Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20383334.roa
File: 33312e362e34362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ciEjaI3TUl/I0gGdwMz8y+3Gs67cwriyHUsYbSti+cU=
Subject key identifier: 57:BB:C4:C2:22:BD:F6:17:77:65:D8:7B:E6:D0:1E:EB:85:25:5C:44
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 6EC17C22542E141F81EA74A4864BE2E9DAD1D55F
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 834
IP address blocks: 31.6.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c1:7c:22:54:2e:14:1f:81:ea:74:a4:86:4b:e2:e9:da:d1:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=57BBC4C222BDF6177765D87BE6D01EEB85255C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:29:23:71:d3:96:1e:74:71:03:e8:25:f0:
c7:b4:02:28:50:45:ff:09:54:70:98:49:90:86:f8:
b7:59:85:7c:37:d4:81:52:f3:b0:3a:5b:41:a4:c6:
5b:f2:bf:ff:89:e6:ae:b6:5a:76:03:a1:b7:ef:bc:
8d:0d:c7:60:f6:23:d4:f4:22:8e:1f:99:2c:cb:22:
73:91:c1:a7:d1:ae:bc:0c:b3:e9:c1:e6:1f:48:c0:
96:0c:d7:e8:3d:f6:c3:c8:84:10:26:06:a9:4e:46:
2e:0e:e8:64:4f:dd:1a:85:01:a7:b9:d2:3e:e7:ce:
e8:7c:92:05:9f:a3:d2:d3:af:9d:01:e4:42:34:7e:
f4:f2:97:27:8c:01:e0:b5:6d:79:91:6a:e4:a7:0f:
d5:56:99:52:c5:5f:35:21:0b:35:3e:26:03:be:83:
e9:11:19:75:d5:b4:ec:7b:8b:8c:03:b1:a9:d4:e4:
96:8b:8c:89:ea:d0:5e:20:f6:92:2c:cf:64:53:45:
8f:cf:ec:a2:1e:a5:0c:2c:03:b9:63:d6:24:66:44:
a9:c2:13:f8:27:a3:54:35:92:15:f6:1a:7c:e5:ac:
64:f4:b4:11:3c:d9:2c:fc:0b:af:6a:ed:8e:e0:2d:
c1:1c:67:e6:0f:7a:11:b8:69:ae:9f:4c:03:60:f4:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:C4:C2:22:BD:F6:17:77:65:D8:7B:E6:D0:1E:EB:85:25:5C:44
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.46.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:82:be:c4:1b:dd:0e:35:78:ec:58:7b:94:46:b7:9f:9e:82:
32:9b:9d:7d:aa:cd:da:7f:92:80:e8:55:38:8f:f2:f9:25:16:
a3:2e:52:45:4e:7d:cd:99:fe:56:82:f3:75:85:82:11:78:98:
99:a8:e6:4f:b5:b1:bc:5b:5f:f8:6e:36:1d:4d:15:4f:a8:e5:
ab:a2:8a:bf:23:1e:ec:08:54:e4:be:11:72:7d:bc:0d:c2:ca:
46:54:1a:f6:bc:43:f3:1e:7a:83:1f:40:ba:9b:2f:67:cb:1b:
95:d4:6f:ee:5b:97:b6:50:69:21:40:35:af:82:ca:a0:d7:b2:
2b:56:fa:25:f0:3e:ac:24:bc:39:29:e0:c7:b3:e3:a0:ba:2a:
0b:46:43:b7:e9:43:f4:2a:e6:3d:29:c7:29:76:03:a2:97:9c:
32:e8:d1:78:5e:e3:d4:e1:b4:ab:b6:ec:1b:f0:49:42:73:8b:
04:b7:cb:92:c1:1c:ac:41:be:d6:e3:d4:5d:be:68:95:7e:1f:
04:0c:a6:3f:32:0b:5d:ed:d1:e2:1e:70:36:1e:43:dd:3a:4a:
63:0c:56:3c:d5:dc:9c:b4:b6:aa:f7:ee:b1:66:4d:d9:45:06:
ff:c5:75:01:2b:be:bf:3d:2e:aa:49:2c:43:0d:71:ee:da:12:
1f:a0:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org