Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e20383334.roa
File: 33312e362e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: R1EiqW11kdBcSjvpk0OElIvZsrox8H1ZIVjWRREGecU=
Subject key identifier: 60:FE:2B:4E:62:FC:64:80:1E:6E:79:FD:C6:9C:57:13:9D:0B:38:D5
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 0B91C9C067C603437AE845E8CC2AF6B5D298C3F1
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 834
IP address blocks: 31.6.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:91:c9:c0:67:c6:03:43:7a:e8:45:e8:cc:2a:f6:b5:d2:98:c3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=60FE2B4E62FC64801E6E79FDC69C57139D0B38D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:1d:0c:b5:10:34:60:12:dc:46:b3:0e:67:
fb:57:c2:29:11:a1:b0:c0:06:03:c2:3e:02:ad:d8:
df:ef:59:43:32:b3:75:f7:35:a3:50:96:48:c6:85:
03:29:0b:32:e8:61:ee:6f:c6:34:64:00:38:f1:6d:
51:8e:bb:b9:39:a8:37:fd:3f:53:e7:64:21:cf:a7:
c7:ff:09:9b:93:55:58:e7:2f:34:7c:90:62:6a:15:
1b:97:0c:e7:e5:9e:ce:60:75:1d:8a:64:73:17:6e:
7d:28:6c:da:db:76:9b:a3:d9:55:75:5e:2f:9c:05:
65:30:98:97:90:57:34:fc:7f:1e:28:94:65:61:a8:
ae:1c:fe:1f:ef:18:43:26:74:18:fd:c3:07:3a:0b:
93:8d:9a:50:ab:0f:33:88:61:a9:c6:fd:db:b1:12:
76:9d:a3:45:e8:0f:b3:94:14:40:08:30:37:ed:69:
c1:97:38:51:f6:89:54:14:78:ab:68:2b:b9:5c:67:
0c:b0:a0:e2:d5:bc:0e:80:c7:15:6d:ed:22:89:fb:
0a:2e:3a:49:29:40:99:56:fd:ea:5c:98:21:dc:1c:
b7:92:0b:25:02:6e:92:0a:77:85:8a:02:7b:ac:df:
e7:dd:a0:76:dd:cf:c4:48:c8:50:6e:b3:4d:62:02:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:2B:4E:62:FC:64:80:1E:6E:79:FD:C6:9C:57:13:9D:0B:38:D5
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
32:78:bc:d3:72:8b:8e:a3:00:15:40:ce:4c:44:0b:91:3f:a8:
8a:ba:a1:11:c8:d1:72:13:34:e0:50:84:51:16:6f:a7:be:08:
c8:1c:5f:8b:e1:24:ad:c3:3c:3e:25:45:19:f3:ba:9d:58:cc:
6c:e7:52:21:f6:65:2d:3c:38:41:1b:c2:95:b1:c9:a2:0b:e7:
8c:0d:2e:f9:67:4a:9e:4e:a9:a7:0b:46:37:5a:36:1c:b7:c2:
b2:3b:cd:cd:b9:7f:25:06:a2:78:57:89:39:df:54:32:5c:1c:
b2:1f:27:cb:64:ba:51:3a:3e:7d:20:b1:dc:65:28:44:29:f9:
e1:32:0f:77:1d:a4:25:a1:c1:a1:ff:ba:69:70:7d:32:ff:0e:
20:6e:c5:82:1e:fc:fc:b2:42:61:3d:f0:3f:4b:53:1d:1c:e8:
77:3a:6a:6b:15:50:44:8c:2b:1c:da:a3:22:fc:05:2a:af:58:
28:56:d5:97:58:c8:c9:3b:3f:6d:64:74:7b:a7:1c:13:9b:21:
93:66:ee:08:d2:39:6a:de:c3:bd:6d:91:cf:41:85:92:18:61:
ce:91:a1:77:69:fe:8b:0e:9d:ca:df:35:17:8f:d0:43:ec:65:
e0:1c:65:5f:f5:87:f2:89:61:90:dd:6d:dd:d7:a0:b3:02:21:
ca:7b:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org