Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20383334.roa
File: 33312e362e322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xdOM1bIaZfTR1YgG/1I88+q2FrGyM2rFN8P3JjsBj1s=
Subject key identifier: 63:01:E1:E4:BC:36:0C:66:51:2D:22:DB:FE:94:67:48:41:5E:20:50
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 16C399A95B687C0F831A959AF78F5ECFAA982969
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:42 +0000
ROA not before: Wed 22 Mar 2023 15:24:42 +0000
ROA not after: Wed 20 Mar 2024 15:29:42 +0000
asID: 834
IP address blocks: 31.6.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c3:99:a9:5b:68:7c:0f:83:1a:95:9a:f7:8f:5e:cf:aa:98:29:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:42 2023 GMT
Not After : Mar 20 15:29:42 2024 GMT
Subject: CN=6301E1E4BC360C66512D22DBFE946748415E2050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:00:98:f9:42:80:4d:c7:bc:90:14:f2:d1:
31:3a:9d:bb:d3:90:f3:64:24:bb:c0:4c:9e:79:e6:
02:14:39:10:29:7d:bc:ce:28:4a:37:a0:e9:85:3d:
d8:b6:82:ab:44:83:71:8e:7a:b3:e6:69:76:af:01:
39:3a:5b:30:d4:15:73:03:47:32:97:25:22:22:c6:
70:a2:be:9d:89:d1:c2:c8:90:8b:48:30:90:a3:c7:
37:51:8d:99:f9:16:96:66:d9:45:86:87:f3:c1:f4:
5f:6e:23:8e:2f:9a:53:8d:20:cd:2a:92:72:71:25:
23:28:56:ff:ea:15:01:b8:6e:e1:fd:3e:6b:21:0a:
b7:80:43:e5:27:c0:44:96:15:48:e0:f0:ef:dc:68:
09:49:9d:e5:f3:5f:a2:e5:a9:6e:63:57:b9:ac:05:
16:b4:50:b8:38:36:fd:68:87:de:b8:1d:5c:34:78:
9f:97:e8:45:23:b3:c0:72:de:23:1d:7f:60:96:a8:
17:72:ef:2e:cc:2f:0c:f2:59:dd:6a:2a:9d:24:62:
66:02:9e:4a:44:49:58:26:80:d4:d9:b5:37:fb:4b:
2b:f4:82:75:e9:8d:b3:6d:10:d2:35:78:7a:2b:47:
5d:5f:c9:16:8d:8b:6c:c7:61:b8:d2:64:ca:15:39:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:E1:E4:BC:36:0C:66:51:2D:22:DB:FE:94:67:48:41:5E:20:50
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.2.0/24
Signature Algorithm: sha256WithRSAEncryption
10:80:32:7a:ee:08:4c:d0:21:47:4b:cc:64:88:1a:91:01:d8:
31:bf:8f:2a:1e:69:c9:6b:6e:c1:c2:7d:0d:32:27:0f:c6:0b:
30:3d:8a:bd:7e:c6:74:0d:5d:d0:98:ce:6a:02:11:e9:7e:ed:
a3:48:a3:84:19:c8:c0:6a:07:b6:c2:51:36:c8:7a:28:04:99:
22:c0:e9:0e:bc:17:80:d5:50:aa:4a:d0:3d:79:61:81:ef:7e:
24:a0:51:19:6c:cd:6b:ab:0a:a0:2e:a0:3f:a7:9a:c0:b4:9a:
01:af:1e:3c:26:ae:82:01:37:43:5d:1c:99:d5:0f:f6:a9:da:
a2:69:f4:89:85:13:c1:f3:ed:a8:dd:9c:e5:ca:d6:16:9b:0e:
c7:38:13:ba:79:7e:bc:70:b1:c4:27:77:c6:65:3f:f3:ea:60:
c2:c5:53:da:4d:bf:87:2a:5c:eb:d7:03:18:ac:a5:ec:2b:a6:
ac:7c:9c:e0:e5:e3:ec:1d:b6:3d:3e:3d:57:80:38:e0:09:b1:
67:e7:5d:db:c3:22:9c:7b:e1:e8:9e:f9:93:11:97:06:6d:5e:
89:b8:a9:ae:ac:a6:3e:90:7c:6b:f5:8d:53:fb:0c:30:be:5d:
2d:c2:98:9a:3a:8d:a7:f3:c0:10:0e:0c:5c:91:c4:2c:a9:61:
2f:81:4d:d7
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUFsOZqVtofA+DGpWa949ez6qYKWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDJaFw0yNDAzMjAxNTI5NDJaMDMxMTAvBgNV
BAMTKDYzMDFFMUU0QkMzNjBDNjY1MTJEMjJEQkZFOTQ2NzQ4NDE1RTIwNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/ACY+UKATce8kBTy0TE6nbvT
kPNkJLvATJ555gIUORApfbzOKEo3oOmFPdi2gqtEg3GOerPmaXavATk6WzDUFXMD
RzKXJSIixnCivp2J0cLIkItIMJCjxzdRjZn5FpZm2UWGh/PB9F9uI44vmlONIM0q
knJxJSMoVv/qFQG4buH9PmshCreAQ+UnwESWFUjg8O/caAlJneXzX6LlqW5jV7ms
BRa0ULg4Nv1oh964HVw0eJ+X6EUjs8By3iMdf2CWqBdy7y7MLwzyWd1qKp0kYmYC
nkpESVgmgNTZtTf7Syv0gnXpjbNtENI1eHorR11fyRaNi2zHYbjSZMoVOZFXAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUYwHh5Lw2DGZRLSLb/pRnSEFeIFAwHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTMyMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYCMA0GCSqGSIb3
DQEBCwUAA4IBAQAQgDJ67ghM0CFHS8xkiBqRAdgxv48qHmnJa27Bwn0NMicPxgsw
PYq9fsZ0DV3QmM5qAhHpfu2jSKOEGcjAage2wlE2yHooBJkiwOkOvBeA1VCqStA9
eWGB734koFEZbM1rqwqgLqA/p5rAtJoBrx48Jq6CATdDXRyZ1Q/2qdqiafSJhRPB
8+2o3ZzlytYWmw7HOBO6eX68cLHEJ3fGZT/z6mDCxVPaTb+HKlzr1wMYrKXsK6as
fJzg5ePsHbY9Pj1XgDjgCbFn513bwyKce+HonvmTEZcGbV6JuKmurKY+kHxr9Y1T
+wwwvl0twpiaOo2n88AQDgxckcQsqWEvgU3X
-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org