Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e20383334.roa
File: 33312e362e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: s0v5JLqyK76YrQevcDCqj7ccT0huDmKPe4GuRTUGukU=
Subject key identifier: FF:92:2A:99:BB:D1:05:CE:CC:4D:87:36:6F:8B:4C:56:5E:AD:7E:FB
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 73AB48CD31145C68164C698F920D6273DF2FCB81
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 834
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ab:48:cd:31:14:5c:68:16:4c:69:8f:92:0d:62:73:df:2f:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=FF922A99BBD105CECC4D87366F8B4C565EAD7EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:a4:b2:f7:55:8c:c6:99:52:e3:b3:6e:68:
74:e0:c6:e5:0e:a5:a7:f1:78:75:3c:e5:c9:dd:31:
a6:f4:9a:21:18:8a:05:2e:83:8a:84:60:8d:00:c8:
0c:c1:44:b6:7c:a0:0f:43:e1:8e:09:8e:36:bf:b1:
67:95:59:3f:4d:b2:31:d8:b4:2b:dd:18:52:bf:60:
4c:ce:30:63:bb:bc:ce:31:46:e9:3c:e1:19:3c:cf:
76:a3:41:db:47:d0:f7:c0:f0:a2:03:94:64:60:6b:
7a:76:81:59:bd:68:f2:68:a1:9a:a4:e0:03:e7:02:
7d:c3:fd:3f:ff:99:22:68:33:e1:9c:e7:c0:c4:9d:
bf:fe:76:19:e5:ea:5b:5f:91:65:97:cf:ad:8b:45:
4f:54:46:e1:70:33:be:5f:d3:24:84:1e:cc:ae:f2:
2d:94:aa:df:fc:32:b0:d8:41:76:96:d0:00:95:28:
4a:0d:59:a7:c9:f8:fb:d1:75:6e:b5:1e:2a:5b:f1:
90:f6:38:76:cf:27:a3:43:b8:c8:82:0b:7d:aa:19:
2c:37:c7:e0:36:d8:a3:90:be:fb:9a:c3:a1:62:ad:
43:88:8b:41:30:70:87:fe:de:e7:c2:ad:04:be:a0:
ef:ec:ae:49:9c:1c:8c:7a:9a:49:3f:2f:9c:47:88:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:2A:99:BB:D1:05:CE:CC:4D:87:36:6F:8B:4C:56:5E:AD:7E:FB
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e34382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ab:8d:c2:c9:68:17:7f:58:e8:b7:37:06:b7:16:27:76:84:
af:33:9a:fb:0d:6c:85:64:5e:20:3f:86:11:40:27:ce:fa:12:
9b:dd:02:15:e3:71:71:37:54:76:0d:47:f5:fc:bb:af:96:f0:
82:94:92:54:b2:20:e1:6f:51:22:29:04:05:16:5c:30:88:3e:
4e:c5:24:14:ba:55:96:04:17:40:13:8f:47:de:61:70:c6:84:
0a:04:54:7b:76:f3:46:4e:53:70:1a:2e:30:8c:35:c3:a6:49:
9c:93:3c:6a:9a:d8:05:35:82:86:22:f7:0a:3c:55:5e:44:29:
95:5b:93:49:a6:c1:7c:d5:e6:9a:49:97:91:f3:e4:87:3d:e8:
02:e2:db:3c:6d:8a:41:e2:60:57:39:1f:df:36:7a:c6:5d:d4:
00:30:22:88:9a:ba:4c:6b:28:db:36:3b:8f:43:8c:ed:c8:5d:
78:15:12:fd:a3:fa:3e:17:d2:10:e0:d7:d0:76:4e:41:47:55:
26:6a:1c:20:d1:ac:7d:07:1b:c3:e2:8c:c0:80:fb:a8:37:7d:
2a:40:c1:57:89:48:8b:b1:c1:43:6a:0f:31:23:f2:95:21:49:
59:0f:87:fe:39:b3:09:1c:19:d0:bf:7b:1f:3d:1b:c5:d3:48:
cc:23:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org