Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e20383334.roa
File: 33312e362e312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IyK4oDxIt21JcV0Vw571iqolgNUxpnyZ7QUHnMZq25M=
Subject key identifier: 53:01:C3:4C:EA:32:82:FB:73:CA:16:AB:46:EF:45:F7:98:75:8B:46
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 464F56422A824E2CC2207878D6CD82E2F62013A0
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:42 +0000
ROA not before: Wed 22 Mar 2023 15:24:42 +0000
ROA not after: Wed 20 Mar 2024 15:29:42 +0000
asID: 834
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4f:56:42:2a:82:4e:2c:c2:20:78:78:d6:cd:82:e2:f6:20:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:42 2023 GMT
Not After : Mar 20 15:29:42 2024 GMT
Subject: CN=5301C34CEA3282FB73CA16AB46EF45F798758B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:31:4d:84:51:8b:88:1c:b5:10:02:90:02:
53:f1:ce:7d:4f:6b:71:db:b5:16:26:d4:3c:f3:e9:
fe:a9:4b:ca:08:73:cf:59:d9:6d:af:37:24:e7:a9:
96:89:67:ea:ec:3f:c5:2d:e2:58:bc:ab:e8:af:6e:
52:11:5b:1f:1e:f9:4f:ea:78:3c:70:43:a3:05:7b:
14:23:40:bc:95:91:12:d1:68:3f:97:3b:9f:be:74:
40:5b:9e:53:83:8a:27:f8:80:4d:91:6e:cc:d4:73:
6f:24:6f:7b:cd:cc:23:d3:07:71:6d:3d:0d:3c:6f:
bf:19:b6:bb:c1:07:57:f0:ec:97:ce:64:41:d6:4e:
01:12:25:62:e7:6a:89:a2:4e:35:5e:fc:29:f1:95:
55:7d:23:b9:f3:87:21:a6:27:3e:61:97:65:98:70:
13:2f:fa:cc:ba:62:22:6d:ce:c9:78:88:75:fd:a6:
f6:11:e0:7c:45:8f:bb:e9:9b:0d:84:d6:d9:94:78:
5e:dd:17:e9:da:4d:bf:86:c6:e2:fb:4a:fb:c2:7e:
6d:2f:ba:cf:0c:0c:1f:e2:33:ac:e0:5c:47:8c:e0:
b0:8c:ae:fe:13:16:12:44:c7:f6:15:01:d3:63:ec:
34:13:d0:d3:37:6c:08:73:75:99:cd:64:b9:1c:35:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:C3:4C:EA:32:82:FB:73:CA:16:AB:46:EF:45:F7:98:75:8B:46
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
23:10:bc:18:1b:e1:37:82:09:e1:c7:4b:24:0c:a4:50:58:a7:
b0:b9:bd:9b:14:ed:4a:e7:db:47:c6:2d:39:51:37:8d:ca:e5:
a4:a7:18:40:72:a3:8e:5b:91:8b:a2:e0:9e:06:5e:37:7b:d6:
22:3d:4e:3a:1f:f6:72:ab:30:a2:2f:04:c7:23:d0:67:95:ce:
58:db:47:19:a4:b7:01:ac:ab:1a:78:bd:ef:9a:1e:29:b1:d9:
4b:31:50:a3:01:96:ec:23:43:bb:06:57:f7:a2:00:f0:d3:2c:
c8:75:12:f8:03:9b:f9:09:9c:7b:e2:37:3f:fa:e2:53:6b:2f:
a9:ed:38:de:46:91:d9:2d:88:ce:9b:ad:a6:b0:a6:e1:61:05:
f5:e2:76:e5:63:32:2b:1b:ee:83:80:87:df:67:38:33:2b:40:
4e:cb:f3:7a:b2:78:f6:30:f6:7a:ce:99:2d:e4:76:f4:24:43:
0c:ad:95:87:28:7d:3d:f1:69:ee:f6:f0:24:19:a7:6f:f7:fe:
54:b4:a1:0e:bb:76:60:c0:8e:03:13:dc:bd:90:fe:e4:27:63:
3a:6c:a9:15:67:cf:32:70:74:e9:2a:56:81:e9:70:76:5e:68:
b6:db:da:ae:fa:f2:89:f1:ba:e9:fd:7d:94:70:37:f4:e6:0b:
4c:ef:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org