Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
File: 33312e362e33332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: CAjPNElJgOqI3SiDFH1jodNCHM/6q24wxstqycaIGv8=
Subject key identifier: E3:38:02:2C:4F:BC:8A:FB:56:90:88:81:E6:6D:47:BC:2F:F8:3E:C7
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 55AE8F0CB60E9BB3BA605E16A86C3822E71C5C1D
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:44 +0000
ROA not before: Wed 22 Mar 2023 15:24:44 +0000
ROA not after: Wed 20 Mar 2024 15:29:44 +0000
asID: 61317
IP address blocks: 31.6.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ae:8f:0c:b6:0e:9b:b3:ba:60:5e:16:a8:6c:38:22:e7:1c:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:44 2023 GMT
Not After : Mar 20 15:29:44 2024 GMT
Subject: CN=E338022C4FBC8AFB56908881E66D47BC2FF83EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:1e:c5:29:db:c2:53:e1:7d:a4:90:25:7a:
36:5d:e6:06:f2:08:f9:3d:1b:43:83:12:60:e4:f5:
b5:db:f2:09:87:29:46:71:a3:37:99:66:11:90:4f:
bd:a9:2a:66:7a:b3:93:f9:9b:a8:21:73:57:93:5c:
35:20:30:40:65:74:28:2e:9a:56:5c:8a:bd:c4:f9:
d9:14:4c:30:ce:cb:8a:96:24:45:44:c7:f2:9b:55:
aa:bc:84:6a:50:a1:39:6e:a5:66:75:c9:61:49:81:
e6:22:41:2c:9c:49:f8:ba:04:19:d9:77:2e:a8:d2:
2e:7e:75:9d:b0:97:ad:a3:8b:4a:db:e8:be:e3:77:
ae:15:4b:d9:fc:a9:26:02:78:b2:60:a3:b3:95:25:
4f:46:b5:92:7d:3a:d5:d7:35:71:0f:2c:9a:f5:ed:
2c:49:18:6c:a1:28:a0:26:96:91:b8:4c:ff:b2:4d:
b8:46:5c:91:c5:3c:51:63:66:69:20:29:f5:1a:81:
e4:69:07:75:49:22:a2:3a:1f:95:5e:24:f3:4c:c3:
ac:b2:fa:e8:b4:08:76:db:2a:46:6a:70:2c:20:dd:
df:01:29:4a:62:08:38:13:41:19:3c:64:c9:70:02:
7b:99:a9:1e:f1:fa:e9:2b:4d:f9:c5:31:5f:36:58:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:02:2C:4F:BC:8A:FB:56:90:88:81:E6:6D:47:BC:2F:F8:3E:C7
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d6:8e:81:87:85:c4:01:85:b4:00:15:e2:10:e1:22:69:9c:
d2:b0:cd:58:30:41:0c:23:b2:5b:8b:6b:60:97:ad:ec:72:74:
ee:54:bf:a4:3f:60:e3:f7:f6:d2:d5:2c:c1:8a:18:12:de:37:
04:85:9d:a6:ee:48:e9:6c:f5:4b:50:63:ba:ae:06:5f:43:a5:
1d:0a:85:ef:a0:5d:a6:39:35:0f:31:1b:4e:20:4d:1e:7a:eb:
35:ca:96:a1:be:80:fd:2f:7e:6b:6f:2d:46:1a:1c:66:52:c9:
fe:4a:46:65:6e:93:a5:77:6e:5f:62:44:3e:93:58:92:4d:4d:
87:23:fc:bc:33:87:cb:b0:ac:e7:7b:36:44:a5:bb:97:ca:6f:
cd:e6:a6:52:9d:9f:db:ed:70:e6:f0:ea:a4:5a:02:6a:76:94:
35:05:dd:af:90:36:fb:79:b1:e8:e2:cc:4c:96:0f:5e:73:1f:
6b:82:3b:56:2b:7a:40:3a:8c:1f:cd:0f:e3:8e:ce:86:f7:47:
f4:6d:41:56:2a:61:bf:ee:be:67:10:51:af:e1:30:7d:71:f7:
76:b2:bb:88:c4:c8:3e:d6:60:6c:9f:9e:3a:18:0c:a7:2a:ec:
d3:e3:4d:4e:58:90:83:73:99:e5:8c:d0:71:29:d0:d7:81:30:
dd:e0:c1:6d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUVa6PDLYOm7O6YF4WqGw4IuccXB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDRaFw0yNDAzMjAxNTI5NDRaMDMxMTAvBgNV
BAMTKEUzMzgwMjJDNEZCQzhBRkI1NjkwODg4MUU2NkQ0N0JDMkZGODNFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVx7FKdvCU+F9pJAlejZd5gby
CPk9G0ODEmDk9bXb8gmHKUZxozeZZhGQT72pKmZ6s5P5m6ghc1eTXDUgMEBldCgu
mlZcir3E+dkUTDDOy4qWJEVEx/KbVaq8hGpQoTlupWZ1yWFJgeYiQSycSfi6BBnZ
dy6o0i5+dZ2wl62ji0rb6L7jd64VS9n8qSYCeLJgo7OVJU9GtZJ9OtXXNXEPLJr1
7SxJGGyhKKAmlpG4TP+yTbhGXJHFPFFjZmkgKfUageRpB3VJIqI6H5VeJPNMw6yy
+ui0CHbbKkZqcCwg3d8BKUpiCDgTQRk8ZMlwAnuZqR7x+ukrTfnFMV82WNfbAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU4zgCLE+8ivtWkIiB5m1HvC/4PscwHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTMzMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYhMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ1o6Bh4XEAYW0ABXiEOEiaZzSsM1YMEEMI7Jbi2tg
l63scnTuVL+kP2Dj9/bS1SzBihgS3jcEhZ2m7kjpbPVLUGO6rgZfQ6UdCoXvoF2m
OTUPMRtOIE0eeus1ypahvoD9L35rby1GGhxmUsn+SkZlbpOld25fYkQ+k1iSTU2H
I/y8M4fLsKznezZEpbuXym/N5qZSnZ/b7XDm8OqkWgJqdpQ1Bd2vkDb7ebHo4sxM
lg9ecx9rgjtWK3pAOowfzQ/jjs6G90f0bUFWKmG/7r5nEFGv4TB9cfd2sruIxMg+
1mBsn546GAynKuzT401OWJCDc5nljNBxKdDXgTDd4MFt
-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org