Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139312e302f32342d3234203d3e203631333137.roa
File: 3137382e3230382e3139312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: AiTK83L4Ol3AnXpMMlm6qyHcXUxtyNcuJYwh/5Tjsg8=
Subject key identifier: 56:C2:81:11:6E:D4:2E:78:B0:85:41:A8:14:A7:62:B8:EF:D3:06:72
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 44A8A4CBB359C6B784DDAD52AA1B0B6C946D87D7
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:41 +0000
ROA not before: Wed 22 Mar 2023 15:24:41 +0000
ROA not after: Wed 20 Mar 2024 15:29:41 +0000
asID: 61317
IP address blocks: 178.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a8:a4:cb:b3:59:c6:b7:84:dd:ad:52:aa:1b:0b:6c:94:6d:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:41 2023 GMT
Not After : Mar 20 15:29:41 2024 GMT
Subject: CN=56C281116ED42E78B08541A814A762B8EFD30672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:bb:9d:5f:cc:1a:0a:c8:d3:64:9f:22:43:
35:76:2b:aa:8c:66:b2:41:4e:a2:22:53:c9:3a:63:
39:eb:fe:90:40:51:6a:1b:28:be:af:29:ac:c7:d8:
e6:43:06:55:96:81:43:be:32:63:e4:74:9b:6a:46:
ef:c1:ca:1f:99:fe:12:f3:ac:5f:c5:1e:01:b3:66:
aa:5b:71:87:3c:83:0e:0d:e3:ab:21:58:ba:b5:4f:
2d:71:88:5b:9b:80:31:0d:c2:38:df:f7:c5:67:13:
63:83:cb:a5:e8:f8:24:df:b4:e3:4c:64:ca:44:7e:
fd:8b:26:6d:c7:9c:29:66:54:7e:71:a1:9f:2e:e4:
3b:24:26:23:b9:dd:fc:1a:fa:38:6a:73:c1:83:80:
14:89:88:31:12:53:cb:85:07:d4:d8:27:e8:14:15:
ad:50:fa:ed:b7:13:75:76:75:bc:f2:03:ee:b3:e0:
6a:e9:86:c9:31:0b:27:f8:28:db:26:6b:1c:6c:f7:
7e:83:45:fe:c7:ad:05:d2:c3:4d:03:0a:d0:1e:e7:
17:08:79:ac:f7:ec:11:c0:45:30:0e:b4:c5:57:e5:
c9:a8:d0:bc:6e:ac:12:28:ce:cf:e3:8e:67:ec:a5:
da:fc:18:00:f8:49:21:83:0e:10:40:d5:88:18:a7:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:81:11:6E:D4:2E:78:B0:85:41:A8:14:A7:62:B8:EF:D3:06:72
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3139312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:75:26:50:a5:23:49:e7:0f:c2:61:2d:97:c1:37:7a:fa:48:
43:7d:e4:68:24:0f:c1:1d:86:9a:bf:e1:e2:92:28:af:c2:ce:
fc:e7:1a:88:dd:31:39:12:0a:00:d8:cd:b1:9c:d8:d4:7d:f5:
dc:a4:51:38:a6:e3:b3:e9:1f:73:66:ed:ca:04:42:69:d5:47:
a6:ed:80:93:a0:84:23:5f:6b:01:dd:b0:32:de:97:69:b3:d1:
81:cf:e7:8f:be:07:aa:e6:f7:aa:c4:fd:84:95:ed:d4:fe:c8:
90:5c:98:5f:4d:0d:1a:01:e8:93:93:b2:b4:f5:ae:fe:af:96:
d6:58:04:59:d8:2a:37:a6:26:96:f3:50:6f:b9:75:98:49:ef:
ca:28:70:40:ee:71:c1:a4:f3:6c:16:4b:e0:1a:ff:a1:00:69:
35:09:35:83:8c:d8:f8:8d:d9:36:3b:8a:82:c9:34:b4:4b:db:
6d:80:e4:b1:0f:ca:7c:06:dd:00:7d:75:6b:72:1a:04:e3:d3:
42:73:cb:d5:9f:ca:6e:b5:1a:f4:77:cc:ed:ce:7b:93:12:ad:
f1:04:c8:3b:1b:56:10:03:1a:fa:6e:7a:ff:36:38:4a:8c:96:
eb:4e:3b:84:79:53:9c:66:5a:c5:f0:0a:36:1e:65:f5:b7:28:
f7:6f:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org