Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3232203d3e20313734.roa
File: 33312e362e31322e302f32322d3232203d3e20313734.roa (raw, json)
Hash identifier: p72hMS6ZviLfqAxtZZAE0vQJ3fpWZW/NA17NxR2pOv4=
Subject key identifier: 5E:0C:27:D9:7C:B5:32:96:3F:2F:43:7F:F8:99:B5:39:57:F0:E0:3F
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 4B714042CF934B1EB074C9993CAAAEECBE99C7B2
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3232203d3e20313734.roa
Signing time: Tue 16 May 2023 11:39:22 +0000
ROA not before: Tue 16 May 2023 11:34:22 +0000
ROA not after: Tue 14 May 2024 11:39:22 +0000
asID: 174
IP address blocks: 31.6.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:71:40:42:cf:93:4b:1e:b0:74:c9:99:3c:aa:ae:ec:be:99:c7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: May 16 11:34:22 2023 GMT
Not After : May 14 11:39:22 2024 GMT
Subject: CN=5E0C27D97CB532963F2F437FF899B53957F0E03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:1f:3b:85:40:c0:ae:68:29:e8:1b:d3:27:
20:ea:7e:dd:fa:2e:87:8e:7c:3a:86:6b:08:47:83:
e2:7f:27:38:f2:86:de:43:d1:56:95:6e:a0:86:4b:
7c:ba:88:07:2d:75:c0:3d:77:2f:57:fc:0c:51:3f:
bd:ae:91:d7:1d:7f:46:61:47:d8:53:de:ee:36:7c:
94:f5:69:e0:77:34:04:3b:20:93:d7:90:d8:ea:44:
ca:26:48:80:87:3e:a7:af:9f:10:4d:c3:9c:c3:89:
ae:fd:b8:7b:11:b2:1a:0e:cf:b5:a2:1b:d0:51:65:
a8:b1:75:90:83:82:86:53:39:f3:d6:93:35:1c:a9:
18:3d:a6:ab:b1:69:8e:71:52:22:da:b5:1c:a5:d9:
9f:fb:7b:4f:3f:f9:c7:02:2d:be:00:f1:9c:cc:ac:
63:53:a2:28:68:23:fd:0e:5f:01:e8:93:0e:48:6b:
02:f2:b9:35:37:0a:6c:e3:48:da:89:81:ad:4a:ce:
05:ab:d2:7a:66:2c:db:36:56:79:dd:90:61:b9:06:
17:6e:e3:32:cf:c6:70:40:1f:e6:d9:a9:85:43:96:
54:7b:9b:80:aa:27:f0:e0:63:cb:0f:53:58:77:8a:
72:14:9c:80:18:da:b3:df:db:17:cf:d2:b4:f5:5a:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0C:27:D9:7C:B5:32:96:3F:2F:43:7F:F8:99:B5:39:57:F0:E0:3F
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3232203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:8f:31:e9:39:53:ec:1b:5f:70:d8:9d:06:1e:83:80:e5:2a:
84:ef:c7:7c:38:04:ec:8e:90:bc:5a:55:f3:70:9b:d5:02:52:
9e:05:ef:45:36:cc:c9:c4:83:32:6c:27:a3:36:b6:42:5c:49:
b3:a6:32:e7:bc:0c:8a:c5:eb:4b:36:56:e1:97:6b:c6:0c:93:
58:a0:9b:ee:1f:fe:65:18:45:19:70:93:78:76:24:8b:21:bf:
5c:dc:54:f3:f1:bc:d7:7a:6a:98:44:16:ed:66:14:e2:a0:ec:
8d:ee:2c:61:73:ca:ad:b1:fa:e1:a0:92:0a:c1:a3:02:c2:38:
f9:85:58:0d:ed:44:49:4a:80:99:d3:cd:e4:04:16:2a:a7:af:
a6:31:fb:b9:a9:da:be:ba:ac:e8:40:fb:51:60:79:08:e3:fd:
aa:91:69:4d:d9:9b:a5:12:79:32:44:37:07:74:46:b8:68:77:
ac:3f:52:22:c1:b4:2e:b1:64:70:36:30:2d:37:e0:6a:78:a1:
fe:f5:c9:c5:b9:28:60:f7:82:f0:41:08:c5:cb:7a:a6:94:d9:
35:16:d3:30:58:45:d4:84:4a:e2:f4:1e:9c:e4:65:a7:9b:28:
b5:ec:73:f6:cd:73:95:6f:93:bf:de:ce:b7:48:2a:b3:cf:b6:
c1:81:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:05:59 2025 by rpki-client