Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e20383334.roa
File: 33312e362e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: BTHmZ9FFoTujnFdTlKS5enCNsnc77T9blwF8wOyekdg=
Subject key identifier: A3:44:6D:53:71:42:38:F1:91:BC:3C:87:12:3B:6F:CD:BA:B1:80:8B
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 0CC03AB2A5F96522A94C9B0AB4491A3A71EE554B
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:48 +0000
ROA not before: Wed 22 Mar 2023 15:24:48 +0000
ROA not after: Wed 20 Mar 2024 15:29:48 +0000
asID: 834
IP address blocks: 31.6.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:3a:b2:a5:f9:65:22:a9:4c:9b:0a:b4:49:1a:3a:71:ee:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:48 2023 GMT
Not After : Mar 20 15:29:48 2024 GMT
Subject: CN=A3446D53714238F191BC3C87123B6FCDBAB1808B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:12:1b:a1:0f:32:43:df:e1:2e:55:d7:e8:
8a:1a:e2:81:19:8b:42:49:88:54:b6:bd:53:f2:01:
e3:26:5c:00:ef:36:ce:88:4b:dc:2f:7e:21:78:12:
ed:75:33:3a:41:ea:82:49:4d:54:85:3a:ba:1d:5d:
10:78:53:0f:79:c4:02:28:70:5a:c4:ed:51:44:bf:
45:8c:e2:a5:cd:49:e9:a0:ae:b6:10:bd:9b:64:ea:
90:74:7b:b4:f7:1a:36:f6:5d:5d:50:50:61:b6:3f:
77:fd:3b:15:5a:60:95:65:8a:b9:50:b4:ec:09:62:
8e:53:52:a1:c5:a4:06:eb:11:21:03:68:71:ce:ac:
f3:af:ca:23:ed:f0:38:e0:9a:08:9b:69:18:2b:26:
c1:b1:d1:24:8f:b8:bc:36:f8:42:d8:77:a0:60:a3:
da:50:93:78:a6:23:66:1c:26:ac:84:f7:08:f1:07:
31:f0:34:de:cc:73:7e:d3:39:c3:d2:0d:d2:31:8e:
7f:34:18:47:f2:ff:a4:fd:f7:b4:22:88:94:d7:b6:
14:38:5c:e5:13:b8:86:0e:ff:e1:6b:e5:8e:c3:1d:
97:c5:fa:a3:6c:27:18:f2:9e:62:04:59:5b:bb:8a:
94:8b:33:c9:78:bc:34:5a:44:ac:9b:76:7f:42:3a:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:6D:53:71:42:38:F1:91:BC:3C:87:12:3B:6F:CD:BA:B1:80:8B
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e36322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/23
Signature Algorithm: sha256WithRSAEncryption
98:31:18:b8:87:d8:0b:8e:44:cd:01:71:0b:a3:aa:a2:e9:4e:
d7:0d:59:97:68:33:19:7d:53:17:a5:84:8f:64:4e:48:c9:6a:
f9:af:f5:38:bc:19:d3:e4:ca:6a:19:41:d1:7d:29:7d:05:36:
59:e7:73:b7:32:b9:ed:6f:08:07:e3:3c:9d:14:9a:5a:8c:9d:
01:38:b2:04:d3:26:a1:95:c3:58:59:e7:45:91:02:08:2a:ec:
26:4f:4c:a7:04:8b:41:28:46:96:54:c9:a4:ef:fe:e5:fa:9a:
47:56:1f:aa:6e:22:03:f3:87:3e:52:91:74:5e:3c:28:0a:b4:
a7:ec:f0:74:2a:f3:a7:ca:90:f2:2c:6d:3e:33:59:fa:c5:fc:
f8:be:9b:60:61:8b:69:41:64:a5:e5:43:a7:45:25:fa:99:58:
d0:fa:39:29:13:cf:ee:9b:a5:b7:dd:66:9b:56:eb:39:70:67:
30:28:fa:97:91:eb:e4:28:90:a3:9c:12:b0:cf:b8:4d:45:d9:
15:cf:b6:ac:2a:75:b3:e5:7c:54:96:0e:18:a8:e0:58:2e:67:
22:e7:c9:45:8b:c4:7c:79:b9:81:f4:80:93:85:0b:62:f1:94:
a4:23:57:1b:af:59:ab:d8:24:92:a4:ea:df:1e:0c:ee:5c:5c:
fa:ff:78:86
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUDMA6sqX5ZSKpTJsKtEkaOnHuVUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDhaFw0yNDAzMjAxNTI5NDhaMDMxMTAvBgNV
BAMTKEEzNDQ2RDUzNzE0MjM4RjE5MUJDM0M4NzEyM0I2RkNEQkFCMTgwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzshIboQ8yQ9/hLlXX6Ioa4oEZ
i0JJiFS2vVPyAeMmXADvNs6IS9wvfiF4Eu11MzpB6oJJTVSFOrodXRB4Uw95xAIo
cFrE7VFEv0WM4qXNSemgrrYQvZtk6pB0e7T3Gjb2XV1QUGG2P3f9OxVaYJVlirlQ
tOwJYo5TUqHFpAbrESEDaHHOrPOvyiPt8DjgmgibaRgrJsGx0SSPuLw2+ELYd6Bg
o9pQk3imI2YcJqyE9wjxBzHwNN7Mc37TOcPSDdIxjn80GEfy/6T997QiiJTXthQ4
XOUTuIYO/+Fr5Y7DHZfF+qNsJxjynmIEWVu7ipSLM8l4vDRaRKybdn9COnHlAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUo0RtU3FCOPGRvDyHEjtvzbqxgIswHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzMzMTJlMzYyZTM2MzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBj4wDQYJKoZI
hvcNAQELBQADggEBAJgxGLiH2AuORM0BcQujqqLpTtcNWZdoMxl9UxelhI9kTkjJ
avmv9Ti8GdPkymoZQdF9KX0FNlnnc7cyue1vCAfjPJ0UmlqMnQE4sgTTJqGVw1hZ
50WRAggq7CZPTKcEi0EoRpZUyaTv/uX6mkdWH6puIgPzhz5SkXRePCgKtKfs8HQq
86fKkPIsbT4zWfrF/Pi+m2Bhi2lBZKXlQ6dFJfqZWND6OSkTz+6bpbfdZptW6zlw
ZzAo+peR6+QokKOcErDPuE1F2RXPtqwqdbPlfFSWDhio4FguZyLnyUWLxHx5uYH0
gJOFC2LxlKQjVxuvWavYJJKk6t8eDO5cXPr/eIY=
-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org