Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa
File: 33312e3232302e342e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: hI2q/U6BehkvIJWSOBY7xJd2BQlaB2BUOptv7Zn88n8=
Subject key identifier: 2C:10:A7:40:E1:AE:48:7C:69:25:5A:CA:3F:64:8C:32:88:F6:59:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A5969165474726964C20C543836851D8751342F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa
Signing time: Mon 27 Jan 2025 09:45:19 +0000
ROA not before: Mon 27 Jan 2025 09:40:19 +0000
ROA not after: Mon 26 Jan 2026 09:45:19 +0000
asID: 42708
IP address blocks: 31.220.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:59:69:16:54:74:72:69:64:c2:0c:54:38:36:85:1d:87:51:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:19 2025 GMT
Not After : Jan 26 09:45:19 2026 GMT
Subject: CN=2C10A740E1AE487C69255ACA3F648C3288F65994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:c2:83:dd:62:e0:f5:2a:e5:6a:5f:6c:50:
79:13:9b:05:55:82:0d:a1:56:e2:51:5d:ae:44:48:
a2:56:99:b8:d4:f6:9b:ed:ce:ee:18:fe:30:67:fc:
db:51:13:04:bb:4f:f7:98:86:e1:e0:87:77:68:4a:
bb:8f:82:ba:92:27:b0:3c:1d:1a:c5:5f:71:d4:2f:
61:f5:3f:9b:57:eb:67:8e:29:db:0c:20:fb:2a:a4:
d1:9b:b4:2c:81:10:d4:8f:1e:de:98:bc:bf:ed:62:
2e:3d:af:4d:69:a8:83:d4:f1:75:5c:04:2e:26:85:
39:e9:86:0d:9b:d7:bf:01:4b:63:d8:1d:9d:b4:d2:
b7:16:80:9b:7b:86:57:ed:b4:90:8b:c5:16:ef:07:
43:84:a2:0e:30:8d:4b:39:63:2d:eb:c2:51:8a:f8:
0b:c3:20:bc:e0:cb:33:80:d1:c7:94:85:97:d9:da:
5d:95:15:47:8c:a0:c6:2b:84:1a:c9:78:18:3e:45:
fe:bf:41:02:ea:de:b5:95:78:e5:cf:a6:09:ee:92:
e1:5c:eb:9b:5b:27:3e:ad:4e:5b:7d:a6:9a:91:72:
27:ee:7a:e6:19:fd:5b:32:10:34:5d:e8:ac:24:24:
18:3f:b0:ab:df:77:62:33:3a:f5:3e:9e:87:cc:6d:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:A7:40:E1:AE:48:7C:69:25:5A:CA:3F:64:8C:32:88:F6:59:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:39:34:77:9e:07:eb:51:5e:bf:a4:0f:f2:8c:cc:a1:7c:87:
2d:b5:6b:81:e9:f5:c8:cc:de:f4:38:02:b5:f9:f9:73:65:bc:
bf:7f:16:52:ae:8b:6c:5f:10:aa:0c:fd:c9:54:bd:57:27:1a:
b6:a0:0b:84:22:cd:b3:06:f0:59:94:33:1e:b1:e3:69:be:2b:
cd:ed:79:02:69:23:f0:11:af:75:3f:a4:b2:14:48:bd:2a:5e:
46:a9:97:e2:2a:1a:ec:1b:7c:35:d3:79:be:90:10:1a:ab:d2:
da:2d:cd:f5:2a:ca:2a:39:03:8c:42:4d:e7:50:01:32:47:5b:
39:0b:e8:fe:3a:cb:e9:e8:83:29:1c:fa:8a:3e:48:e8:af:bb:
9c:85:4a:2a:52:66:5e:1e:47:a3:36:7a:13:c8:e4:d7:b4:ea:
f2:10:b5:a9:de:71:26:3f:c5:24:6f:d3:c7:e0:a7:c4:5a:a1:
4f:2b:1a:60:d8:fb:ae:e9:6c:f5:e4:b3:d6:98:22:95:92:80:
fa:40:08:9a:83:fb:f9:c6:51:ff:47:87:bd:ca:f6:76:5a:f9:
50:8a:74:08:82:d5:7a:78:31:16:fd:82:2e:53:74:60:af:44:
b9:ce:74:07:a9:4a:06:c4:21:e6:c7:48:20:91:5b:7d:d9:98:
27:07:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:36 2025 by rpki-client