Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33352e302f32342d3234203d3e203631333137.roa
File: 33312e362e33352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: BpiK+K/cVupnf8FqfNRb0fTcl4FZkb41cFhXaWh83EM=
Subject key identifier: A9:E1:AB:70:B2:17:14:A1:66:15:F8:EA:2B:0E:D0:33:C9:88:AB:BC
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 172C30AB6D8EFCC231D2206DC75E95DB3F90D998
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33352e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:44 +0000
ROA not before: Wed 22 Mar 2023 15:24:44 +0000
ROA not after: Wed 20 Mar 2024 15:29:44 +0000
asID: 61317
IP address blocks: 31.6.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:30:ab:6d:8e:fc:c2:31:d2:20:6d:c7:5e:95:db:3f:90:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:44 2023 GMT
Not After : Mar 20 15:29:44 2024 GMT
Subject: CN=A9E1AB70B21714A16615F8EA2B0ED033C988ABBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:34:a1:53:a3:65:e1:88:66:37:9c:e1:3e:
0b:6c:f2:ee:34:07:11:9e:66:be:76:33:34:26:70:
df:6d:c1:9f:ca:9e:f0:14:81:e5:09:ff:5a:ff:46:
d5:5f:92:23:c8:85:4c:08:c7:6c:e5:80:0f:4c:06:
e3:7b:4c:19:c7:17:8e:ad:7b:21:b7:55:04:f6:d3:
46:23:1a:ea:08:71:d3:41:15:b6:f9:45:6e:62:d7:
a8:14:1d:df:31:dc:76:1b:f9:c0:f0:aa:68:1e:00:
c2:c5:a1:a5:e3:b8:cd:62:a7:c1:55:de:bc:21:d0:
4c:7d:94:a2:27:af:8d:79:59:79:ca:35:05:02:35:
e2:c2:e0:1a:2f:ae:07:1c:c5:14:86:56:7a:1e:6a:
5f:8a:92:46:45:30:9f:61:22:13:2b:0b:2a:d4:9f:
fc:f4:d3:72:eb:ab:ee:d0:10:d9:21:b0:29:97:03:
c2:1a:ad:bd:1a:be:be:9b:ae:9a:ee:91:10:99:73:
83:e1:95:4d:62:19:f7:b5:e6:d4:f8:ed:45:95:33:
29:d7:fa:89:a1:44:21:6d:d8:25:bb:ad:42:a7:8a:
df:96:e5:6c:7e:10:81:0d:2f:15:82:ca:ee:c3:67:
f2:99:a4:84:3e:5f:17:cd:f5:06:f6:d1:fc:77:ff:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:AB:70:B2:17:14:A1:66:15:F8:EA:2B:0E:D0:33:C9:88:AB:BC
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
44:63:fe:57:95:89:fd:5a:b7:0d:51:23:03:dd:bd:30:cf:31:
c2:1e:d9:25:5e:7e:26:74:89:1a:ca:39:67:41:38:f7:1f:47:
9a:db:bc:93:5c:bb:a8:e4:73:b8:68:ac:87:0f:98:f1:6b:40:
59:3c:bd:23:f5:2f:be:68:79:26:57:e5:71:c4:9e:bf:61:36:
b2:b7:08:c6:2d:4a:9f:a2:3e:b3:48:dc:d5:9d:f5:0d:07:6b:
e5:c5:93:66:56:11:e1:28:70:b8:90:df:b3:ea:72:d5:6f:98:
68:38:a0:5a:a4:66:1a:60:98:7d:49:e7:39:03:5b:a1:f1:37:
64:29:05:05:73:cc:0d:5e:ee:3e:86:0d:30:90:0b:09:92:cf:
78:1a:f5:96:5d:97:2f:0e:69:3e:b8:de:46:6f:88:16:f7:0f:
40:15:97:31:dc:6e:90:37:8b:cb:dd:fb:13:b1:12:2f:cf:57:
82:a8:61:32:38:a9:4e:4d:6c:cf:0b:a3:7b:bd:c1:c2:49:5e:
12:df:cf:e1:af:08:81:8d:4a:00:ea:73:c1:df:9b:6e:f7:ee:
a8:f1:7b:ff:27:d7:98:e0:e7:01:15:8c:8f:67:9f:8a:7a:5a:
bc:f5:d2:a5:7a:bc:62:f4:23:3c:bd:d7:c7:52:d0:70:1e:a4:
5e:2b:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org