Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: VdZ1Bav8wRDogVedA7o8pRVQFpbeqKAoUn5o3mK/Q/Q=
Subject key identifier: 0C:14:78:30:E3:87:AE:34:F5:F7:25:CB:6F:33:47:D5:06:EA:62:69
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1FEFB6CBC2F8AFF70BEE50C4606EC898922410E4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa
Signing time: Wed 12 Feb 2025 12:47:00 +0000
ROA not before: Wed 12 Feb 2025 12:42:00 +0000
ROA not after: Wed 11 Feb 2026 12:47:00 +0000
asID: 31715
IP address blocks: 82.26.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ef:b6:cb:c2:f8:af:f7:0b:ee:50:c4:60:6e:c8:98:92:24:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 12 12:42:00 2025 GMT
Not After : Feb 11 12:47:00 2026 GMT
Subject: CN=0C147830E387AE34F5F725CB6F3347D506EA6269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:6e:ae:4b:be:28:ef:06:a7:cb:f6:91:7a:
fd:6c:05:ec:ca:1a:3b:54:79:82:3c:52:0f:b8:c9:
79:e4:6d:62:bc:15:83:cb:b7:8f:69:8f:2f:7e:81:
ca:66:76:17:1a:ec:ed:d7:33:96:e4:b9:28:29:97:
4d:f8:ce:f6:00:9c:f6:bb:a1:2c:44:9d:bf:e0:fd:
41:ca:59:ec:76:c4:9b:a1:fb:81:20:76:44:48:2d:
e7:7a:25:15:81:8c:63:e3:60:d7:67:38:3d:03:27:
11:59:8d:f0:2a:eb:52:ba:4a:59:87:10:05:9b:62:
57:4a:21:ea:5c:be:b8:66:32:a4:7d:ec:ee:32:74:
29:5e:0e:93:d7:6b:60:b3:1f:35:31:39:e9:ca:fd:
10:8a:d5:b1:04:80:74:36:18:e8:b1:56:64:c9:f6:
f0:60:85:8e:5a:27:e5:38:d1:ce:07:30:84:52:2b:
5f:2f:62:06:d4:50:c7:c6:75:f5:8c:48:94:aa:75:
32:73:e3:57:e3:db:37:a5:5b:07:90:91:a4:f8:32:
88:4c:53:c8:6c:ca:ac:09:70:f8:12:36:15:94:9d:
28:38:f8:a7:fb:bc:56:44:d8:92:3c:4a:f0:c9:f1:
74:4a:32:d7:9a:cb:36:c9:9d:d5:82:d1:73:6b:34:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:78:30:E3:87:AE:34:F5:F7:25:CB:6F:33:47:D5:06:EA:62:69
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.167.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5b:e1:bd:ff:71:e3:d3:d4:3c:ae:78:c9:f3:07:9d:ad:55:
dc:38:53:60:d9:3c:ba:77:b9:3c:c9:d7:c5:78:3d:1a:86:50:
26:d6:59:5b:50:b6:d8:05:d4:0e:18:b6:c7:a5:ef:c1:e7:d0:
28:2b:9d:06:ec:67:bc:94:7c:fb:d5:69:80:d8:1d:cc:16:d1:
76:d3:37:1e:3e:ca:83:a0:e4:f2:27:4c:4c:52:10:38:60:c3:
cc:de:7d:92:97:d2:ce:25:00:7b:da:ec:dd:71:e2:17:80:b1:
e1:12:05:f7:57:93:1e:b0:1d:59:b9:a2:04:16:a6:8b:3e:d2:
22:31:b3:8a:da:10:a4:7a:8f:75:19:6c:d0:84:04:f5:68:ef:
fc:92:cc:c2:a5:f2:f4:a0:30:89:12:9b:fd:79:bc:b1:bb:44:
c5:d5:26:2c:55:1d:fc:4a:00:ab:23:24:de:b4:28:5c:be:8d:
e6:f7:cd:9a:c7:c7:9a:36:32:41:57:36:e7:7a:ae:ba:ad:e0:
e6:86:37:13:fd:27:45:a5:a1:9d:3c:4a:a5:37:16:92:c4:d9:
b7:af:c7:8b:d0:95:fd:69:e9:d8:b4:4c:7c:2c:c8:f0:d9:bb:
b5:e3:9e:e5:2f:13:51:5a:39:31:30:c5:ab:92:64:ca:25:7c:
13:11:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:42 2025 by rpki-client on console.sobornost.net