Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
File: 33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: dtdxhCIXERhZPoWLWZcDsIHxyCxZDvsG3SEHHkXwfhA=
Subject key identifier: 61:30:E2:19:FC:2D:19:8B:3D:F8:5F:9E:9B:7E:EF:9F:09:62:AB:4A
Certificate issuer: /CN=3df98017329492d62229f4a4c1dd782b87f27b01
Certificate serial: 603FF5F0039984111A4B57E2A14B972225DE1499
Authority key identifier: 3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfmAFzKUktYiKfSkwd14K4fyewE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:49 +0000
ROA not before: Mon 27 Mar 2023 08:22:49 +0000
ROA not after: Mon 25 Mar 2024 08:27:49 +0000
asID: 201341
IP address blocks: 37.140.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3f:f5:f0:03:99:84:11:1a:4b:57:e2:a1:4b:97:22:25:de:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df98017329492d62229f4a4c1dd782b87f27b01
Validity
Not Before: Mar 27 08:22:49 2023 GMT
Not After : Mar 25 08:27:49 2024 GMT
Subject: CN=6130E219FC2D198B3DF85F9E9B7EEF9F0962AB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:d4:e9:74:bd:cf:0f:39:fd:42:eb:09:96:
67:8e:53:2e:e3:d2:c8:0e:88:ff:10:f8:27:57:2f:
c6:b0:cb:68:cf:fb:64:97:25:58:de:d5:5d:e0:09:
fc:38:fc:e8:a3:71:0e:ac:6e:ff:70:fc:34:2e:be:
16:cb:d1:e9:8a:8f:ec:28:6d:a8:7e:ba:bb:5d:5d:
7f:2b:0f:5f:4b:e9:c3:11:7d:7e:e2:30:98:57:79:
2c:23:b2:52:bd:b7:70:aa:ad:c1:f6:de:3c:ec:7f:
60:1f:1c:36:44:22:5d:08:d9:79:91:83:91:2f:3a:
86:87:bd:14:f3:d1:d6:e9:8f:39:b3:0f:fa:d6:3e:
ca:a3:43:5f:4f:49:55:0e:e7:6f:5f:a8:0c:44:ba:
16:17:9f:b5:da:96:40:02:74:bd:b9:ba:44:fe:1c:
85:b8:ed:98:f4:99:9b:b3:2d:f6:a6:73:12:00:ee:
73:c7:a3:f1:8d:cf:b5:27:3c:91:03:9a:77:b3:eb:
04:c5:26:4f:59:25:ea:dc:dc:cb:bf:60:f8:c2:8b:
fa:a8:14:20:e0:26:e3:70:da:03:6d:63:33:64:53:
4e:92:20:55:64:63:12:d6:f0:fd:01:9b:e2:5e:8d:
5d:71:9e:d9:fb:e6:9d:8c:41:4c:1e:df:a1:27:27:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:E2:19:FC:2D:19:8B:3D:F8:5F:9E:9B:7E:EF:9F:09:62:AB:4A
X509v3 Authority Key Identifier:
keyid:3D:F9:80:17:32:94:92:D6:22:29:F4:A4:C1:DD:78:2B:87:F2:7B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/3DF98017329492D62229F4A4C1DD782B87F27B01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfmAFzKUktYiKfSkwd14K4fyewE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/210/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:42:35:b8:52:d4:2b:ee:57:92:cb:ba:15:a2:16:66:1a:
ba:b6:49:e5:cf:45:1e:b8:8e:48:73:d0:99:2c:7c:87:ae:47:
67:c6:a7:1d:d4:53:a3:37:17:0d:5f:67:84:df:1d:89:ef:48:
1f:b9:79:bd:c5:e8:d1:b1:ce:03:1e:90:e1:13:e7:a8:ce:f7:
13:e6:4c:2a:2c:e6:69:18:1a:d8:08:4c:86:e7:fa:da:07:09:
33:3d:8f:b9:39:68:7a:e5:e1:e0:5d:34:0b:28:7e:6d:90:bf:
74:f2:28:42:e7:70:51:42:74:e0:ea:5c:51:be:8e:1e:b2:8a:
12:3f:61:c3:de:b5:46:49:e2:d5:9d:45:a3:8a:d9:2d:59:e9:
77:0d:a1:98:87:12:90:f9:2e:8e:0e:1e:5e:b2:7a:ed:9a:97:
a9:a4:28:bd:f8:b9:36:df:e0:19:1a:f8:b1:2e:85:c8:76:94:
f2:0f:74:ed:23:3a:f0:93:16:58:d7:3e:15:e0:5d:5f:f8:99:
b3:35:93:24:f4:05:aa:13:a1:89:e5:ca:0e:d6:37:df:6f:a6:
c5:f0:a3:12:3d:5a:dd:fa:7c:14:b3:5d:05:62:49:7a:56:d1:
9a:45:16:df:9a:71:b9:31:9a:af:a6:fa:e7:11:26:fa:43:e6:
1f:ff:d7:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org