Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35362e302f32332d3234203d3e20383334.roa
File: 33312e362e35362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: FCtPaMMWHcIZtHyvw3oKwKqTyKHdwuYfTQa/WtuFDsk=
Subject key identifier: D0:F9:97:BC:EA:39:65:44:84:63:CC:BF:C9:3F:C5:2A:17:8D:52:14
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 63A27CD43BEB9575A18C279EF58FF1A879D17E9B
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35362e302f32332d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:47 +0000
ROA not before: Wed 22 Mar 2023 15:24:47 +0000
ROA not after: Wed 20 Mar 2024 15:29:47 +0000
asID: 834
IP address blocks: 31.6.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a2:7c:d4:3b:eb:95:75:a1:8c:27:9e:f5:8f:f1:a8:79:d1:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:47 2023 GMT
Not After : Mar 20 15:29:47 2024 GMT
Subject: CN=D0F997BCEA3965448463CCBFC93FC52A178D5214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:28:34:cc:06:6e:8f:ba:d8:c8:2b:8c:0a:
87:09:90:ce:00:39:0d:e7:57:4c:0a:f8:a4:c3:7e:
de:bd:8b:5f:08:8a:81:77:7b:dd:1e:c4:f3:3e:e6:
11:1e:b9:13:58:aa:ad:1f:3d:f0:0b:b4:e2:15:e9:
b7:6a:16:8f:d1:27:d9:95:c8:4e:ba:d2:39:eb:da:
5d:3a:b4:3f:50:9a:36:74:05:08:08:3e:5f:7c:b7:
05:be:b2:db:0b:ac:bc:22:8d:eb:f3:83:73:a8:7d:
35:2c:d6:26:d8:1c:4f:07:90:a2:c8:63:c5:6e:36:
2f:f8:69:a5:ed:b2:ff:a7:0a:fe:9c:58:37:9a:4c:
36:d8:59:b0:0f:12:ed:10:97:d6:55:9f:56:52:48:
88:2f:d5:ab:9c:fd:86:8e:53:7c:62:b6:6d:01:b8:
9b:ec:e5:e6:ba:f1:97:ee:63:c4:ae:05:d6:df:eb:
3c:0c:d2:9c:06:7d:5b:e1:3d:bc:94:96:58:93:20:
a8:ec:f4:f8:94:9e:72:cc:90:f4:ce:69:46:dd:91:
28:9f:25:c4:bb:00:a1:65:42:79:2a:c5:77:68:10:
db:6a:2d:73:00:3c:d3:34:f0:25:ef:65:2b:ab:76:
6d:62:cb:84:7d:5b:bc:f9:36:a0:b6:fb:71:6a:5c:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:97:BC:EA:39:65:44:84:63:CC:BF:C9:3F:C5:2A:17:8D:52:14
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e35362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.56.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:04:d2:3a:30:27:50:f8:74:9f:2d:7a:6f:9d:b5:37:46:8c:
94:1c:85:4c:a0:55:c1:9b:7f:60:9d:05:4d:67:59:9c:12:00:
c9:52:04:f2:25:74:2f:88:8b:cc:b4:07:8d:91:ba:90:ce:4f:
a0:70:0e:1e:0e:13:d5:2c:64:10:b2:d0:76:25:8c:26:9c:6f:
18:e9:6c:52:70:ae:3c:5c:4f:b0:13:20:8e:43:8f:0e:d3:f4:
f5:5f:7a:15:58:1c:45:f5:ec:42:c6:b1:6c:70:8c:1e:24:f7:
ea:e9:14:de:00:9d:f3:5c:4e:8e:d6:ef:4b:d0:cc:73:b5:ee:
b6:a5:63:51:25:9f:57:cf:4e:69:66:9d:e7:9b:02:ea:a7:30:
89:83:67:f4:5d:c5:0d:9c:04:77:37:bf:a9:ea:dd:65:07:41:
70:aa:f2:f2:06:74:c8:e8:92:86:d3:fc:b5:74:5e:ec:02:69:
56:72:4c:33:61:15:70:5f:eb:61:21:d7:4c:9c:a8:17:95:0a:
c2:df:69:e7:ff:56:11:f4:0f:17:70:64:f4:37:f9:46:ce:98:
b1:c2:93:9a:d8:3f:06:29:0c:c9:17:e8:53:6e:c6:26:64:97:
00:28:61:f2:c8:68:79:93:10:8f:68:14:bd:94:de:00:98:6e:
41:18:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:29:50 2023 by rpki-client on console-fra.rpki-client.org