Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20383334.roa
File: 33312e32322e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VV8t0iL4UCLQ6JogLUXI8xDn6ex6Cpvpl6YpO29YZ5g=
Subject key identifier: CA:CB:CB:13:7F:53:9C:B3:57:7F:65:A7:6D:6E:AA:8D:78:94:0A:C7
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 0B53AD3A77759C61DF66A36ADDC911EE5C78E8F2
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20383334.roa
Signing time: Tue 17 Dec 2024 07:06:31 +0000
ROA not before: Tue 17 Dec 2024 07:01:31 +0000
ROA not after: Tue 16 Dec 2025 07:06:31 +0000
asID: 834
IP address blocks: 31.22.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:53:ad:3a:77:75:9c:61:df:66:a3:6a:dd:c9:11:ee:5c:78:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 17 07:01:31 2024 GMT
Not After : Dec 16 07:06:31 2025 GMT
Subject: CN=CACBCB137F539CB3577F65A76D6EAA8D78940AC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:00:ca:bd:1e:51:be:7d:d2:b0:b0:40:4d:
03:26:39:b8:6e:1f:b1:09:78:a8:9b:58:8f:aa:c9:
97:14:ef:8f:1c:c7:53:0c:24:38:af:bc:7c:f4:b9:
e7:06:27:e8:21:1e:7b:00:40:f3:3f:a9:6e:a6:3a:
91:1b:da:6a:1a:82:2e:e3:06:5f:87:fc:ce:fb:f1:
12:1e:75:6d:f2:32:01:94:5b:b4:ad:0e:d1:5c:2f:
19:7f:36:da:bc:5e:07:f5:9e:0c:3c:3e:50:25:d4:
f3:05:55:ae:73:31:ee:eb:c8:8b:2d:fc:21:20:5a:
05:1b:cc:d4:6a:47:59:ee:fb:13:3f:da:8d:e5:0f:
6c:2f:0a:d1:2d:08:7c:b5:b7:be:51:e9:93:2c:f5:
92:97:c2:1f:c6:84:70:02:4f:ac:79:00:ae:23:3c:
10:84:61:e1:d8:3a:39:05:92:97:5b:a6:8d:cd:bd:
38:59:09:68:74:e4:e6:4d:5e:a8:b7:45:72:32:24:
80:a7:f1:3e:34:12:e1:16:da:4c:1f:57:9a:82:b0:
cf:65:57:d7:d1:ec:b9:cc:e7:79:e4:ca:51:25:48:
0e:9a:6e:87:62:9b:b9:45:cd:ce:6e:a0:a9:0a:93:
53:d6:88:79:f4:d5:01:85:f5:ad:ab:99:3f:a3:e1:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:CB:13:7F:53:9C:B3:57:7F:65:A7:6D:6E:AA:8D:78:94:0A:C7
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.105.0/24
Signature Algorithm: sha256WithRSAEncryption
64:60:67:cc:d1:dd:91:43:40:20:b4:79:21:2f:07:34:84:6e:
06:73:f7:68:59:6e:3c:56:4c:28:70:50:d9:0c:01:3d:f3:c2:
63:f4:0e:c0:d8:82:4a:8b:53:a2:b1:50:e3:f2:2e:84:d3:ea:
c5:29:2d:db:eb:c8:fb:32:4c:f4:32:f3:94:40:3b:8d:66:f8:
c2:73:8e:c8:8e:aa:1f:15:cb:a0:44:a3:2a:69:32:20:af:58:
47:00:25:9f:a2:7f:14:ae:e8:e6:c7:54:0c:31:a8:77:cf:f7:
b2:21:80:87:82:16:ff:67:10:e4:d0:81:b2:8c:1b:4c:92:62:
c5:ee:dd:bc:86:d8:56:7d:7c:ba:bf:c0:5d:42:6f:4a:3a:9a:
bf:96:06:87:7f:af:b2:fd:db:49:9d:23:d5:f8:6e:f3:cc:b7:
ac:26:cb:97:a7:8e:8b:71:ef:fc:ac:0e:57:b3:01:b9:31:fb:
ae:20:2f:6e:7d:d1:74:38:0d:40:29:d2:be:f3:d7:2c:ab:57:
c7:dd:72:11:60:20:a5:05:95:be:4b:13:6a:bb:8c:f8:32:4c:
78:7a:81:c8:c6:a3:0e:a5:b6:89:f4:1f:0c:ba:69:ec:52:4e:
d5:26:ba:f5:2a:85:57:e4:c5:37:fd:07:28:6f:d3:73:f6:a9:
20:3b:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:30:42 2024 by rpki-client on console.sobornost.net