Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
File: 36322e3130362e37322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 3al8Sm5fDSUPg1GQoSoCoCKaRaeG+fSPm98P+3FPqM8=
Subject key identifier: 7B:A9:3D:DA:C2:54:94:6B:F6:42:96:40:44:61:F3:C8:48:DC:B2:29
Certificate issuer: /CN=436ca3f8eb1494057f369ae60413324fcd2d62bf
Certificate serial: 32BE519B75DB49D7B84DD52A19CECDB257CB87A4
Authority key identifier: 43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2yj-OsUlAV_NprmBBMyT80tYr8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 201341
IP address blocks: 62.106.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:be:51:9b:75:db:49:d7:b8:4d:d5:2a:19:ce:cd:b2:57:cb:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436ca3f8eb1494057f369ae60413324fcd2d62bf
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=7BA93DDAC254946BF64296404461F3C848DCB229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:d5:86:97:a6:f2:4e:a6:1e:47:7d:18:6e:
fd:22:bf:ab:55:94:92:82:6b:60:f5:5a:59:e4:bb:
41:dd:2c:d0:3f:e0:64:a4:f1:07:54:7c:19:63:4d:
f1:39:44:9c:24:ac:d4:89:1b:69:b7:ce:60:c1:58:
10:d5:65:5e:e0:1a:44:d9:88:25:9d:b0:ba:7c:38:
e6:5b:87:1b:18:fe:b2:db:6a:e9:dc:47:4f:c6:85:
cf:54:7a:64:a2:f8:92:17:24:f7:ec:db:00:86:da:
bf:4a:56:3a:d3:44:5e:27:13:56:9a:2d:49:67:1b:
5b:37:60:4a:03:fb:e2:69:5e:f4:3b:e3:4d:f9:b5:
30:bf:0f:3e:81:3a:07:03:b3:f0:8d:2e:f9:39:55:
1c:44:9f:22:8d:a0:b5:2c:62:c6:69:95:63:f2:1d:
5c:5a:b7:7c:4c:bd:75:60:d8:a3:1c:39:df:b2:09:
5a:09:dc:81:df:fc:3f:1f:07:a3:73:ec:23:46:9a:
47:2d:cf:b5:31:1f:48:68:7e:25:18:25:64:94:d8:
b0:10:b2:47:b1:40:4a:44:fe:c0:47:c6:70:98:96:
3e:3c:b7:11:1c:c5:c4:e1:75:1a:06:f6:29:4e:59:
61:16:94:87:e7:a9:c9:d9:ec:09:d5:d8:50:4f:39:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:3D:DA:C2:54:94:6B:F6:42:96:40:44:61:F3:C8:48:DC:B2:29
X509v3 Authority Key Identifier:
keyid:43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2yj-OsUlAV_NprmBBMyT80tYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:72:d6:0f:50:1d:29:3e:f7:84:e8:98:bf:a2:da:3c:94:b3:
d9:74:93:09:80:07:b0:a7:97:c5:04:29:25:c1:e3:37:76:27:
3f:62:a0:a7:7c:56:1d:f7:8b:b0:f5:54:1c:0f:37:b7:2c:44:
fd:8c:d9:68:ca:1c:9b:bc:8c:71:29:fd:d0:67:da:3f:5e:35:
63:51:64:7f:da:4a:51:8c:95:09:95:65:f8:be:e8:c7:31:ee:
e3:ca:ea:f5:16:c7:39:19:67:e1:60:87:2c:68:11:8a:e5:93:
78:18:c3:1c:21:fd:1b:3c:82:7a:a5:9e:f6:22:bd:7c:59:f0:
33:dc:99:fd:f0:8e:a6:d2:e3:18:85:4c:75:df:03:4d:32:83:
1d:d9:3a:62:63:dd:09:d7:88:2b:af:92:78:b2:21:b3:d2:94:
a6:fe:6a:a7:cf:98:7a:9e:8f:64:2d:d8:3a:64:49:0c:0b:39:
c8:25:87:39:d8:de:4c:1a:82:bf:87:5a:6a:b2:a5:fe:0b:4a:
1f:9f:8c:14:64:c5:59:1d:5f:78:a9:13:d4:87:73:de:43:cb:
12:9d:51:bf:5e:9a:96:d3:12:55:b8:6f:5d:cd:30:7a:2c:be:
aa:91:b4:70:56:cf:63:f3:d3:cb:11:e1:82:4c:6a:49:61:43:
b5:5d:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org