Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/36322e332e34362e302f32342d3234203d3e20323031333431.roa
File: 36322e332e34362e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: uvQwA3V37d+89n0amzNAINAfeulYTm71yyVRIpO4GeU=
Subject key identifier: 9F:86:25:B9:05:F5:07:B2:DE:81:31:95:61:16:B1:0E:A6:5D:4F:DC
Certificate issuer: /CN=6722873e8965490f2de1eda74859ae2e78579f4a
Certificate serial: 30DA81D7F3FBE4EEFA55596E307AA79161E64085
Authority key identifier: 67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/36322e332e34362e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 201341
IP address blocks: 62.3.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:da:81:d7:f3:fb:e4:ee:fa:55:59:6e:30:7a:a7:91:61:e6:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6722873e8965490f2de1eda74859ae2e78579f4a
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=9F8625B905F507B2DE8131956116B10EA65D4FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:d8:ce:9a:ce:de:0c:c3:66:66:ad:d4:a0:
fb:7f:73:21:19:f6:77:08:ca:02:50:53:c3:3e:4a:
47:4e:71:02:03:00:f6:12:6c:7c:4f:38:eb:b6:8c:
ef:e9:75:f0:21:d1:8e:2f:dc:9a:c7:9b:45:93:ca:
df:f7:5a:3b:67:da:d5:28:99:3a:3a:1e:49:38:43:
32:15:a4:48:df:29:6e:f5:61:77:9a:5e:66:fb:d3:
f2:6a:85:3c:0a:42:11:4c:b4:f4:56:fa:12:4a:3f:
de:6a:e1:6b:96:a2:d7:95:10:ed:f2:0f:5d:5d:eb:
4c:52:0e:db:b8:33:0f:bf:a9:d9:ad:d7:f3:ad:a0:
34:d1:b1:fd:23:64:95:2c:af:fb:5d:8b:5e:51:e4:
d2:58:d6:08:20:6f:25:5d:31:0b:d1:06:28:5b:17:
a6:b7:ba:4d:91:9b:e2:fa:d2:a0:6f:de:0e:02:67:
c1:32:8c:ff:b7:cb:2a:a7:14:b5:de:7e:5c:dd:9a:
30:04:35:6e:24:0f:5d:27:1f:cf:4e:6a:9a:89:37:
27:7e:81:1e:ee:bf:d7:2f:e6:d8:d9:2d:43:f5:51:
f7:41:f7:05:58:1e:4a:90:28:f2:0f:73:f1:f2:54:
9f:ac:d3:8f:1f:ff:d4:59:c4:5a:36:95:c6:00:15:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:25:B9:05:F5:07:B2:DE:81:31:95:61:16:B1:0E:A6:5D:4F:DC
X509v3 Authority Key Identifier:
keyid:67:22:87:3E:89:65:49:0F:2D:E1:ED:A7:48:59:AE:2E:78:57:9F:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/6722873E8965490F2DE1EDA74859AE2E78579F4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZyKHPollSQ8t4e2nSFmuLnhXn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/195/36322e332e34362e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
47:82:9c:13:bf:cd:62:53:68:66:75:76:88:5f:a6:cd:57:39:
24:86:08:c4:db:2d:40:7f:a7:c7:db:8f:94:ab:1a:2c:bf:7b:
62:8a:6f:5c:07:b4:ff:ca:12:7e:72:61:33:f4:ff:99:3e:17:
e3:d7:14:56:09:e7:d7:2e:84:ab:2e:95:97:bf:17:98:bf:26:
c7:63:84:07:c9:b2:1e:e9:7b:83:0b:5f:dc:5d:75:e3:5f:1b:
39:1b:d1:b9:ed:72:6d:ad:1a:aa:dd:e5:f6:e5:74:99:b1:e2:
65:95:46:df:7e:73:f1:f4:d5:0d:d4:39:51:f0:6b:00:98:8f:
be:d1:84:8f:bc:2e:fb:ad:fd:d0:81:dc:93:43:8b:8f:b7:ba:
be:78:f2:35:9a:fd:ab:a6:3c:b0:d1:2c:77:8b:95:12:c3:18:
d2:1d:18:74:b6:6c:26:f3:89:72:9f:b3:95:85:b1:c8:55:e1:
ac:37:6c:ff:67:6e:e0:e7:9a:a7:f9:ff:ce:18:fa:f5:95:d1:
36:02:3d:7b:93:d7:12:f2:8c:e8:89:93:24:7b:d4:2d:34:d1:
9a:20:7f:d3:0e:ea:ce:27:9e:aa:1e:df:d9:f8:1b:b9:b9:a3:
b9:8a:6b:9d:2e:29:37:68:46:71:37:3a:50:21:03:11:de:fe:
69:3b:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org