Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138382e302f32342d3234203d3e203631333137.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: CDjYx/Z7FR8rXRiS5k7PKnu1umjhezAmInh8iAazLJo=
Subject key identifier: AE:D4:74:DC:3B:DF:3C:57:51:4A:52:09:E7:2F:37:73:EC:41:E4:81
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 2F6C3C1898369539EE67F009F3B45C636BBAB529
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138382e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:41 +0000
ROA not before: Wed 22 Mar 2023 15:24:41 +0000
ROA not after: Wed 20 Mar 2024 15:29:41 +0000
asID: 61317
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6c:3c:18:98:36:95:39:ee:67:f0:09:f3:b4:5c:63:6b:ba:b5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:41 2023 GMT
Not After : Mar 20 15:29:41 2024 GMT
Subject: CN=AED474DC3BDF3C57514A5209E72F3773EC41E481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:75:44:93:89:c1:c2:08:78:11:0f:e3:1f:
eb:d7:ca:93:27:2c:f8:14:61:3e:9a:a7:24:18:57:
08:c6:b3:af:05:46:96:ad:95:41:d6:8f:55:7b:ab:
48:6d:32:28:81:3c:cc:f8:2b:4a:71:63:12:13:0a:
ab:ac:bd:a3:9b:9d:04:c5:78:fb:4f:15:29:89:de:
3d:57:82:62:16:f0:89:62:87:a7:15:d4:40:2f:94:
f4:d5:15:3a:20:41:6c:46:27:8f:2a:e4:ec:38:71:
76:4f:7a:c5:e9:2a:b3:42:15:61:03:ca:7e:b3:0c:
4e:52:56:b8:05:50:5e:5c:65:fd:ad:2f:2d:35:da:
0a:86:6a:6b:f3:c0:05:ce:63:93:0f:bb:e2:8d:3d:
5e:34:31:52:40:ac:14:8e:18:da:52:ab:a8:1d:da:
52:df:01:ae:2f:1d:33:81:63:06:92:4e:c0:6d:16:
7e:cb:be:3a:98:06:aa:15:8e:c3:d1:9a:20:61:51:
9e:27:a0:bf:e5:db:b9:4e:76:1b:7e:52:52:07:e2:
57:34:5d:f9:e2:7e:84:be:1c:6a:ce:fc:ff:e7:7e:
ce:9b:69:c9:63:eb:1c:de:01:ee:bf:eb:ca:f5:9e:
d2:ff:d3:27:8b:30:ee:c8:e8:c3:3a:d6:82:39:fd:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:74:DC:3B:DF:3C:57:51:4A:52:09:E7:2F:37:73:EC:41:E4:81
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f6:a0:b7:84:6e:d2:be:a2:fd:c1:73:ff:7b:2d:26:6b:3c:
a2:33:c3:f3:b2:05:c8:12:68:9a:41:96:3f:75:e1:33:a1:9e:
7a:62:88:70:fb:2a:91:c1:31:10:70:e5:1e:f3:7b:1f:78:a3:
db:4e:ed:a0:fc:8a:d5:c5:e1:1a:e0:c9:22:8a:20:a7:e6:a4:
59:99:63:aa:72:53:ae:de:ba:11:fb:d7:6c:f2:25:82:b2:7e:
91:2f:fc:a2:d9:1f:55:ad:95:48:6b:d1:9a:e8:7e:7d:f8:16:
e7:29:c5:cd:50:05:9f:be:d2:e0:28:3c:0c:c2:75:c0:d9:a2:
d4:bf:7d:69:e0:86:25:6e:eb:99:9d:5a:8e:6f:55:8b:bc:c4:
a0:05:d1:c8:3b:0f:76:fd:91:b7:db:55:3b:87:d5:4e:0b:e1:
f1:63:0a:d7:6c:87:5f:bc:36:59:22:a2:99:d8:12:8c:97:bf:
e2:f1:92:c5:ed:4f:d3:41:15:ad:d2:39:1f:6a:d8:22:73:16:
65:fc:29:b1:05:2f:24:49:55:12:fe:e6:b8:e5:0e:83:87:bc:
9b:15:4b:5b:45:6a:12:19:14:63:b7:47:d9:73:b8:c3:b7:59:
3e:4a:4d:c8:bb:3a:0d:54:b6:e5:fe:a1:e9:f2:49:65:13:e3:
e7:69:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org