Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
File: 33312e3232302e34342e302f32332d3233203d3e203633343733.roa (raw, json)
Hash identifier: tGZYScpfUbNBPLSjQu0IiLaIRm6ILafSQK+BSDgq2v8=
Subject key identifier: 60:BE:C5:07:93:CA:E1:34:DF:BD:37:A0:B7:9D:DF:67:B9:38:42:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46B5276D6DDEF79DCB9780E86EC0F38824F45D66
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
Signing time: Mon 27 Jan 2025 09:45:30 +0000
ROA not before: Mon 27 Jan 2025 09:40:30 +0000
ROA not after: Mon 26 Jan 2026 09:45:30 +0000
asID: 63473
IP address blocks: 31.220.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b5:27:6d:6d:de:f7:9d:cb:97:80:e8:6e:c0:f3:88:24:f4:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:30 2025 GMT
Not After : Jan 26 09:45:30 2026 GMT
Subject: CN=60BEC50793CAE134DFBD37A0B79DDF67B9384254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:66:a4:f5:2c:2a:00:89:0d:0e:31:b1:86:
99:bd:5f:ed:31:81:fb:87:4a:df:ba:c6:ee:28:e8:
b9:c4:87:13:6b:59:c2:61:01:92:d1:40:c6:eb:30:
dc:8b:66:ed:36:b8:11:e5:50:39:19:c5:55:d0:30:
80:13:b0:11:cd:b7:fb:a0:4c:aa:2b:6a:8a:ed:2e:
a1:bb:01:a2:7f:db:26:fc:49:7f:ab:70:6c:c1:8a:
6d:a4:05:b0:5a:8b:69:2e:fc:16:2d:b4:d1:08:2a:
c7:79:5d:33:cf:86:a4:0c:73:d9:54:a9:79:37:5c:
bc:e0:e2:46:7f:58:1f:9d:7b:b6:50:56:f6:73:f9:
b0:b1:be:33:6a:38:53:a8:ba:da:b1:60:ee:ca:4d:
b4:9b:ec:06:40:ed:a0:1d:3c:0a:ab:4b:e8:b7:6d:
c5:10:0f:29:9f:0d:01:0a:eb:2b:51:53:f6:b8:30:
75:e5:76:29:e8:f8:ed:13:f7:53:37:c2:54:cc:59:
8b:d1:59:e4:e1:1f:eb:4c:21:1d:d7:b8:3d:49:f1:
b0:05:ea:cb:a1:d8:03:7a:13:77:e3:c8:dc:ee:dd:
00:96:54:3e:18:bb:12:24:78:f5:9e:5d:7f:c3:dc:
f4:a3:f0:2a:79:fa:67:11:00:25:74:85:25:11:95:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:C5:07:93:CA:E1:34:DF:BD:37:A0:B7:9D:DF:67:B9:38:42:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:94:76:00:54:6e:73:7b:eb:be:28:e4:1b:13:f1:35:d6:59:
0c:7c:e9:0f:4c:a0:09:07:8d:49:5e:15:3e:ed:ab:8d:bf:0a:
59:2a:c0:fe:c4:11:e0:b0:d0:e5:bf:e2:06:59:4f:a6:20:66:
d3:41:c9:9b:e0:20:af:da:d9:13:30:5f:c4:19:05:25:fd:0f:
02:aa:11:37:e9:4c:a0:22:57:c3:ef:52:ff:43:17:97:dd:64:
d9:87:71:b8:59:19:b1:07:5c:64:4f:51:fe:4b:82:f8:a7:fc:
81:4c:2c:67:d9:63:e7:28:01:c3:f5:48:ee:e6:2d:46:a8:da:
0e:cf:ab:f4:2a:bb:0d:b8:ab:15:f1:9e:68:65:91:b1:03:cb:
b0:8a:73:bc:64:cf:1f:c5:07:5d:5b:71:cf:cd:3f:4b:ab:d4:
3a:94:da:a1:8e:de:62:3c:c5:fd:c2:2f:b8:20:a0:7a:c6:43:
cf:b1:41:0c:db:20:37:dc:b2:58:e6:91:c2:02:81:9a:5b:4c:
64:f2:60:71:d1:88:64:39:e7:50:9d:8c:af:89:42:5b:d1:bd:
04:44:67:1c:fc:7f:1b:63:20:60:54:21:c8:da:fb:db:34:92:
a6:ff:c1:a9:5b:f3:11:a8:9a:a6:4e:ed:e1:97:85:5b:32:73:
29:fa:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:43 2025 by rpki-client