Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
File: 33312e3138372e37362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: DG1TdPgV0hzQcMZIiq8vpvmjQqSxH266ZqiSe+RMG3w=
Subject key identifier: 43:DF:74:5A:B2:1E:D9:53:09:32:43:9F:80:2B:3F:DC:B7:60:8B:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74913403C3D0C37B3A8AD1D63B7952A994C365B5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:02 +0000
ROA not before: Mon 27 Jan 2025 09:40:02 +0000
ROA not after: Mon 26 Jan 2026 09:45:02 +0000
asID: 47583
IP address blocks: 31.187.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:91:34:03:c3:d0:c3:7b:3a:8a:d1:d6:3b:79:52:a9:94:c3:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:02 2025 GMT
Not After : Jan 26 09:45:02 2026 GMT
Subject: CN=43DF745AB21ED9530932439F802B3FDCB7608BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ea:1a:dc:7f:8c:f0:11:2a:43:39:9c:44:
fd:63:62:4b:7c:63:26:1a:64:0b:03:a9:29:4c:bc:
cc:b6:a4:88:c6:8b:01:37:29:b1:8b:a0:4d:4f:0e:
9a:d6:6a:7b:43:89:2a:3a:29:a1:d8:50:e7:c9:c9:
39:8b:45:22:bf:e0:fe:7b:fd:54:b1:53:0f:0b:bc:
43:7e:d2:43:ef:aa:b6:75:ac:1e:57:4a:89:b9:e3:
e1:a4:ea:8e:56:4a:23:e0:ec:53:6c:65:5e:04:34:
b3:10:37:f2:6a:ca:c5:06:62:31:34:0b:81:d6:6c:
7e:da:01:1f:ba:91:89:57:dc:58:5a:95:ef:3c:fe:
f5:a8:7b:2c:a1:52:74:6c:3a:df:8a:d9:a5:de:35:
6f:84:43:34:f3:9b:b4:97:70:87:e0:80:43:64:da:
b9:4f:c5:12:22:b2:a9:50:d3:8a:07:75:77:43:17:
4b:78:74:63:ac:fc:15:73:21:9e:0f:1a:fe:5b:3a:
44:73:33:27:ec:74:01:fd:bc:cc:e3:3d:a4:43:b1:
70:59:c8:9f:3e:8f:86:3c:9a:56:9f:58:4a:66:dc:
84:9c:df:32:b8:58:03:a6:44:1f:51:a3:31:69:06:
c2:89:d2:33:33:37:ce:8d:1a:3d:2e:e2:e2:00:dd:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:74:5A:B2:1E:D9:53:09:32:43:9F:80:2B:3F:DC:B7:60:8B:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e3:9a:e2:ca:74:34:7d:fb:5b:cd:fe:8a:ee:02:2f:f2:d5:
78:b4:32:2c:57:14:50:2c:85:16:da:e4:9c:bd:a4:c0:c7:2a:
b0:76:02:37:52:4f:b7:28:ac:f4:80:f1:ec:24:39:c3:8a:4b:
7a:88:d8:8a:1d:38:1b:3e:78:a0:3d:9a:5e:3b:c5:d3:28:02:
1f:4f:fe:e4:13:c1:76:4e:a3:bd:c8:42:15:8b:3c:4d:1c:8b:
a8:c5:1b:f3:33:bd:b3:41:b5:5f:6f:7a:47:62:e7:74:f9:c0:
34:8c:26:56:33:ae:8a:58:6d:5d:77:c6:ad:98:87:82:2d:e0:
82:e5:5d:ef:c5:11:63:38:6d:65:85:4f:1d:e9:cc:f7:b0:d4:
f5:31:f0:48:7a:a4:91:53:9c:8f:b6:b1:3d:d1:68:2c:65:ed:
cc:34:a7:45:47:93:d4:c9:8f:cb:b9:f8:99:18:3b:44:80:cb:
9b:ce:c9:13:ad:cb:4d:03:a5:9b:de:9c:e1:fe:16:46:d1:37:
d1:68:5f:a3:8a:40:b8:42:ce:18:7a:8c:74:4e:e5:16:c7:15:
ae:f9:13:5f:47:e2:90:4e:2b:ec:9b:b3:3e:db:5a:99:32:93:
c8:87:3e:a9:7b:51:36:11:ff:d2:78:d1:76:94:b1:ec:c6:48:
e5:7b:2c:0a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdJE0A8PQw3s6itHWO3lSqZTDZbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDJaFw0yNjAxMjYwOTQ1MDJaMDMxMTAvBgNV
BAMTKDQzREY3NDVBQjIxRUQ5NTMwOTMyNDM5RjgwMkIzRkRDQjc2MDhCRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFOoa3H+M8BEqQzmcRP1jYkt8
YyYaZAsDqSlMvMy2pIjGiwE3KbGLoE1PDprWantDiSo6KaHYUOfJyTmLRSK/4P57
/VSxUw8LvEN+0kPvqrZ1rB5XSom54+Gk6o5WSiPg7FNsZV4ENLMQN/JqysUGYjE0
C4HWbH7aAR+6kYlX3Fhale88/vWoeyyhUnRsOt+K2aXeNW+EQzTzm7SXcIfggENk
2rlPxRIisqlQ04oHdXdDF0t4dGOs/BVzIZ4PGv5bOkRzMyfsdAH9vMzjPaRDsXBZ
yJ8+j4Y8mlafWEpm3ISc3zK4WAOmRB9RozFpBsKJ0jMzN86NGj0u4uIA3TpfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUQ990WrIe2VMJMkOfgCs/3Ldgi/4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+7
TDANBgkqhkiG9w0BAQsFAAOCAQEALOOa4sp0NH37W83+iu4CL/LVeLQyLFcUUCyF
FtrknL2kwMcqsHYCN1JPtyis9IDx7CQ5w4pLeojYih04Gz54oD2aXjvF0ygCH0/+
5BPBdk6jvchCFYs8TRyLqMUb8zO9s0G1X296R2LndPnANIwmVjOuilhtXXfGrZiH
gi3gguVd78URYzhtZYVPHenM97DU9THwSHqkkVOcj7axPdFoLGXtzDSnRUeT1MmP
y7n4mRg7RIDLm87JE63LTQOlm96c4f4WRtE30Whfo4pAuELOGHqMdE7lFscVrvkT
X0fikE4r7JuzPttamTKTyIc+qXtRNhH/0njRdpSx7MZI5XssCg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:24 2025 by rpki-client