Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
File: 33312e3232302e362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: dvb1kkyH2OsoE+nese6kvqB+p4FUDXL/9AELKm3r3gk=
Subject key identifier: 26:F3:EA:0E:91:18:15:E5:55:02:37:38:80:DB:FA:5E:5C:A6:6C:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 38B130103F4D7E7CF2039A838F1790E39BF54A8F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:13 +0000
ROA not before: Mon 27 Jan 2025 09:40:13 +0000
ROA not after: Mon 26 Jan 2026 09:45:13 +0000
asID: 47583
IP address blocks: 31.220.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b1:30:10:3f:4d:7e:7c:f2:03:9a:83:8f:17:90:e3:9b:f5:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:13 2025 GMT
Not After : Jan 26 09:45:13 2026 GMT
Subject: CN=26F3EA0E911815E55502373880DBFA5E5CA66C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:b1:36:3f:db:b2:ee:56:43:17:6f:80:24:
89:19:28:1d:ee:cb:1c:a7:a6:ae:b4:d2:22:ae:25:
91:92:c1:93:7d:d7:3d:62:25:e3:2f:2e:4e:93:8b:
6c:26:3f:51:18:2f:08:a0:a7:66:08:b5:38:55:11:
6f:8d:b2:ff:e9:07:fb:34:6b:ea:b8:da:24:e7:e7:
c7:3d:d0:69:62:e1:e0:51:0d:32:dd:f8:ba:d7:2f:
73:b3:b8:ba:4e:d1:7c:6e:e0:38:bc:14:9d:f0:54:
e3:5b:f5:91:6b:44:b8:5f:34:9d:2b:06:2b:34:ab:
b2:db:c9:6b:e9:0e:43:9e:4a:2a:1c:14:2e:f7:29:
6d:5f:b9:05:1a:a1:be:04:92:fa:c8:ce:fb:31:5d:
97:45:0c:77:6c:4a:13:cd:67:f9:33:2c:09:a4:df:
14:ef:f8:d3:80:b4:4a:20:a4:57:5d:0f:a2:d1:8a:
99:26:88:aa:0c:cd:a9:4b:8f:01:90:1d:ee:86:69:
86:fd:12:38:3a:de:64:55:5e:20:8a:be:57:eb:57:
a7:35:29:da:42:af:67:41:40:56:a8:0a:73:1f:0f:
c3:13:c9:92:b7:a4:1b:66:d0:93:c1:43:ad:1c:e4:
6f:a4:a2:f8:d6:a5:b5:a2:fc:e5:19:76:93:1b:3d:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:EA:0E:91:18:15:E5:55:02:37:38:80:DB:FA:5E:5C:A6:6C:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.6.0/24
Signature Algorithm: sha256WithRSAEncryption
29:62:c3:d5:38:bc:2e:8d:c2:f1:78:99:7a:b5:2f:54:67:7e:
8c:02:cf:b3:68:1f:45:72:c8:02:a9:ce:6d:cb:15:4e:cf:21:
ac:e6:dc:a0:28:03:c0:46:5c:c8:65:9e:bc:26:74:d6:80:3f:
6d:b2:29:81:ed:a2:38:2d:b5:1e:aa:0d:06:b9:64:bc:f9:72:
50:f9:b7:e7:a2:72:1e:ce:75:cf:3a:79:83:30:68:21:b2:5e:
e1:c7:06:f5:20:a0:6d:f7:c6:fa:14:cd:8e:0b:d9:2d:7c:9b:
bf:9b:64:5d:3e:94:be:95:3e:71:b5:20:1e:8c:65:32:8a:36:
6f:e8:50:77:84:ae:08:06:cb:97:f1:ef:6b:41:0b:b6:e0:ac:
87:76:c3:cf:04:36:aa:2b:84:91:85:6a:46:d5:eb:d2:11:f7:
53:98:95:2d:56:5b:84:9b:b1:0b:91:a5:3e:11:f8:a7:99:33:
03:5a:0f:7c:cf:2a:cc:b4:01:4e:e5:94:2a:bb:28:e7:cb:1f:
ce:d2:e5:f9:73:43:f1:1c:b2:36:91:66:ee:d2:c3:48:ae:42:
e0:30:1e:04:b7:69:41:fe:19:49:72:c7:8e:a0:11:b3:16:73:
7b:c2:ec:b3:d8:dc:d1:e8:bc:04:55:bf:6d:3a:5b:6c:98:60:
0b:5c:05:2b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOLEwED9NfnzyA5qDjxeQ45v1So8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMTNaFw0yNjAxMjYwOTQ1MTNaMDMxMTAvBgNV
BAMTKDI2RjNFQTBFOTExODE1RTU1NTAyMzczODgwREJGQTVFNUNBNjZDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDorbE2P9uy7lZDF2+AJIkZKB3u
yxynpq600iKuJZGSwZN91z1iJeMvLk6Ti2wmP1EYLwigp2YItThVEW+Nsv/pB/s0
a+q42iTn58c90Gli4eBRDTLd+LrXL3OzuLpO0Xxu4Di8FJ3wVONb9ZFrRLhfNJ0r
Bis0q7LbyWvpDkOeSiocFC73KW1fuQUaob4EkvrIzvsxXZdFDHdsShPNZ/kzLAmk
3xTv+NOAtEogpFddD6LRipkmiKoMzalLjwGQHe6GaYb9Ejg63mRVXiCKvlfrV6c1
KdpCr2dBQFaoCnMfD8MTyZK3pBtm0JPBQ60c5G+kovjWpbWi/OUZdpMbPcpnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUJvPqDpEYFeVVAjc4gNv6XlymbI0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3AYw
DQYJKoZIhvcNAQELBQADggEBACliw9U4vC6NwvF4mXq1L1RnfowCz7NoH0VyyAKp
zm3LFU7PIazm3KAoA8BGXMhlnrwmdNaAP22yKYHtojgttR6qDQa5ZLz5clD5t+ei
ch7Odc86eYMwaCGyXuHHBvUgoG33xvoUzY4L2S18m7+bZF0+lL6VPnG1IB6MZTKK
Nm/oUHeErggGy5fx72tBC7bgrId2w88ENqorhJGFakbV69IR91OYlS1WW4SbsQuR
pT4R+KeZMwNaD3zPKsy0AU7llCq7KOfLH87S5flzQ/EcsjaRZu7Sw0iuQuAwHgS3
aUH+GUlyx46gEbMWc3vC7LPY3NHovARVv206W2yYYAtcBSs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:44 2025 by rpki-client