Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
File: 3137382e3230382e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: SQdxU1J6grJ+9DtV6N3j1FBzAdjf7cTxpcxVUUdwsbg=
Subject key identifier: 88:D1:2F:5F:38:D9:99:5F:94:73:A6:A2:00:9E:A1:A2:1E:4D:1B:B2
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 4C284A912DC58A906332C7918A98FC6B856B9380
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:40 +0000
ROA not before: Wed 22 Mar 2023 15:24:40 +0000
ROA not after: Wed 20 Mar 2024 15:29:40 +0000
asID: 834
IP address blocks: 178.208.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:28:4a:91:2d:c5:8a:90:63:32:c7:91:8a:98:fc:6b:85:6b:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:40 2023 GMT
Not After : Mar 20 15:29:40 2024 GMT
Subject: CN=88D12F5F38D9995F9473A6A2009EA1A21E4D1BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:35:cd:0c:c5:93:29:7a:2b:c1:80:a3:34:
f4:90:58:4d:e0:a2:f3:b3:0d:2f:1d:e6:bb:2e:a8:
6e:6e:b7:2b:4a:67:77:f5:3e:b0:a7:18:13:36:3a:
ad:a7:db:60:16:10:38:f6:92:e3:fc:11:06:07:9c:
7b:8a:02:9b:b2:c9:24:b2:f4:2b:a2:e8:72:dd:bf:
07:c6:b3:ba:48:db:fa:07:aa:bc:03:4e:33:d9:7e:
70:17:ac:da:07:03:27:38:9e:50:29:c0:8b:f4:84:
d9:52:8d:fe:f0:e9:f4:51:3d:75:a0:cf:13:d2:98:
0f:6a:9a:ff:db:19:84:c8:f5:88:b7:b5:26:2f:68:
bd:4b:9a:5d:98:f3:88:ea:a1:12:36:ad:e5:c8:e3:
58:1c:83:4c:27:43:bc:c3:10:98:dc:a1:51:6e:65:
26:82:11:61:2a:28:ec:ac:53:3b:d6:6b:41:1e:9a:
07:29:8a:12:41:3c:92:a2:69:48:55:3e:c4:0d:55:
eb:c8:0d:00:ae:bf:44:2d:ec:13:6d:72:eb:84:03:
b7:fd:94:3e:1c:dc:29:d2:3d:39:8e:71:46:df:98:
5e:78:41:75:ef:2b:cf:b2:6d:89:58:77:d1:3d:e2:
4c:ce:0a:8b:9f:76:3e:9a:b5:20:76:be:03:59:46:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:2F:5F:38:D9:99:5F:94:73:A6:A2:00:9E:A1:A2:1E:4D:1B:B2
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3137382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
58:e7:09:ec:06:3d:ad:19:1e:4b:11:af:f3:4b:dd:58:f3:b0:
76:e5:f5:b2:04:f3:71:62:28:b3:2e:0a:9b:6c:4f:3b:da:94:
ad:81:73:52:5b:17:d5:c0:f0:a3:db:ab:46:f8:68:c5:ef:93:
94:ea:ef:c5:d3:ee:bc:09:bb:61:92:71:5c:0c:ac:83:36:ee:
e1:46:3a:fd:f1:ae:11:da:27:c5:09:35:47:72:a4:45:cb:0a:
4a:45:bf:76:8b:3b:33:04:f9:41:f8:bd:cf:aa:80:d7:25:34:
59:e2:c3:ec:d8:4d:95:8a:28:df:70:35:66:bc:e6:af:56:3b:
91:3f:72:4e:c1:d9:80:c9:b3:59:d8:2c:58:20:9b:a0:86:54:
e4:c0:0f:6d:c1:2e:0b:60:e0:20:45:22:46:09:67:a1:3d:eb:
3c:9f:7f:d7:a3:2f:77:c8:18:69:41:25:39:ba:bb:2c:f9:49:
68:39:f3:ea:bd:18:57:f7:45:c5:f2:0d:3c:3c:dd:f9:68:09:
b7:c8:24:7f:a2:ad:6d:f5:df:5a:17:ae:0b:8d:85:5c:9e:df:
93:35:6b:18:7f:d2:dc:37:01:9b:d6:97:05:f6:2e:e8:cd:7c:
2c:9f:a1:4e:16:df:81:04:ea:ad:8e:93:a7:c5:46:aa:1e:76:
37:c9:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org