Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33372e302f32342d3234203d3e203631333137.roa
File: 33312e362e33372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ltSZddgBJIycVLOpqi+neQglu7cfav6p52lIgNG8ZUs=
Subject key identifier: B7:B1:A5:4B:7A:78:BD:88:F9:D0:04:4C:8E:C8:70:E7:3B:6C:FC:1F
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 22EEE762BAA6FD5E4895B2BDCA140BC7E2DB5143
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:45 +0000
ROA not before: Wed 22 Mar 2023 15:24:45 +0000
ROA not after: Wed 20 Mar 2024 15:29:45 +0000
asID: 61317
IP address blocks: 31.6.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ee:e7:62:ba:a6:fd:5e:48:95:b2:bd:ca:14:0b:c7:e2:db:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:45 2023 GMT
Not After : Mar 20 15:29:45 2024 GMT
Subject: CN=B7B1A54B7A78BD88F9D0044C8EC870E73B6CFC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:22:de:cd:1b:21:d3:31:16:c4:91:c6:f5:
99:a6:30:f3:10:a5:fb:1b:15:99:8a:be:15:1e:8c:
5b:b5:65:5d:07:be:9c:cc:08:49:23:89:3b:f5:46:
da:3e:20:f0:d5:15:c3:87:95:a9:3e:4a:57:ac:06:
c7:43:2f:97:56:8e:18:c0:89:99:16:a5:12:50:e8:
a6:46:7b:c6:40:5b:72:ac:b5:13:8c:a4:9e:77:b6:
1f:8a:98:54:c1:19:fb:9c:25:99:67:62:4e:eb:10:
64:3f:9e:86:74:c9:e9:db:67:ba:34:03:c6:e0:92:
3d:46:48:ed:9d:00:ea:04:30:1a:ae:a9:b2:af:d2:
7b:04:36:ef:84:05:99:0b:8c:54:d0:fd:67:eb:2f:
3f:fb:fd:78:d3:ec:c7:75:76:32:0c:94:e5:24:a0:
37:f7:f5:27:ea:87:a8:76:31:5e:59:85:36:bc:4f:
ba:c0:bb:2b:60:2e:44:24:a4:29:c8:ef:48:2f:e7:
c7:29:0e:07:cb:32:57:02:45:75:bc:bf:fa:d2:8e:
68:20:f3:b5:08:97:96:bb:ba:2e:57:b2:ec:6f:8d:
ba:28:92:70:45:24:63:4e:6e:3a:5a:4a:c9:2b:bb:
f2:44:70:32:97:3e:e5:15:2f:f0:c8:7a:cc:44:17:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:A5:4B:7A:78:BD:88:F9:D0:04:4C:8E:C8:70:E7:3B:6C:FC:1F
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.37.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2e:30:de:29:61:b5:06:d6:f1:ff:c6:09:ce:18:6a:ed:40:
eb:33:8e:cc:69:6e:0b:29:99:a6:04:92:d1:da:b8:f1:39:5f:
0a:cd:15:76:e3:39:fc:3d:93:65:3c:b7:29:e6:d0:06:1e:97:
90:29:a5:79:93:cc:3f:84:76:90:29:fe:eb:59:60:4f:8a:7d:
2f:8c:a6:d2:ef:20:53:5c:55:27:d3:74:b9:20:9e:8f:71:e3:
22:4f:d3:13:2b:9f:ad:42:71:a3:71:74:e0:df:f9:32:e3:00:
4c:87:e2:ae:84:45:fe:fa:82:82:31:38:8e:3c:11:82:52:9b:
be:1c:05:cd:99:4e:00:bb:df:4d:0d:9b:71:a8:35:b5:75:76:
15:c4:3e:4a:7d:5f:67:d2:cf:8f:c4:26:70:be:23:a4:65:a2:
3e:ed:3f:84:bc:e2:e3:35:1c:80:d1:aa:25:5b:b6:ce:b0:a3:
d6:6b:e2:cf:14:9c:f6:31:79:0d:f8:b9:9e:c9:3c:9a:b4:c7:
05:dd:01:7d:50:d0:bc:1b:2f:2d:74:70:f2:92:fe:1b:28:7a:
cd:37:91:7a:82:53:3b:a2:9f:0f:92:fc:72:b3:07:8e:c6:7e:
10:bd:32:f2:20:51:f9:34:0b:8c:43:12:bd:93:fd:45:b5:18:
09:66:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org