Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
File: 33312e362e33362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: PI3gGISdNrbO1ZUOzRKTJj62W7yQNeiw2NFFTOOg7wI=
Subject key identifier: B7:7E:56:43:C7:69:6C:A3:25:23:6E:11:B8:D0:AA:CA:6D:E5:E3:4E
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 173E47AF8CBE6807A3D47AA33FC1843FE413D42D
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:45 +0000
ROA not before: Wed 22 Mar 2023 15:24:45 +0000
ROA not after: Wed 20 Mar 2024 15:29:45 +0000
asID: 61317
IP address blocks: 31.6.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3e:47:af:8c:be:68:07:a3:d4:7a:a3:3f:c1:84:3f:e4:13:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:45 2023 GMT
Not After : Mar 20 15:29:45 2024 GMT
Subject: CN=B77E5643C7696CA325236E11B8D0AACA6DE5E34E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:92:78:93:f7:79:47:23:a1:73:fc:6d:17:
9f:43:44:7d:2c:07:8e:a8:9f:8c:3b:92:8a:c9:1a:
0b:e7:6c:99:d9:07:52:72:eb:77:a0:60:a1:86:0f:
53:54:78:6a:06:c2:6a:b6:1e:a8:41:5a:78:fa:1e:
e2:de:a7:34:41:34:b2:53:16:e5:6a:32:15:3d:1f:
c8:4d:51:7b:2b:00:04:cb:5b:ae:32:b1:80:77:76:
46:89:2f:4e:91:ff:7c:58:40:56:b7:ec:5e:69:83:
fa:fc:84:57:55:50:43:d7:6e:bc:cf:71:d7:04:e6:
41:d6:d2:fd:4a:15:7f:d0:77:cd:40:12:e5:cf:bf:
c0:97:5e:a2:e3:d0:bb:93:2b:ac:ba:32:df:76:f0:
f4:4e:31:d5:da:ac:f0:b2:9f:ab:a4:7d:65:9d:d2:
87:60:3d:c8:3a:d7:9b:ac:3c:d1:5e:cf:55:d6:f9:
a7:17:5b:7e:f0:8c:a7:02:6f:e7:f1:18:99:6a:1d:
a6:6a:df:8e:8a:17:87:13:32:5a:42:b8:df:cc:7c:
01:c7:68:37:62:7c:f9:d0:53:68:98:ca:8b:31:3c:
f8:5e:6e:46:86:a8:b9:0c:12:9a:d0:bc:24:ef:e1:
c4:6c:1c:ef:cd:67:b4:3a:db:39:35:5d:07:f4:73:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7E:56:43:C7:69:6C:A3:25:23:6E:11:B8:D0:AA:CA:6D:E5:E3:4E
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
93:37:f0:87:18:9e:aa:69:eb:a6:dc:51:5b:dd:4e:a7:00:93:
51:df:9d:a0:cf:8e:95:18:1f:36:b2:a3:7f:4f:43:e6:d1:fe:
21:2e:6a:89:8c:e3:64:61:b8:38:ee:e4:dd:44:09:79:63:e9:
9e:d4:9e:54:e5:e3:8d:fb:56:69:4b:80:1c:bf:54:bb:d7:36:
4e:0f:15:42:a0:7f:82:d7:c6:62:10:eb:b9:42:9b:30:6b:7d:
9c:ae:c6:9a:c3:d5:57:e9:78:28:53:6c:96:da:91:65:e9:90:
05:b9:2e:40:14:9e:96:b0:9b:63:20:7c:7f:f3:0c:fc:eb:d5:
52:d8:32:7e:13:1a:1a:30:71:66:32:9c:12:59:eb:2a:3c:19:
b2:f1:e3:e4:23:c6:33:be:24:bd:d4:50:48:fa:1d:7f:0f:da:
67:35:2c:46:98:f5:43:13:a9:5a:bf:9c:bc:ea:c8:69:7e:12:
e5:54:87:81:66:44:0f:f3:9d:99:fa:5a:b0:2a:ce:a8:19:f4:
e7:22:08:d3:ed:fa:20:ff:50:23:60:75:47:e6:0d:49:8e:92:
a0:b4:55:ab:d2:bf:f0:f3:69:6e:e4:af:6e:eb:1d:28:6f:7e:
02:2d:36:cf:3b:09:10:16:92:20:a7:21:84:a7:8f:70:dd:f9:
9a:e7:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org