Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e203630373231.roa
File: 33312e362e31362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: EJIWgjbEjqCPt0qSpAbx6TsF6Fay5eXvccLJVgtWN1s=
Subject key identifier: 52:1B:E4:81:5D:3E:71:BC:51:8E:FF:7F:E8:99:4D:49:11:4F:10:DE
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 7057A334B7F54AB7DB9243DDA1E08186F544E1D5
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e203630373231.roa
Signing time: Wed 22 Mar 2023 15:29:43 +0000
ROA not before: Wed 22 Mar 2023 15:24:43 +0000
ROA not after: Wed 20 Mar 2024 15:29:43 +0000
asID: 60721
IP address blocks: 31.6.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:57:a3:34:b7:f5:4a:b7:db:92:43:dd:a1:e0:81:86:f5:44:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:43 2023 GMT
Not After : Mar 20 15:29:43 2024 GMT
Subject: CN=521BE4815D3E71BC518EFF7FE8994D49114F10DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:9f:76:1a:d4:12:05:39:f5:e3:5f:6f:25:
de:dc:be:20:40:1f:bb:c9:bd:36:7d:da:7b:e7:51:
1a:0f:d1:c8:f0:2b:1b:90:9a:90:30:35:38:15:14:
5c:f8:24:6a:64:64:31:0e:6a:f2:96:43:77:a2:41:
ac:60:6d:3b:e9:3c:8f:28:aa:ba:a5:a8:43:3f:b1:
26:c0:bd:2a:1f:94:14:9f:8e:9b:1a:e3:3a:57:cd:
ea:a2:1e:fc:7f:29:03:4a:77:c7:62:df:3d:37:08:
db:2a:2d:ab:0d:e7:6b:aa:96:8e:f3:21:40:30:66:
32:11:cd:2e:7f:a7:9f:ef:a4:54:4f:5c:f4:b1:47:
a7:ef:30:e9:13:27:3d:a2:e0:90:b1:4f:80:a5:59:
00:4f:3f:83:78:24:a5:d3:07:d1:43:4e:98:38:e5:
b3:6d:55:9a:b9:51:41:06:bc:ac:d6:9e:26:87:d7:
5a:76:81:8d:b9:6b:87:f9:71:07:75:cb:a8:b0:e6:
52:a6:db:9e:c8:0f:f6:95:31:81:aa:8b:61:ff:25:
83:ed:0c:68:2a:ad:8c:ad:20:32:5b:a5:84:7f:17:
b3:a7:d7:e0:19:a8:42:6b:d4:d9:25:6f:36:17:c3:
93:b4:a4:0f:ec:da:51:24:eb:36:6f:c0:5d:02:96:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:E4:81:5D:3E:71:BC:51:8E:FF:7F:E8:99:4D:49:11:4F:10:DE
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:95:de:25:a0:0e:81:aa:ae:79:a3:45:4c:09:88:c8:d0:ff:
e0:b2:89:f1:1a:01:59:91:fe:36:93:c5:e6:c4:38:d9:9c:38:
56:c2:95:5f:00:db:e0:3f:6e:0a:cd:44:68:c0:55:c2:43:2b:
a9:5c:88:2e:6b:96:9e:d8:fb:0c:c7:72:27:db:be:05:da:99:
1c:90:ed:2c:db:86:77:f1:12:71:ce:cc:bb:88:59:56:14:b6:
40:56:17:8f:e2:62:38:25:a9:f9:d0:4a:6a:0d:5c:f3:3c:46:
d3:a1:2a:e6:24:41:e7:12:d9:cb:9e:e0:96:0e:93:3c:0a:24:
02:17:d0:43:fd:fe:4c:b1:27:3b:68:06:cc:e9:98:02:f6:91:
9d:28:5f:62:d4:d9:9f:45:1a:73:f9:e4:b4:3d:06:76:e3:09:
da:2c:c5:6e:bf:be:e8:07:2e:e4:d9:5c:12:7f:56:bd:cb:d1:
59:f5:af:21:06:e4:b8:ee:1f:1f:0d:c4:60:3c:01:f6:c9:4b:
05:af:81:b2:1b:67:53:96:b4:49:5c:18:71:8a:36:50:b5:d6:
83:be:56:d2:20:32:69:26:19:a2:2a:dc:8e:e2:97:de:f9:49:
ff:cb:f6:d8:c7:a6:50:23:29:da:00:ac:71:12:92:ef:b4:80:
54:3f:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:10:42 2025 by rpki-client