Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35302e302f32332d3234203d3e20383334.roa
File: 33312e362e35302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Pj8DtzPi4bt9Yh1xVFhRZ0ia/zCYQ5ifDkgcM7aTPBA=
Subject key identifier: 49:D4:12:8C:F4:3E:27:B4:C1:87:DB:3C:F9:DB:0A:CF:83:89:9E:3B
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 1CF2EC45D52774BD3A211B969174286D98D79A26
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35302e302f32332d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:46 +0000
ROA not before: Wed 22 Mar 2023 15:24:46 +0000
ROA not after: Wed 20 Mar 2024 15:29:46 +0000
asID: 834
IP address blocks: 31.6.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f2:ec:45:d5:27:74:bd:3a:21:1b:96:91:74:28:6d:98:d7:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:46 2023 GMT
Not After : Mar 20 15:29:46 2024 GMT
Subject: CN=49D4128CF43E27B4C187DB3CF9DB0ACF83899E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:ca:cf:e8:d7:0e:1b:e2:3d:f5:5f:76:e6:
b8:ec:a2:eb:b6:f0:eb:8e:b3:53:84:b3:57:ea:ef:
d5:e2:99:af:04:e6:40:05:d1:38:f6:24:f4:85:34:
23:71:97:03:41:f2:5d:d9:53:e8:5a:58:4c:8b:b4:
c8:d1:36:1a:6b:12:77:3a:e2:58:a0:17:c2:f6:2c:
e3:45:6a:ea:7a:12:55:fa:e2:b1:f2:1e:4a:b3:dd:
d2:00:b3:ef:0e:19:f6:8a:91:5c:10:60:1a:f6:e4:
b5:8e:f5:2c:36:5f:5f:81:36:b7:8a:38:ad:db:0c:
15:11:41:31:14:d9:59:33:f2:19:a5:34:81:1e:69:
c4:c7:48:7c:13:da:b2:aa:ff:d6:aa:52:da:14:b8:
a5:54:7d:e9:35:11:93:66:d5:a9:f4:a5:fa:79:9a:
40:fb:29:78:f8:a3:9d:85:db:49:e5:7c:e2:07:0b:
79:1b:cc:44:81:0a:06:22:fc:b7:bc:f3:89:a9:f6:
2f:3a:f8:00:7a:e5:bc:96:ed:8e:d2:3a:ef:51:ce:
4c:b2:36:a8:4b:45:27:80:82:45:12:f6:00:cb:ec:
e0:78:63:83:4d:7c:92:a4:a2:1a:b6:23:53:fe:de:
79:b7:86:91:e2:6f:d5:66:00:8d:9a:bb:b2:54:b1:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:12:8C:F4:3E:27:B4:C1:87:DB:3C:F9:DB:0A:CF:83:89:9E:3B
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.50.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:19:49:2c:1d:09:d6:0c:ac:93:4c:89:3a:49:6e:67:b7:1a:
80:cd:a9:35:37:6e:35:14:41:2c:ca:0d:ac:e5:8d:d2:da:bf:
a1:e2:4f:f9:fe:f1:c3:20:9d:1a:4d:a9:6f:9d:7b:b3:5f:7a:
36:42:16:70:d7:49:ef:f6:58:5b:42:0e:5b:e9:6d:85:07:7f:
00:c2:22:ea:43:6e:50:fa:35:fb:49:df:8f:e4:ec:6b:62:4d:
3c:17:f2:5d:59:01:f2:64:52:f5:17:f5:d8:1f:ac:ab:c8:1d:
c6:bc:ef:c9:65:5b:d0:21:6f:cb:ab:fd:79:67:9c:b4:9b:d4:
2f:54:e6:35:b3:ed:bb:ce:e9:5d:89:e4:e5:3b:8b:0b:7f:80:
f2:21:43:a7:cc:47:47:af:b0:4f:af:4a:2a:36:ed:52:5e:26:
76:41:17:cf:cd:43:53:2b:c6:e0:c9:35:7b:e7:6f:fe:94:90:
a3:b9:6e:92:1a:f7:d0:75:93:00:34:bd:4e:e5:c6:19:69:9e:
9e:36:d4:c5:2f:99:86:82:81:66:d7:e1:26:c0:2e:62:d4:71:
1c:f0:30:82:71:ae:41:fe:a5:96:3f:9a:48:e3:c6:d5:3c:75:
cb:45:02:16:44:50:30:8d:6a:01:ec:63:fa:c0:f4:b3:15:66:
ba:03:d1:c0
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUHPLsRdUndL06IRuWkXQobZjXmiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDZaFw0yNDAzMjAxNTI5NDZaMDMxMTAvBgNV
BAMTKDQ5RDQxMjhDRjQzRTI3QjRDMTg3REIzQ0Y5REIwQUNGODM4OTlFM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFo8rP6NcOG+I99V925rjsouu2
8OuOs1OEs1fq79Xima8E5kAF0Tj2JPSFNCNxlwNB8l3ZU+haWEyLtMjRNhprEnc6
4ligF8L2LONFaup6ElX64rHyHkqz3dIAs+8OGfaKkVwQYBr25LWO9Sw2X1+BNreK
OK3bDBURQTEU2Vkz8hmlNIEeacTHSHwT2rKq/9aqUtoUuKVUfek1EZNm1an0pfp5
mkD7KXj4o52F20nlfOIHC3kbzESBCgYi/Le884mp9i86+AB65byW7Y7SOu9Rzkyy
NqhLRSeAgkUS9gDL7OB4Y4NNfJKkohq2I1P+3nm3hpHib9VmAI2au7JUsdS9AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUSdQSjPQ+J7TBh9s8+dsKz4OJnjswHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTM1MzAyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBjIwDQYJKoZI
hvcNAQELBQADggEBAGsZSSwdCdYMrJNMiTpJbme3GoDNqTU3bjUUQSzKDazljdLa
v6HiT/n+8cMgnRpNqW+de7NfejZCFnDXSe/2WFtCDlvpbYUHfwDCIupDblD6NftJ
34/k7GtiTTwX8l1ZAfJkUvUX9dgfrKvIHca878llW9Ahb8ur/XlnnLSb1C9U5jWz
7bvO6V2J5OU7iwt/gPIhQ6fMR0evsE+vSio27VJeJnZBF8/NQ1MrxuDJNXvnb/6U
kKO5bpIa99B1kwA0vU7lxhlpnp421MUvmYaCgWbX4SbALmLUcRzwMIJxrkH+pZY/
mkjjxtU8dctFAhZEUDCNagHsY/rA9LMVZroD0cA=
-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org