Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
File: 33312e362e33322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: P0EtBztHA0YEQbPYCTHD9b+2rMWeU7ShnvBmYo2eW/E=
Subject key identifier: 7F:8C:E5:2F:D2:0B:4C:68:52:75:A1:6F:76:3E:40:11:16:E3:B3:93
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 63F2C9D4E1FC19406339B59AC1B284A4EF8597D5
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:44 +0000
ROA not before: Wed 22 Mar 2023 15:24:44 +0000
ROA not after: Wed 20 Mar 2024 15:29:44 +0000
asID: 61317
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f2:c9:d4:e1:fc:19:40:63:39:b5:9a:c1:b2:84:a4:ef:85:97:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:44 2023 GMT
Not After : Mar 20 15:29:44 2024 GMT
Subject: CN=7F8CE52FD20B4C685275A16F763E401116E3B393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:40:4e:f3:97:d7:df:5a:cd:a9:64:ed:ed:
3e:f2:e1:16:2f:33:2d:6d:44:a2:26:3c:29:48:73:
f0:a3:41:28:00:35:e1:1b:f5:82:c7:b5:49:7e:85:
2c:0b:ac:17:c1:1f:35:ef:f0:59:47:e8:28:9a:46:
4e:4a:e2:0f:64:a2:df:2b:d2:72:f0:53:d5:6e:b3:
f1:95:6a:26:79:f9:5d:c5:f6:f5:45:a6:a0:b9:e7:
4b:63:09:08:d3:46:e7:00:21:d1:a3:5b:95:23:2e:
12:10:1a:17:e2:1b:18:4b:1e:4d:80:e4:82:95:6e:
b8:c9:cf:21:0e:1a:3c:36:93:0c:f7:26:56:18:19:
ed:a1:df:8e:8f:77:96:b4:12:d3:ee:7d:12:77:6b:
c1:c5:47:1a:69:3f:04:80:30:1c:b8:c0:a0:0c:ef:
d7:ce:4e:2a:d5:02:ba:86:b2:66:7a:77:b9:9d:5f:
12:ba:fa:c2:e6:60:47:ad:b3:46:1c:21:c9:5c:19:
2b:2e:1f:31:13:4e:4e:5b:7b:6b:28:7c:26:4f:76:
54:d1:b9:b7:57:4b:c6:be:b6:49:79:28:32:4f:5c:
ca:c1:b4:0d:54:34:1c:47:a9:4c:de:2d:7a:e0:e4:
97:bd:07:5b:07:c2:01:3c:87:ac:c4:ac:5e:c0:c2:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:E5:2F:D2:0B:4C:68:52:75:A1:6F:76:3E:40:11:16:E3:B3:93
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:01:ce:bd:17:19:cf:80:b9:00:88:e6:2f:04:b0:be:2c:5d:
5a:be:f2:0b:35:0c:70:a9:1e:49:31:fd:00:2b:b8:f4:e6:46:
3b:c3:91:c0:29:39:bc:ac:06:d6:19:71:51:79:02:a6:42:10:
2d:63:46:bb:cf:e2:eb:65:77:8a:97:48:8e:52:9e:18:ea:d6:
3b:3d:da:1c:75:39:62:c6:13:6c:90:50:be:30:37:af:c5:d2:
11:17:4a:ad:2c:89:2f:2e:42:40:09:30:99:59:ac:9a:90:0f:
6c:18:16:51:71:79:0e:7b:37:3e:56:2d:5b:61:26:a0:49:3e:
5f:df:ff:69:6e:b1:5d:e4:1b:a2:50:8d:97:85:b5:6c:05:7c:
7f:d2:2b:ed:0c:38:1c:ee:d7:d0:86:ac:87:77:15:d3:1e:9e:
14:19:d4:e4:99:9a:76:88:03:2e:c7:1a:89:aa:5f:58:a0:11:
64:6b:88:17:0e:09:2f:f7:69:49:71:32:a5:68:9d:fd:73:2a:
80:8f:a3:fa:47:a2:1d:bb:6d:32:e6:b1:8c:25:79:28:d9:86:
0b:cd:cb:b4:ee:98:86:d3:07:d5:8a:c5:ab:c0:2f:c4:80:1f:
d6:bc:55:39:84:f6:6b:d0:de:35:a5:71:3f:95:45:5d:36:1a:
de:cd:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org