Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
File: 33312e3232302e302e302f32322d3234203d3e20323036323634.roa (raw, json)
Hash identifier: PY6lWoBuK18Flv5krRI7rGX9GIp7ivjhSvVET1n4ZXg=
Subject key identifier: C8:E2:EF:A3:FB:5B:48:45:93:D0:DC:0D:04:38:E0:54:FF:5A:B8:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C91D28E5706CBA12C4CBD6411ADC1F750D30CAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
Signing time: Mon 27 Jan 2025 09:45:01 +0000
ROA not before: Mon 27 Jan 2025 09:40:01 +0000
ROA not after: Mon 26 Jan 2026 09:45:01 +0000
asID: 206264
IP address blocks: 31.220.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:91:d2:8e:57:06:cb:a1:2c:4c:bd:64:11:ad:c1:f7:50:d3:0c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:01 2025 GMT
Not After : Jan 26 09:45:01 2026 GMT
Subject: CN=C8E2EFA3FB5B484593D0DC0D0438E054FF5AB8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:98:46:a7:8b:29:4c:6d:7d:00:6b:65:57:
a5:d4:15:82:ae:c7:3b:a4:c8:05:5c:68:1b:b4:62:
9e:2c:35:71:df:e4:45:f0:3e:4a:1d:2b:db:fb:df:
d3:4e:22:8e:19:3c:c7:29:9f:59:0b:5d:c4:ed:00:
e6:75:aa:ce:06:dd:86:48:f4:bf:a1:39:5d:5b:67:
bb:65:ef:42:6a:cd:ab:73:9c:e6:51:0a:ab:b4:09:
a3:01:59:37:5b:50:98:a4:93:f0:1a:b3:54:c5:14:
1e:49:6f:89:ec:4f:f2:f6:3e:fb:89:d1:1f:71:f6:
c2:b8:0d:65:55:c5:49:e6:1d:9f:57:0f:94:59:f7:
b0:df:02:ab:58:56:8c:77:bd:75:25:00:7b:cf:de:
6c:cb:a3:26:a4:df:93:98:60:5a:81:35:0c:3e:46:
b0:88:06:db:64:58:6d:24:c2:26:8f:79:29:aa:33:
1f:4c:c5:2b:ec:1a:c6:f1:c9:45:1e:96:54:75:d0:
4e:9f:29:91:15:0e:08:e6:0f:be:96:0e:be:62:51:
51:e5:09:05:30:6a:d4:be:89:c6:73:49:c9:98:ec:
fa:04:75:d2:da:ec:0e:04:cc:dd:37:87:9b:40:a6:
e6:62:86:d0:86:71:d1:37:e6:0c:34:63:4a:88:52:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:EF:A3:FB:5B:48:45:93:D0:DC:0D:04:38:E0:54:FF:5A:B8:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.0.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e3:03:83:7c:f0:10:8e:22:d4:fe:24:42:f0:13:70:11:2f:
de:9c:14:1d:96:ee:fb:32:d3:3f:6b:f1:ee:6c:b2:8d:be:19:
34:3f:04:39:93:d9:02:b2:b8:17:08:1b:de:24:85:67:bf:4f:
d5:03:f4:ad:ba:05:80:b2:a7:8a:d4:04:96:3f:77:73:73:7e:
0f:e8:ef:22:c8:da:a4:8b:73:4a:95:f5:a1:8b:75:4e:9b:b0:
59:eb:96:54:97:04:00:7e:18:34:dc:d0:7f:b6:18:0c:b8:ae:
aa:44:7c:06:08:36:a7:4d:17:ca:b9:f0:4c:17:68:78:56:40:
05:dd:00:ad:5b:46:14:3f:63:2e:a6:3b:57:e5:82:a1:43:50:
de:3f:85:36:97:74:c5:1f:ce:39:9a:ca:20:0d:b2:93:4c:6d:
78:a3:4d:f6:83:3d:0b:dd:3f:f1:ae:6c:98:49:f4:de:bf:65:
d8:d0:b0:fc:99:fe:de:33:e3:56:09:ce:aa:84:b6:35:a5:0c:
d7:e9:65:99:5c:d9:25:00:39:ff:11:8d:4d:44:96:d6:2b:79:
ac:37:2a:9e:54:4c:c7:e9:8c:1b:f5:0d:bf:44:00:73:eb:4a:
ec:8e:b7:e9:1b:ae:44:6d:f2:9e:4c:0c:b5:7f:94:84:3e:28:
f5:16:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:34 2025 by rpki-client