Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33342e302f32342d3234203d3e203632353739.roa
File: 33312e362e33342e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier: payX1ijTtCTU8rr+ayR5ZQ21WXbleH3kym3tVw282/Q=
Subject key identifier: 22:6C:A3:CE:E5:A2:25:0D:D4:BC:8C:14:84:AF:91:F8:15:FA:11:6F
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 1250849832868BDBD426D5237801D36380E10E30
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33342e302f32342d3234203d3e203632353739.roa
Signing time: Wed 22 Mar 2023 15:29:44 +0000
ROA not before: Wed 22 Mar 2023 15:24:44 +0000
ROA not after: Wed 20 Mar 2024 15:29:44 +0000
asID: 62579
IP address blocks: 31.6.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:50:84:98:32:86:8b:db:d4:26:d5:23:78:01:d3:63:80:e1:0e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:44 2023 GMT
Not After : Mar 20 15:29:44 2024 GMT
Subject: CN=226CA3CEE5A2250DD4BC8C1484AF91F815FA116F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:23:05:0f:82:b2:50:e0:fb:f4:ed:75:da:
a8:78:c0:3c:5b:57:79:7e:fa:fa:53:c9:74:42:e1:
8a:c0:ea:00:ba:9c:04:63:47:a3:38:d8:3a:71:73:
89:33:49:80:f2:9f:d6:fe:58:b5:a8:34:8a:6e:ef:
d2:74:f0:02:ef:23:9f:e0:5d:05:59:33:64:11:2a:
17:a7:f9:94:6d:5d:b0:ba:25:7f:58:23:5f:d2:ac:
45:ea:38:c7:72:49:45:05:08:23:ce:25:11:2d:77:
98:2c:ab:7a:4d:ce:17:80:67:75:76:be:ed:ac:da:
74:32:b9:65:b9:71:69:8e:30:5a:a1:54:ba:f3:fc:
32:93:a0:2b:5e:62:b9:6a:23:69:00:20:ca:5c:e9:
43:01:47:7a:47:22:e8:ee:43:ea:81:21:95:55:a8:
07:fe:36:91:77:7e:d9:97:4a:ec:ca:ee:76:69:c8:
b1:37:68:22:80:81:c7:42:4c:0d:87:72:0c:78:07:
59:f9:ab:9d:48:f7:f3:0d:25:86:f3:09:88:37:0b:
f7:08:db:45:a3:6f:2e:d8:ff:21:ff:08:79:99:a0:
bc:cb:d2:16:ee:f0:e1:02:c8:84:e1:5c:f7:23:ea:
6b:7e:c3:74:45:f2:17:bc:94:e3:46:76:80:8d:cd:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:A3:CE:E5:A2:25:0D:D4:BC:8C:14:84:AF:91:F8:15:FA:11:6F
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33342e302f32342d3234203d3e203632353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e9:e3:f1:a0:2d:26:a9:a5:ff:05:be:04:36:21:5d:c7:b3:
fd:21:9c:7f:6a:4a:5c:41:79:1a:06:13:b0:82:b8:a5:83:f4:
9a:c2:d1:ab:2d:cf:c9:08:7e:fd:89:5d:30:34:40:25:4e:3c:
2a:e5:01:99:52:10:95:84:5d:56:65:50:d7:7f:91:46:a0:c5:
f6:21:8e:61:fd:28:e1:cf:6c:90:5a:e6:1f:b9:fc:37:0c:d0:
aa:3d:ca:f7:47:b1:fa:07:01:e1:15:4c:26:c6:82:bf:1c:44:
e7:7a:8a:b0:54:e1:1f:4c:da:6e:e3:49:70:03:3b:db:85:df:
a5:53:02:1a:33:4e:d7:89:9b:b2:7e:1b:c3:eb:7f:35:7e:0c:
ca:3d:8d:27:f2:9b:5c:db:6d:59:2a:92:16:ad:ef:53:eb:b0:
08:ee:d7:cd:b5:de:55:b5:eb:5e:5c:dd:2f:fe:59:80:f7:f4:
6f:c6:62:75:77:09:e9:05:76:ef:62:99:56:01:cb:b2:15:15:
fc:64:4a:c8:91:e8:fb:07:6c:4f:a7:9a:70:9e:24:8d:48:64:
8c:15:ae:62:2e:5a:a2:d2:92:4d:6d:a5:24:cd:79:89:7f:f2:
00:a3:6e:7c:51:c8:9b:67:8a:ea:ab:ec:43:88:cb:0d:04:98:
b9:1b:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org