Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1je6rHsRyJCGxv4CKLaVCdmjpJEqtSHH0PoG4S4QJCI=
Subject key identifier: 65:8B:FA:AE:60:26:B8:FA:E4:DD:44:A2:03:13:AC:38:21:92:B7:6F
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 6F9AD8431830EBC1CC6D962213248EA6138A0135
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:39 +0000
ROA not before: Wed 22 Mar 2023 15:24:39 +0000
ROA not after: Wed 20 Mar 2024 15:29:39 +0000
asID: 834
IP address blocks: 178.208.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9a:d8:43:18:30:eb:c1:cc:6d:96:22:13:24:8e:a6:13:8a:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:39 2023 GMT
Not After : Mar 20 15:29:39 2024 GMT
Subject: CN=658BFAAE6026B8FAE4DD44A20313AC382192B76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:50:94:60:e8:c7:ba:fe:54:d7:35:1d:ff:
61:73:18:86:a8:e5:70:62:c8:41:90:4e:a7:51:c9:
07:f7:95:05:04:9d:4d:e0:80:88:64:c4:9b:2b:7e:
ce:a9:60:bf:d3:a0:64:6d:ab:85:44:26:24:03:94:
da:6c:38:9b:e6:52:32:b0:82:64:bb:01:c1:00:99:
3f:c5:92:60:24:4f:a3:c3:d9:4a:59:4a:30:9b:b7:
68:8b:65:4f:c0:2e:ae:74:08:1e:b3:1d:30:34:09:
5d:64:9e:56:dd:2d:90:1e:93:b0:18:0b:d2:c5:af:
47:f7:2d:0e:5f:0e:0e:69:6b:a3:2f:a6:7a:91:eb:
73:b1:5f:bc:b2:0d:3c:82:d5:fb:05:c6:06:c4:d1:
91:c6:48:ae:93:12:26:a6:54:f0:f4:2a:bd:83:26:
bb:dd:14:dc:5a:2d:bb:f9:33:37:5b:8f:26:dd:2c:
b5:23:ed:5e:44:c1:0b:be:6a:fd:c0:9f:f7:4a:82:
6c:31:bb:aa:a2:4c:9f:2d:2a:06:34:eb:85:f7:70:
cc:2a:a9:3c:73:69:7a:1d:71:9a:08:50:f3:09:01:
6c:52:1d:e2:a2:b8:f2:74:d5:5d:51:8c:de:13:6f:
5a:01:5e:f8:7f:58:b5:e6:37:ac:f6:25:c8:87:d1:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:FA:AE:60:26:B8:FA:E4:DD:44:A2:03:13:AC:38:21:92:B7:6F
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a7:51:d5:a1:6b:e8:d5:d3:79:ba:2e:af:ce:8d:4b:dc:48:
da:c3:96:29:3b:16:5a:11:17:34:8f:ef:8c:05:71:f5:0e:6b:
00:c0:d9:d4:53:03:79:b0:b8:a4:0b:ef:70:26:f3:c1:6c:b9:
e9:fc:66:bd:0a:e2:0d:ea:a9:3a:38:dc:ca:e2:d7:40:b2:9c:
50:9e:f5:ec:3b:f4:a2:85:1e:95:ca:35:3f:e9:eb:0c:1f:34:
11:6c:79:a4:ec:dc:a6:7e:a1:5a:a4:b4:53:a6:1c:60:c6:92:
10:a9:99:de:4a:8d:ac:6d:f7:ca:c9:51:1d:8d:48:7d:14:25:
11:64:a8:c2:f1:01:d3:7d:d4:07:39:4d:e7:59:d8:39:c6:e1:
45:54:02:49:f9:02:6a:d3:bf:88:0d:80:7e:45:d6:d2:89:25:
d2:db:58:9e:a7:b0:ec:00:4d:5b:71:9b:a8:af:a2:22:10:59:
6a:7a:2f:a6:e9:91:c1:9d:ea:b6:dd:74:80:0d:85:37:68:4a:
5d:46:58:de:76:4b:63:b3:c3:21:b3:68:48:5d:78:87:08:0d:
43:67:fb:10:92:80:0b:29:ea:d2:7a:a7:51:b9:aa:c0:0b:99:
3e:fd:4a:ee:6d:81:df:54:8e:73:38:dd:c3:c9:d9:60:3c:af:
60:90:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org