Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
File: 33312e3232302e31322e302f32342d3234203d3e203237343538.roa (raw, json)
Hash identifier: vguYrjJNjR8E0RZjho4A2KuT7N95QHgnRm5ZMC/dYx4=
Subject key identifier: 4D:5C:82:B1:23:C6:EC:9D:34:76:3E:5C:D4:DE:95:CA:BB:D2:8C:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4FD0A014D49C40B536467FD8FE927E0F8A4B4332
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
Signing time: Mon 27 Jan 2025 09:45:22 +0000
ROA not before: Mon 27 Jan 2025 09:40:22 +0000
ROA not after: Mon 26 Jan 2026 09:45:22 +0000
asID: 27458
IP address blocks: 31.220.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d0:a0:14:d4:9c:40:b5:36:46:7f:d8:fe:92:7e:0f:8a:4b:43:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:22 2025 GMT
Not After : Jan 26 09:45:22 2026 GMT
Subject: CN=4D5C82B123C6EC9D34763E5CD4DE95CABBD28CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:2f:4c:4a:aa:87:b2:00:63:17:66:2c:be:
de:e6:c1:07:0c:bf:a9:6d:a6:07:b8:96:f0:5a:86:
ba:21:fe:b1:15:94:78:c7:8f:e2:d1:c4:8b:26:34:
de:6c:fe:09:58:fc:98:88:8b:e4:2d:10:06:15:f5:
f1:a5:3b:5d:fb:f8:e9:66:ab:81:dc:01:21:17:83:
80:a9:4a:fc:f2:7f:b0:a6:37:ee:32:58:59:59:fc:
e1:c8:1e:90:14:a2:a8:c4:db:7f:25:c1:ea:8c:26:
69:3e:a1:1f:46:4f:8c:62:e6:3f:01:51:e8:5a:5c:
03:4f:d1:c5:18:af:49:37:f9:05:82:71:ef:e8:4b:
64:bb:69:f7:39:99:de:b4:90:39:e8:7d:b9:5a:0d:
29:1b:4d:c6:bb:24:08:87:c2:35:b2:f6:97:7f:1d:
82:1a:02:e9:71:f1:a3:57:60:e7:b5:d4:04:c8:fb:
bb:ae:0a:90:0a:21:26:1a:74:be:54:94:7e:e6:d3:
ba:79:e3:69:8c:b0:f1:fc:16:0d:40:c6:fe:0b:47:
25:7f:d9:20:57:4e:da:5d:62:bd:df:c4:b3:d2:e9:
ea:8a:07:54:e1:4d:76:ea:87:62:0c:7d:f0:de:a3:
b8:87:de:1a:10:39:68:c7:bb:0b:e3:62:b6:e3:a0:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:82:B1:23:C6:EC:9D:34:76:3E:5C:D4:DE:95:CA:BB:D2:8C:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c3:a9:fb:94:ee:a3:37:75:19:8d:5d:30:3a:17:89:76:55:
92:1a:a5:fe:ad:3d:dd:83:0e:49:31:07:71:7e:13:02:85:8b:
5d:52:bf:1f:42:9b:86:86:c3:07:a0:6c:ff:1d:ba:a9:d6:69:
9f:2c:16:1a:23:8e:35:d0:cc:65:10:30:ea:20:b9:9a:9f:61:
77:69:48:fb:46:a6:f2:be:fe:1e:95:6a:b3:d8:15:80:da:01:
ae:67:c2:f8:ad:3c:0f:31:38:e7:b1:ef:a4:8e:f8:ee:5f:e6:
38:a7:86:f3:27:76:cf:3c:b1:47:41:44:eb:e2:99:d9:f1:87:
3f:05:54:a2:36:56:5d:06:af:1c:96:5b:7c:33:18:95:a9:72:
23:35:78:5c:64:5c:41:3c:41:2a:41:fb:1d:26:9f:23:0d:93:
d8:24:ac:61:7a:6b:9d:a4:1d:a3:ad:7e:d5:f3:e1:4c:ca:c4:
03:04:ab:0a:7f:0b:39:52:f3:d1:c8:a8:df:0c:8f:e3:ea:33:
d0:18:e8:de:ce:30:db:81:3c:9e:cb:c9:21:ae:79:40:b0:5a:
90:c2:6c:ea:f6:3c:78:8a:25:38:74:14:94:1a:9b:75:91:18:
ec:b0:3c:9a:ee:ec:33:74:7a:3a:c0:b0:d6:04:8c:45:8b:8a:
d2:4b:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:18 2025 by rpki-client