:82:1e:ec:d6:72:d9:79:dc:b9:7d:04:33:eb:
35:95:8c:a7:d9:f9:fb:95:71:ef:6b:1e:54:2f:e7:f0:f6:5d:
b9:1e:ae:c3:d6:2c:8a:55:8f:af:3c:fd:be:ca:73:e8:c8:f4:
91:83:d4:2f:0f:75:33:30:53:af:97:ea:5d:08:4c:6f:a7:8e:
b6:34:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:09 2025 by rpki-client