Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e20383334.roa
File: 33312e362e31362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nWhv6sKPNNtuQtdCVq0IzCYN+ZHY8kETMwNgsv5FFDg=
Subject key identifier: 68:E4:82:C2:D9:DA:BD:DE:3B:35:ED:00:2C:31:2B:67:13:36:17:A8
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 27BBCB3BA191B99F0CDAA13A83DFB3BD77607AFD
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:43 +0000
ROA not before: Wed 22 Mar 2023 15:24:43 +0000
ROA not after: Wed 20 Mar 2024 15:29:43 +0000
asID: 834
IP address blocks: 31.6.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bb:cb:3b:a1:91:b9:9f:0c:da:a1:3a:83:df:b3:bd:77:60:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:43 2023 GMT
Not After : Mar 20 15:29:43 2024 GMT
Subject: CN=68E482C2D9DABDDE3B35ED002C312B67133617A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:42:17:e1:e1:69:9c:86:52:9b:aa:d4:50:
15:cf:b6:bd:43:34:1e:66:15:04:0e:a4:c5:b3:70:
0f:7a:ee:d6:01:e7:42:38:ef:13:f5:0a:b7:dd:19:
bd:fd:e9:73:dd:3b:59:ef:7d:44:de:13:01:8a:be:
ba:d6:04:fd:2f:dd:0a:10:9c:f7:11:f4:98:9c:29:
24:22:8c:5f:7c:53:01:99:23:8e:f5:19:49:17:b3:
30:0d:64:e0:81:ea:e7:ab:c0:cf:12:6f:b5:9e:14:
be:2f:0d:69:c0:0b:68:11:cf:b9:09:74:ae:fd:eb:
42:6a:a5:33:e7:d7:8f:e5:3a:6a:f7:94:fb:a9:ae:
7f:1c:3d:4c:ee:31:55:5e:44:cd:b2:18:7f:70:cd:
0e:d7:a0:0b:c8:22:5e:d9:5a:d0:bf:01:82:ad:26:
f9:2b:ca:51:fa:8c:8c:ca:05:d0:28:d0:74:80:5d:
a1:83:c0:0a:93:8f:ca:62:a2:43:0e:ee:70:12:87:
41:74:51:12:1b:6c:f7:03:c0:ba:10:bd:80:22:17:
e2:e2:fe:24:34:e3:34:65:55:04:ac:a0:4d:87:d2:
f9:88:8b:f1:9c:0b:4d:e9:2e:76:47:8d:b9:d3:61:
2d:32:37:4d:eb:7a:0e:05:31:c5:80:fe:e2:e4:13:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E4:82:C2:D9:DA:BD:DE:3B:35:ED:00:2C:31:2B:67:13:36:17:A8
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f9:92:c7:26:08:30:82:5b:4c:72:2d:6d:1b:cf:7b:c5:67:
29:01:d7:eb:10:27:88:b9:fc:f5:c5:2d:ee:38:99:8b:d2:81:
15:06:1e:56:07:35:02:25:07:9f:15:47:5c:9f:90:43:aa:8d:
33:ee:cc:ee:56:51:66:6d:5b:4b:22:3c:a8:5c:9f:2a:2c:e0:
04:c9:f4:9a:08:35:20:f3:88:2f:c4:b8:cc:1e:5e:f2:27:71:
b0:bb:c6:67:14:0f:e3:2a:c0:ac:9e:d5:09:d9:7b:f3:3d:91:
0c:8b:9c:ca:83:6c:51:71:b0:96:bf:f8:8e:72:e8:92:cf:4f:
c4:e6:a8:34:df:cc:3e:4f:cc:8e:c0:d3:5b:77:ab:90:75:0d:
0b:26:7d:74:4c:0c:43:39:aa:9a:1f:02:53:c3:96:72:db:7b:
70:19:0e:cd:f2:28:da:17:29:23:f8:82:df:d9:39:e3:95:5d:
9f:5d:e6:95:72:84:8a:32:16:dc:58:ce:cb:17:e7:0e:5d:4b:
e9:5f:7e:88:62:48:49:9e:de:00:f9:02:73:bc:f4:5e:f8:df:
b8:d1:1b:fe:b9:31:87:78:57:a5:3d:8a:de:a8:1f:95:e6:39:
ca:de:3d:bb:cb:21:af:56:76:ed:37:fd:9b:b3:5b:84:9f:e2:
a7:a5:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org