Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa
File: 33312e3232302e33302e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: myljDbwfWYJ+A7ATE9j15MjTUGwLl+qnHXnceC6+dv4=
Subject key identifier: AC:ED:57:3A:E0:FC:48:E9:32:4F:F3:E5:4B:BB:F3:71:1E:5F:8D:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26F11FC85940A91EE8ABB5270F8AF4C9C657AA63
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa
Signing time: Mon 27 Jan 2025 09:45:18 +0000
ROA not before: Mon 27 Jan 2025 09:40:18 +0000
ROA not after: Mon 26 Jan 2026 09:45:18 +0000
asID: 42708
IP address blocks: 31.220.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f1:1f:c8:59:40:a9:1e:e8:ab:b5:27:0f:8a:f4:c9:c6:57:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:18 2025 GMT
Not After : Jan 26 09:45:18 2026 GMT
Subject: CN=ACED573AE0FC48E9324FF3E54BBBF3711E5F8DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:d3:ba:14:7f:6a:11:88:3c:c6:eb:8f:5e:
b6:37:54:2f:56:c6:5b:62:8c:f7:19:95:da:2b:e0:
a4:b5:70:48:17:2d:5a:ed:3c:5c:ea:1b:32:66:c8:
6b:3e:c4:42:df:f9:de:b6:ad:44:36:ad:54:a8:82:
c2:58:cb:d8:0d:fb:be:50:a5:51:9b:e2:85:07:14:
22:8c:46:6c:09:b3:47:15:9e:ab:47:ad:44:08:24:
a2:e5:89:19:5e:ed:59:cb:9c:37:1e:63:d5:ed:8b:
02:20:31:1f:57:b9:46:be:ae:c6:31:85:e1:b5:6e:
d5:bf:7b:6a:e4:c5:ad:a7:d2:de:ca:dd:ab:69:7a:
5f:fa:c7:b3:8d:44:aa:c0:30:cc:06:e9:a1:a6:67:
ef:4f:c9:5f:1f:f0:b4:e9:78:4f:69:f6:a0:f4:c2:
6a:df:46:cf:60:95:ac:b6:36:c0:aa:17:08:b8:22:
8e:d7:5d:9e:c3:72:7f:a4:a2:81:48:27:88:06:9b:
38:f9:b3:14:7d:fd:bc:40:e3:81:4d:4c:b2:a0:3d:
0c:fb:c6:0e:e0:6c:d6:cd:6f:4c:96:a8:c1:b2:55:
a6:23:a9:19:74:e1:e1:bf:5f:64:b7:c7:ef:99:53:
18:f0:2d:3d:ff:0c:6a:8c:db:de:dc:9a:9c:ee:fc:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:57:3A:E0:FC:48:E9:32:4F:F3:E5:4B:BB:F3:71:1E:5F:8D:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.30.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a5:35:fa:a0:4b:4b:a7:5f:ca:da:59:fe:f2:90:06:9b:69:
0c:48:f3:90:2a:0c:33:fc:e7:6d:1b:e4:ed:b0:5f:7c:e0:c2:
13:2d:4f:ae:3d:06:bb:ca:f7:04:ef:ac:0c:a8:b3:1f:78:02:
4b:9b:95:94:a8:b5:2e:76:e0:0b:63:76:7c:a5:b2:e3:0b:3a:
d5:fe:49:c7:3a:86:5c:64:b7:3b:e8:18:e5:be:f6:2b:06:9f:
00:b5:41:95:6e:6f:24:c0:4a:07:cc:06:8f:46:70:31:f2:66:
46:91:dd:ec:92:31:e9:a5:38:cb:34:2a:5e:67:c3:b9:14:19:
e3:49:25:0a:ad:e4:83:31:54:30:ff:06:bd:e5:a9:af:33:d5:
a7:40:d2:2c:19:13:e9:88:ed:92:28:6c:0b:27:fc:a4:5a:5e:
aa:e8:c2:5f:ac:b5:91:79:b5:bc:bb:22:fc:ea:29:b9:b4:28:
02:e8:99:d3:27:18:f8:d9:60:2c:9f:f8:8f:21:2e:7b:e3:bd:
32:86:7c:b1:d1:80:a7:8e:d6:c1:e1:41:ed:4a:29:6d:f9:a0:
d5:73:a7:2c:87:4a:d5:16:c1:51:d4:0c:12:bd:dc:13:d3:9f:
07:59:e6:b5:e5:a2:f8:e1:f9:11:39:37:8a:01:c9:5a:8c:2f:
82:37:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:20 2025 by rpki-client