Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31312e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e31312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: i8q7qlJJhBU2U9YIOU1nmCEJOjIvNw8uGonnbmWH45Y=
Subject key identifier: 62:04:10:57:F9:F1:49:40:D9:D4:91:C6:53:B3:5D:94:CF:2C:1A:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52166D1D05D2C6D433748019FBF31FED75E405F0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:05 +0000
ROA not before: Sun 13 Apr 2025 11:41:05 +0000
ROA not after: Sun 12 Apr 2026 11:46:05 +0000
asID: 136787
IP address blocks: 31.220.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:16:6d:1d:05:d2:c6:d4:33:74:80:19:fb:f3:1f:ed:75:e4:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:05 2025 GMT
Not After : Apr 12 11:46:05 2026 GMT
Subject: CN=62041057F9F14940D9D491C653B35D94CF2C1A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:0b:8c:1f:95:87:61:7d:56:10:6d:81:41:
e7:68:ac:82:47:50:98:f6:60:1d:d6:78:bf:5e:a9:
d5:7c:6a:34:13:10:30:d1:de:02:5f:a2:d4:7d:8d:
40:f6:29:e4:0d:f7:97:1d:f7:b3:e6:41:0c:a9:a9:
fc:9a:76:e4:46:6a:d6:6d:37:73:56:22:a7:40:dd:
3a:42:9f:c7:32:1d:41:8f:56:66:64:61:ff:84:3b:
4d:fa:8b:fa:1b:50:0b:de:11:d0:3e:38:f2:df:fb:
f6:ed:8a:2f:3e:4d:cd:6d:83:c6:71:e4:cf:a1:b4:
17:bd:b7:b5:41:46:97:f2:8d:e1:0a:62:13:1e:6f:
88:76:9a:8a:0e:2d:b9:91:cc:7d:70:30:4a:21:c0:
a8:52:c0:ab:7a:44:5e:99:3a:ef:e9:79:28:3e:f8:
9e:fb:bc:27:c7:39:15:3b:fd:90:4e:95:51:0e:e6:
f1:8e:b3:b6:b0:dc:fc:a3:60:70:10:9a:36:93:27:
93:50:f8:0f:d3:7f:a7:87:15:6a:e3:1c:00:ea:8c:
48:0b:52:c2:43:12:20:18:f2:59:2f:1a:7f:6d:85:
eb:97:1e:54:21:3e:e1:09:30:e0:67:df:db:c2:d9:
49:53:b8:fc:f2:f9:4e:81:2d:c9:ef:d5:b5:86:e4:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:10:57:F9:F1:49:40:D9:D4:91:C6:53:B3:5D:94:CF:2C:1A:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e4:0f:4a:34:29:bf:af:c6:80:68:7c:3e:1d:e9:1e:93:83:
67:e4:64:99:d8:e2:8a:20:49:a0:84:08:d7:fd:ec:1f:04:96:
6d:7e:05:a6:d1:71:9e:f1:67:65:a6:e5:d6:32:bc:c3:4c:ab:
1d:ca:7f:4d:08:49:e8:81:13:91:7c:a5:a4:cf:03:51:47:1f:
2c:57:2a:7d:0f:21:a9:18:77:36:86:29:0c:83:d9:65:b4:01:
09:0e:c8:ef:fd:26:94:f9:ba:60:21:d4:ca:e3:96:42:1d:5a:
0d:e1:33:19:ed:74:20:89:85:70:f0:80:65:03:eb:8e:3d:eb:
62:d5:cd:f6:b2:ae:d1:ad:7d:35:b5:bb:2c:04:5d:e6:67:73:
4a:18:3d:f0:df:64:9c:44:f2:d1:aa:e2:a1:f6:3e:4c:a1:91:
09:73:4a:90:cc:4f:7a:f7:78:41:06:7d:f9:87:ef:07:f3:cd:
f6:76:f4:01:90:81:17:95:d9:5a:22:80:e5:56:e6:84:1c:4b:
d9:2a:c8:c5:b7:58:56:ab:e1:be:44:00:9f:69:75:ad:39:1d:
5d:5a:9a:a2:d5:77:94:b3:71:1f:a3:09:86:54:97:7a:32:5f:
ad:b9:09:36:6d:40:48:ab:d3:36:64:67:fe:33:f4:26:63:82:
5c:84:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:33 2025 by rpki-client on console.sobornost.net