Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa
File: 36322e332e32352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: Xg3ezVkYWrSo6SUsusu+cxuDk5xk5faTFDzJ3bEnS4k=
Subject key identifier: A8:DE:F2:67:4C:AB:71:DE:46:EE:A5:E1:16:D3:EF:72:F9:3A:0F:C7
Certificate issuer: /CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
Certificate serial: 0A518BE1F98D08C5884B907FFE72AB90E71A9A05
Authority key identifier: F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:44 +0000
ROA not before: Mon 27 Mar 2023 08:22:44 +0000
ROA not after: Mon 25 Mar 2024 08:27:44 +0000
asID: 201341
IP address blocks: 62.3.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:51:8b:e1:f9:8d:08:c5:88:4b:90:7f:fe:72:ab:90:e7:1a:9a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
Validity
Not Before: Mar 27 08:22:44 2023 GMT
Not After : Mar 25 08:27:44 2024 GMT
Subject: CN=A8DEF2674CAB71DE46EEA5E116D3EF72F93A0FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:97:5d:4b:57:68:fa:a2:3a:79:f6:1f:d5:
3e:af:11:a7:34:5b:3e:f2:fd:9d:d0:f4:f2:09:ce:
ee:eb:13:c1:05:4b:df:65:b2:44:82:bc:15:e1:d8:
8d:34:c1:5e:b9:4b:1b:48:ed:1e:05:b6:41:7c:a7:
4f:5c:1b:e1:20:eb:93:ac:31:bc:88:48:67:64:bb:
44:0f:ad:1d:9e:94:02:a1:1a:6a:d1:08:4c:4e:e4:
f0:f4:5e:6d:b9:83:b8:54:4b:78:79:97:e1:c8:e5:
90:ed:cc:d3:7c:4f:3e:60:48:0f:21:fe:3f:92:c9:
b9:01:8c:d3:75:b0:77:b7:7a:73:6f:31:64:11:52:
66:31:65:88:0d:74:2e:0b:10:e0:ce:a8:f2:df:ab:
ec:11:7d:be:66:01:11:43:6f:d1:c7:1c:64:17:84:
6e:5a:1e:d2:c2:88:0c:e2:f1:93:ad:1c:30:41:54:
c4:10:3a:2d:84:71:f5:57:c1:86:d4:0f:02:5c:4c:
a2:c6:52:b4:6a:3d:a3:bc:ef:8f:6d:95:76:48:7d:
8a:7a:c4:be:b3:a3:89:67:e5:1d:5a:d4:cc:62:a0:
c4:72:4a:98:1f:6b:b9:20:20:2c:40:dc:94:b3:32:
14:57:26:c5:67:9e:a4:15:78:b6:6c:4c:31:53:17:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:F2:67:4C:AB:71:DE:46:EE:A5:E1:16:D3:EF:72:F9:3A:0F:C7
X509v3 Authority Key Identifier:
keyid:F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/36322e332e32352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a4:0e:45:ee:09:f7:52:59:a1:2a:43:3f:81:64:40:89:ad:
57:75:42:55:a5:f5:b5:fe:d8:0b:3d:ad:fb:06:8c:59:82:3e:
a7:71:54:5d:c0:32:9c:be:28:62:dc:1d:4e:36:a6:6f:24:81:
09:05:c1:4a:0f:16:88:5d:91:e6:12:eb:51:05:a7:a7:2f:a8:
79:6e:bd:b9:2c:5c:98:af:b7:59:0c:c8:ad:93:c0:d9:1c:78:
33:c0:0d:9c:15:2c:0b:29:7f:4f:2f:a0:6c:67:8f:2e:c2:92:
23:0b:d1:57:40:2f:77:9a:51:22:89:ca:5a:a4:f8:cc:bf:91:
e1:26:13:7c:12:d0:30:58:b7:98:25:7d:b6:19:01:8a:58:4b:
c2:27:17:45:71:67:d0:c3:de:eb:c1:82:6d:fe:dd:cc:58:31:
30:b6:c4:4d:be:5c:1e:0f:a1:c0:bb:09:20:e6:56:2b:5b:3a:
7f:11:8b:0b:3f:a1:1b:0c:b6:8a:33:86:93:1a:ce:3b:3f:92:
bb:f7:50:3c:31:d5:d3:cb:ce:25:b0:10:e7:c3:b8:2c:41:ef:
c5:66:ca:01:70:83:4a:63:1e:7c:56:79:9a:19:97:8b:89:9d:
6e:6b:12:7f:3a:39:7f:c0:89:a7:be:b6:7e:3b:6a:62:49:16:
86:9b:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org