Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139302e302f32342d3234203d3e203631333137.roa
File: 3137382e3230382e3139302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: JZ4WPpezrodXGFWvw4ffhDYItrFaVusRPWLE8nQ7HEQ=
Subject key identifier: 6B:AA:4D:CB:FA:8C:F1:D1:72:66:0C:F6:0D:C5:20:80:93:71:D0:96
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 176909BB3858EC6DBE6AA33A5CB97F6EDDA80490
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139302e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:41 +0000
ROA not before: Wed 22 Mar 2023 15:24:41 +0000
ROA not after: Wed 20 Mar 2024 15:29:41 +0000
asID: 61317
IP address blocks: 178.208.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:69:09:bb:38:58:ec:6d:be:6a:a3:3a:5c:b9:7f:6e:dd:a8:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:41 2023 GMT
Not After : Mar 20 15:29:41 2024 GMT
Subject: CN=6BAA4DCBFA8CF1D172660CF60DC520809371D096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:2f:72:12:59:26:58:33:a4:39:85:e1:ca:
23:8f:f9:00:d3:34:43:41:97:a2:42:6d:3a:ba:a6:
34:a6:9e:f2:a5:e0:6f:49:36:6f:b8:6c:c1:37:5a:
8e:96:9b:e7:c7:32:e2:a0:02:9a:94:4c:f8:92:78:
3c:10:a2:55:2a:22:35:67:67:86:f7:5c:2e:25:c0:
70:3b:1d:46:ab:f9:3b:bd:2e:3a:38:65:d0:1b:db:
0e:43:c8:07:8c:06:71:15:c6:68:ee:a3:db:60:be:
23:66:fd:87:03:d8:5f:ea:4d:08:84:f1:26:19:51:
07:e3:5b:cb:3b:0e:18:91:81:32:31:30:9f:36:e2:
56:ed:44:b9:56:b0:45:eb:f3:fa:98:95:ca:d9:d7:
18:74:70:f3:9e:ff:35:46:97:d7:63:77:82:94:da:
08:09:bf:01:56:40:4c:94:a2:9e:66:37:7f:80:93:
2b:94:4f:92:6f:f0:1e:de:ee:62:c0:c7:be:21:9f:
78:8b:a3:59:78:ab:df:ce:f8:38:cb:db:4d:08:db:
4a:4c:68:8b:dd:54:bd:42:e4:69:ae:7e:6e:5a:ef:
b6:ca:57:b5:22:59:a3:0c:a4:e0:7c:dd:0e:47:1e:
bd:46:b0:81:37:80:70:89:67:af:93:31:4a:76:25:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:4D:CB:FA:8C:F1:D1:72:66:0C:F6:0D:C5:20:80:93:71:D0:96
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3f:d8:ca:9f:2a:ea:d0:b0:a0:87:0c:1e:1f:a0:2d:d3:4b:
91:32:16:6f:19:d1:07:69:c2:bc:39:cc:d9:9b:5a:bd:f1:5b:
d6:81:79:62:9b:db:34:b5:42:cc:27:bc:63:97:52:09:68:ef:
d3:e6:97:6d:79:b2:10:f1:62:18:c0:e1:74:f5:c5:56:ed:d9:
53:58:4a:f3:41:15:79:74:6f:cb:5f:83:a2:0f:b3:88:60:12:
9e:43:12:05:45:f8:25:db:47:53:2f:27:c4:af:e4:03:96:4a:
52:f2:e0:e1:70:28:21:22:a5:08:3f:40:08:ef:83:74:a7:17:
31:db:e5:e4:b7:6e:43:b9:16:8b:1e:d7:2e:64:b7:a1:b9:c6:
99:b9:0b:3b:a6:b4:50:18:0b:8b:fd:f6:23:c9:d2:f0:77:f8:
0f:9b:c4:8f:93:aa:79:fa:cf:1f:14:50:f4:f0:bc:e9:69:b0:
f0:f1:30:47:5e:90:34:3d:30:c2:f1:bd:63:3f:78:47:f9:76:
8e:d9:cf:31:94:37:df:39:76:a7:b7:15:63:d8:4d:74:53:4e:
86:9f:f6:27:17:51:c1:bd:d0:62:a9:23:5c:08:8e:e7:24:41:
d6:8a:af:72:ce:ad:05:24:cd:b4:15:6c:21:66:1a:21:3d:f4:
4d:af:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org