Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa
File: 33312e3232302e38302e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: ZWoaBvDhmN4zskw8hEEhn2cL16cGn1ohsFzKaf2GlN4=
Subject key identifier: A4:0E:8B:42:08:47:59:84:A9:2D:1B:13:90:20:5C:CB:95:05:B1:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E6823E6D017D7A8C9DC7A2A56DE6B429C09AC88
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:28 +0000
ROA not before: Mon 27 Jan 2025 09:40:28 +0000
ROA not after: Mon 26 Jan 2026 09:45:28 +0000
asID: 51167
IP address blocks: 31.220.80.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:68:23:e6:d0:17:d7:a8:c9:dc:7a:2a:56:de:6b:42:9c:09:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:28 2025 GMT
Not After : Jan 26 09:45:28 2026 GMT
Subject: CN=A40E8B4208475984A92D1B1390205CCB9505B121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:9e:00:8e:c6:bc:0a:7d:73:2e:84:39:03:
1f:fc:a6:73:35:df:f9:01:77:61:27:68:2a:78:b1:
98:bc:20:eb:d3:45:d2:ca:2b:22:d2:f8:30:e4:e8:
ec:72:6d:b8:f4:55:0d:aa:c4:cf:8b:c4:ed:34:c4:
87:1b:4d:b6:e2:07:76:26:a9:b0:e9:e5:a2:ec:7f:
df:1a:f7:34:f2:5b:3b:b3:20:57:fa:9c:fe:5a:05:
08:2d:81:40:36:91:14:a9:16:83:9a:39:64:50:a3:
52:e7:be:c0:a5:f5:2f:c9:9b:2e:1e:76:29:2f:89:
4a:92:b9:54:5e:de:b0:f7:8f:cf:5c:2b:2a:49:10:
ed:8d:37:80:aa:0b:8f:3f:19:04:e0:3a:b8:bd:b1:
6d:52:e7:3a:ce:5b:d8:27:f8:d5:cf:1c:2b:25:78:
36:f6:56:5e:d2:c2:b3:06:68:a7:a6:08:ce:26:a5:
2a:5a:71:8d:a4:ac:66:6a:09:53:64:3a:df:ad:71:
dc:e5:a4:b7:45:19:f7:ab:de:54:56:88:5c:4a:25:
1a:64:b7:c4:72:04:e5:66:65:79:c1:3a:00:be:59:
a3:ed:ab:ea:8d:98:a7:13:5b:14:71:8c:a3:39:b8:
06:32:c2:7b:d8:6f:2a:f6:14:71:af:3a:d3:4e:df:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:8B:42:08:47:59:84:A9:2D:1B:13:90:20:5C:CB:95:05:B1:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.80.0/21
Signature Algorithm: sha256WithRSAEncryption
91:43:de:96:20:02:df:d0:a8:6a:41:88:29:17:78:86:1f:1f:
69:d7:fb:7f:39:7d:73:d2:59:0a:17:e4:24:5e:d7:ed:39:f0:
06:d8:54:2f:c3:25:18:e4:fb:54:a0:56:ca:14:ab:ff:6c:ce:
9c:da:f5:5a:e3:8f:f5:43:76:47:0b:ee:76:30:1a:b7:9d:5e:
8e:41:f7:7b:38:10:ae:a3:1e:90:9a:3b:67:b0:78:67:6c:32:
4c:0d:48:12:0e:0c:96:71:f3:e4:c7:54:ce:96:10:7b:f7:36:
f7:70:46:9d:8c:e3:4b:9e:98:a5:b0:bb:cc:09:a8:2a:61:2a:
99:bd:c9:fe:43:0e:0c:37:da:78:a9:9f:7c:99:db:be:b6:0e:
60:17:1b:c3:c9:a3:7b:b0:ab:a2:3e:78:28:83:39:04:fd:7c:
44:9f:e4:34:c8:df:ec:3b:43:4e:b7:40:f9:31:b3:9d:60:2b:
75:c6:9a:7b:f2:62:81:5b:cd:63:5c:fc:49:58:bc:be:8a:55:
9d:da:db:19:5c:c1:65:3c:82:56:8d:86:a6:d0:2d:1f:70:00:
ec:b7:2b:73:15:80:eb:ff:9e:df:17:ac:8f:6f:e8:7d:84:bb:
9c:85:39:de:4d:2b:18:9f:ad:d4:16:aa:43:1a:de:ba:fb:e6:
07:51:fd:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHmgj5tAX16jJ3HoqVt5rQpwJrIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMjhaFw0yNjAxMjYwOTQ1MjhaMDMxMTAvBgNV
BAMTKEE0MEU4QjQyMDg0NzU5ODRBOTJEMUIxMzkwMjA1Q0NCOTUwNUIxMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCp4Ajsa8Cn1zLoQ5Ax/8pnM1
3/kBd2EnaCp4sZi8IOvTRdLKKyLS+DDk6Oxybbj0VQ2qxM+LxO00xIcbTbbiB3Ym
qbDp5aLsf98a9zTyWzuzIFf6nP5aBQgtgUA2kRSpFoOaOWRQo1LnvsCl9S/Jmy4e
dikviUqSuVRe3rD3j89cKypJEO2NN4CqC48/GQTgOri9sW1S5zrOW9gn+NXPHCsl
eDb2Vl7SwrMGaKemCM4mpSpacY2krGZqCVNkOt+tcdzlpLdFGfer3lRWiFxKJRpk
t8RyBOVmZXnBOgC+WaPtq+qNmKcTWxRxjKM5uAYywnvYbyr2FHGvOtNO3747AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUpA6LQghHWYSpLRsTkCBcy5UFsSEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzODMw
MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAx/c
UDANBgkqhkiG9w0BAQsFAAOCAQEAkUPeliAC39CoakGIKRd4hh8fadf7fzl9c9JZ
ChfkJF7X7TnwBthUL8MlGOT7VKBWyhSr/2zOnNr1WuOP9UN2RwvudjAat51ejkH3
ezgQrqMekJo7Z7B4Z2wyTA1IEg4MlnHz5MdUzpYQe/c293BGnYzjS56YpbC7zAmo
KmEqmb3J/kMODDfaeKmffJnbvrYOYBcbw8mje7Croj54KIM5BP18RJ/kNMjf7DtD
TrdA+TGznWArdcaae/JigVvNY1z8SVi8vopVndrbGVzBZTyCVo2GptAtH3AA7Lcr
cxWA6/+e3xesj2/ofYS7nIU53k0rGJ+t1BaqQxreuvvmB1H9CA==
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:01:51 2025 by rpki-client