Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33382e302f32342d3234203d3e203631333137.roa
File: 33312e362e33382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: FyIRJvkLob3CpH13yTwAYb0Iz8qp5LZynxrU+V210Yg=
Subject key identifier: 9E:AA:F0:05:6A:2C:66:D8:B6:FB:B9:2D:E2:5A:3C:D4:1E:C5:FA:37
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 0BBC500CBEF7246ED716F7571A327C3091AFCEF9
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33382e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:45 +0000
ROA not before: Wed 22 Mar 2023 15:24:45 +0000
ROA not after: Wed 20 Mar 2024 15:29:45 +0000
asID: 61317
IP address blocks: 31.6.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bc:50:0c:be:f7:24:6e:d7:16:f7:57:1a:32:7c:30:91:af:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:45 2023 GMT
Not After : Mar 20 15:29:45 2024 GMT
Subject: CN=9EAAF0056A2C66D8B6FBB92DE25A3CD41EC5FA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:a0:90:a7:09:16:da:10:39:a2:b8:2e:ed:
ca:2b:49:01:9a:63:19:6a:8d:8d:d2:87:f8:59:87:
d3:2c:26:be:d5:cd:f6:13:44:94:15:80:5f:ec:7d:
a0:c0:c4:1e:27:3f:90:8f:ac:b7:31:b2:fa:f8:ea:
e2:9a:fb:45:7f:76:a7:7a:cb:34:03:83:51:de:c9:
df:17:49:02:9f:1f:6c:51:0e:41:bb:d6:9f:5c:fc:
64:39:d7:8e:ea:07:77:08:68:c8:98:0b:ff:d9:b4:
25:41:df:fe:06:ba:56:df:a4:22:d8:80:0d:ed:ab:
55:d1:9a:ce:76:50:06:ed:32:0f:54:a3:2a:ed:df:
1a:23:b4:81:f5:3c:35:4f:4f:e0:70:98:d3:b5:81:
a7:9e:39:52:17:b1:31:fa:ab:61:a5:a3:a0:14:1e:
c4:ae:12:ec:60:42:4d:bb:bb:3b:ad:8f:85:57:e2:
9c:c2:22:bb:cb:5a:d4:13:39:26:8e:f5:29:b9:28:
15:dd:b2:a6:f4:ea:2e:3c:7e:47:b9:54:01:54:3a:
2b:85:c9:d1:f3:96:b6:49:92:25:51:e4:84:7b:be:
8b:c5:39:3a:b8:75:2c:84:b5:31:94:a0:95:06:76:
31:3c:13:b9:6c:ec:6a:87:6f:d2:74:6a:b9:9f:fc:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:F0:05:6A:2C:66:D8:B6:FB:B9:2D:E2:5A:3C:D4:1E:C5:FA:37
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ea:0e:49:a7:6d:0d:1b:e8:cd:e1:46:86:bb:d1:e3:5e:52:
59:b6:e7:a5:d2:67:e5:04:c9:d9:53:9f:70:38:d1:70:05:18:
eb:a6:31:c5:7a:af:1d:ed:77:42:8d:a5:c6:dc:2b:4b:38:cd:
c9:fb:ff:c7:d7:72:54:4e:ef:2e:9c:c6:df:76:79:71:29:ff:
f8:cc:09:a0:08:b9:5f:da:95:fd:0a:0e:35:06:80:0b:75:ed:
50:b1:74:cc:8f:06:d2:b9:bb:ea:42:51:c1:28:a9:28:66:8f:
32:79:82:56:98:66:e8:e5:a9:17:ec:a6:6d:e2:1c:42:e5:ff:
cf:03:15:5d:cb:a3:2a:20:82:c4:5e:f5:b9:da:32:a7:e7:db:
27:9b:51:89:dd:41:b4:51:60:d9:42:3a:f2:16:3a:71:88:16:
9a:30:cb:0b:b8:15:04:c3:9e:11:6a:50:9d:6e:25:99:ac:7f:
5d:77:4f:40:05:11:a2:a9:e8:a1:2e:f2:35:bb:90:ea:27:69:
d4:c0:b5:f5:ee:74:28:84:b0:bf:d6:bc:51:cd:71:41:a3:9c:
81:68:84:87:a1:98:02:f0:21:c9:bf:01:03:cf:95:40:22:83:
e5:ab:70:80:27:e2:3b:e8:8a:77:12:a5:56:bf:4a:d6:00:eb:
88:b5:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org