Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33392e302f32342d3234203d3e203631333137.roa
File: 33312e362e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: M5jcA6j8D53D3RGzxH7cXFkmbs2BLRcf9ewYK1F317c=
Subject key identifier: D6:B7:40:55:15:B1:13:F4:E9:09:07:70:A1:CB:74:1B:92:F7:23:D9
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 5AC0C5E710823D0C6542CBB9C1DE035275B3C37B
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33392e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Mar 2023 15:29:45 +0000
ROA not before: Wed 22 Mar 2023 15:24:45 +0000
ROA not after: Wed 20 Mar 2024 15:29:45 +0000
asID: 61317
IP address blocks: 31.6.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c0:c5:e7:10:82:3d:0c:65:42:cb:b9:c1:de:03:52:75:b3:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:45 2023 GMT
Not After : Mar 20 15:29:45 2024 GMT
Subject: CN=D6B7405515B113F4E9090770A1CB741B92F723D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:d9:4e:f6:6a:10:f6:6a:b2:c0:53:6e:da:
00:74:35:da:87:be:d5:a3:0d:88:7e:92:49:14:d4:
4f:d5:77:37:27:93:04:fc:13:ae:ad:98:d7:6e:00:
30:b4:b5:01:e6:b2:e5:4e:24:d1:2a:f4:f6:27:fc:
22:81:13:a4:ac:ed:df:b6:f2:30:01:ba:03:72:c5:
7a:90:e7:44:5c:88:81:bd:53:30:33:7d:e8:8f:07:
2d:09:e5:b5:fa:90:f0:d0:bf:62:af:3a:7e:85:af:
34:50:f9:d5:31:60:92:fc:4e:92:49:65:b6:f5:06:
e2:db:17:9e:82:6f:b5:f4:28:e6:42:c0:e0:77:f5:
12:ed:26:e8:3e:92:15:f9:78:d1:9c:2a:2a:32:d5:
92:93:3c:f2:86:c0:c5:9b:50:48:0f:b1:c9:9f:11:
e3:f6:ad:45:63:b6:54:08:5a:3c:e4:59:1c:14:92:
8e:95:87:c5:9f:03:dd:1b:74:6a:ba:34:75:bd:c1:
46:36:16:5e:9e:6a:c5:e9:9d:e7:40:9a:61:30:e1:
67:da:86:32:0e:7c:08:95:4b:9c:12:db:7a:7a:43:
0f:97:73:4a:0f:36:44:ad:ee:c3:21:e9:bc:b0:96:
4d:9d:1c:42:42:87:de:92:60:9e:11:38:39:08:42:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:40:55:15:B1:13:F4:E9:09:07:70:A1:CB:74:1B:92:F7:23:D9
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e33392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5d:56:78:3e:aa:65:38:26:91:6a:c8:17:18:20:67:db:ef:
7d:56:ac:10:ca:e1:b5:c4:6b:63:e5:da:f6:db:2a:9a:16:bf:
3b:92:b3:57:47:be:dd:bd:e3:39:10:fe:7b:b3:c2:b5:c9:0d:
a8:0e:b5:b7:99:a0:09:dd:c1:e3:ea:89:33:3f:ad:a3:e9:94:
64:52:64:72:17:fb:10:d6:03:93:a1:ff:7e:1d:fc:e5:24:c4:
fb:66:2e:2d:5e:b5:2b:e4:2d:15:af:13:96:39:b2:53:f7:e9:
10:04:75:e5:f8:57:6b:49:6d:a9:a5:7c:2b:62:29:f8:1f:3e:
43:41:0d:91:08:55:fa:9e:dd:31:e7:1f:06:ef:63:a0:b6:c9:
fb:b6:0f:a4:19:35:84:30:c3:14:f0:c4:c5:45:09:34:61:50:
c9:b1:dc:75:ec:51:14:c1:9c:63:e7:37:2b:12:03:2b:f0:7b:
18:4b:93:84:51:a3:26:6c:99:f3:37:e7:e0:67:20:d4:19:fd:
3d:e3:07:cd:9c:93:5f:0e:96:af:72:9b:8b:4e:cc:8b:81:39:
d3:ec:04:da:5c:83:0d:5a:3c:0a:49:c5:c0:b1:75:07:7a:8f:
dc:d7:2a:a7:98:0c:15:5d:c8:a8:dc:55:7b:b9:7a:17:d5:a9:
6d:85:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org