Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203330363434.roa
File: 33312e362e34372e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier: oeJQJ4bkZ97pSGDH+fHf/mUmt9doNX4n6iROggg492I=
Subject key identifier: FE:E6:B4:81:28:01:2A:94:BC:5E:C8:A8:F8:5F:6E:0C:26:36:F4:6C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4C2ED851B8E403A967B15AB4C4F166AC28B31CE5
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203330363434.roa
Signing time: Mon 31 Mar 2025 18:53:59 +0000
ROA not before: Mon 31 Mar 2025 18:48:59 +0000
ROA not after: Mon 30 Mar 2026 18:53:59 +0000
asID: 30644
IP address blocks: 31.6.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2e:d8:51:b8:e4:03:a9:67:b1:5a:b4:c4:f1:66:ac:28:b3:1c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 31 18:48:59 2025 GMT
Not After : Mar 30 18:53:59 2026 GMT
Subject: CN=FEE6B48128012A94BC5EC8A8F85F6E0C2636F46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:a2:7b:6b:66:ba:1e:ae:b7:f5:2a:19:e9:
35:e7:1b:dc:d7:25:39:eb:ca:56:90:5c:5d:42:95:
2a:ef:a0:56:f7:58:e2:6d:77:4a:0f:cd:48:76:23:
f6:33:60:a2:99:29:59:22:69:8e:cf:ae:43:74:d2:
e9:76:77:94:5d:d6:39:a5:96:93:36:6f:03:ca:45:
68:13:48:04:1e:8c:db:ea:65:59:fa:6f:43:85:d7:
49:80:8f:29:23:bd:a8:97:a8:70:36:79:72:ba:b5:
ce:dc:09:05:9d:19:c7:6e:09:79:54:36:d7:47:e5:
07:af:30:d8:d2:33:c3:ed:a7:4b:64:ad:8e:14:5f:
cf:f0:97:3b:d4:de:b9:d9:a7:ab:b2:f7:d7:8b:a8:
bc:3e:55:0d:5d:1b:cb:94:ab:58:37:1f:87:29:1d:
17:22:6e:d3:dc:1c:dc:e5:c8:bc:b6:40:aa:d1:12:
9e:7e:14:6a:94:e8:04:a8:10:e6:be:67:d0:55:51:
b5:21:ca:8e:31:6c:cb:53:15:ad:9e:05:47:c0:79:
cc:32:19:15:c5:92:08:d2:a9:15:3c:84:ef:72:af:
d1:c3:49:3e:02:98:27:a3:7b:c8:2e:1f:85:98:02:
7d:57:39:1c:80:12:20:01:d1:42:31:e7:2d:65:2d:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:B4:81:28:01:2A:94:BC:5E:C8:A8:F8:5F:6E:0C:26:36:F4:6C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203330363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ef:53:af:be:f5:e8:9c:64:61:5c:4f:2d:45:a8:be:bd:49:
86:33:ed:3d:85:89:08:a3:44:4a:da:e6:28:27:04:13:82:14:
7d:25:ad:0f:4c:a3:94:ec:f7:e5:82:62:1b:46:ac:f8:76:b6:
dd:a3:67:9b:4b:24:c3:13:b6:45:12:d1:84:69:cd:bf:59:bd:
ce:75:60:8c:19:46:2e:34:09:65:49:90:27:01:30:02:1e:8b:
6a:89:7a:32:c7:32:b1:64:bb:8d:83:cf:f7:54:8e:6b:ad:00:
c5:3a:bc:4e:e8:b2:db:77:19:f9:88:cc:5a:30:a5:cd:1c:89:
61:5b:69:03:b3:ef:b2:6c:74:f4:b0:f1:1e:12:7b:72:eb:79:
42:3b:35:5e:87:49:6d:48:3a:d6:d3:d0:b0:23:1e:35:ce:5c:
3b:73:20:79:79:29:96:cd:9e:d9:8c:1c:36:e1:6f:c3:fc:9a:
ef:d5:2d:4f:e9:96:fe:b5:89:4d:9a:ed:10:28:a7:ba:6a:e1:
3a:c8:b0:25:b9:37:6e:88:0a:e2:23:68:bb:e6:fe:36:eb:17:
2f:aa:1c:08:ca:ff:12:70:44:c0:cc:b2:83:ca:88:6d:32:73:
86:30:b9:34:c0:cd:e8:3c:9c:00:7e:47:9d:73:17:82:3c:0c:
cb:b2:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net