Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/36322e332e382e302f32342d3234203d3e20323031333431.roa
File: 36322e332e382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: xmF/Xs9TT3G8H+zL6v8YsZwn9pN/CtJB3gMpNngZZOA=
Subject key identifier: 1C:27:74:A9:F2:76:7B:EA:AF:DB:B4:C6:8E:CC:30:7F:65:89:F6:21
Certificate issuer: /CN=9992aec11a485cbd38ed029076b3063e843b196b
Certificate serial: 5B6CD8773865B300ADBC177493BD6FE7F5EC3E9E
Authority key identifier: 99:92:AE:C1:1A:48:5C:BD:38:ED:02:90:76:B3:06:3E:84:3B:19:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKuwRpIXL047QKQdrMGPoQ7GWs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/36322e332e382e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:39 +0000
ROA not before: Mon 27 Mar 2023 08:22:39 +0000
ROA not after: Mon 25 Mar 2024 08:27:39 +0000
asID: 201341
IP address blocks: 62.3.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6c:d8:77:38:65:b3:00:ad:bc:17:74:93:bd:6f:e7:f5:ec:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992aec11a485cbd38ed029076b3063e843b196b
Validity
Not Before: Mar 27 08:22:39 2023 GMT
Not After : Mar 25 08:27:39 2024 GMT
Subject: CN=1C2774A9F2767BEAAFDBB4C68ECC307F6589F621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:28:f2:79:20:d1:22:57:ad:ce:7d:9c:3b:
5d:e9:6c:39:a2:4d:87:7f:cb:eb:c9:f0:aa:9e:af:
c4:1f:86:48:35:3c:ac:23:f3:fd:44:95:f4:f4:db:
ef:86:1e:e1:32:88:d2:fa:d5:da:db:13:0b:7b:79:
36:e3:b9:2e:f7:7b:da:d5:2a:67:6e:f6:8b:ee:15:
f9:27:6b:7a:6c:b6:e8:69:d8:29:79:8e:61:40:4b:
5a:37:b6:71:02:09:24:bf:67:d2:47:0d:ca:c1:ef:
ca:7b:1b:90:74:23:7f:66:7b:5f:92:b1:51:75:26:
67:92:4c:ab:c5:c6:9f:76:a4:a9:2e:1e:17:ab:3e:
09:fd:51:ac:1c:cc:1c:07:b3:dc:08:1b:c5:1b:a8:
4c:73:1e:34:3f:f9:dd:31:4e:0a:40:b0:7c:85:d4:
f2:00:95:0c:d7:0f:12:1a:e2:13:24:ec:06:6f:af:
19:f7:4d:e5:c5:5b:ab:0d:f1:4a:af:9a:da:4a:7e:
75:7a:e3:0d:5b:0d:e9:75:cb:51:d0:31:22:79:bd:
f5:06:9e:e3:b5:2d:61:71:85:45:78:ad:48:69:c4:
94:d8:6d:d2:ce:81:82:fb:53:21:d4:a4:b3:14:7d:
3b:be:fa:aa:fd:ea:5f:45:d0:a2:8b:2b:6e:54:62:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:74:A9:F2:76:7B:EA:AF:DB:B4:C6:8E:CC:30:7F:65:89:F6:21
X509v3 Authority Key Identifier:
keyid:99:92:AE:C1:1A:48:5C:BD:38:ED:02:90:76:B3:06:3E:84:3B:19:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/9992AEC11A485CBD38ED029076B3063E843B196B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKuwRpIXL047QKQdrMGPoQ7GWs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/216/36322e332e382e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.8.0/24
Signature Algorithm: sha256WithRSAEncryption
47:54:3c:10:1b:cb:c6:a9:98:6a:f3:12:1a:97:2f:29:17:77:
3f:3f:a4:38:ba:56:f2:cd:52:b8:8d:a4:b2:12:28:e1:31:72:
33:eb:4a:16:0c:dd:16:e5:9c:99:81:c4:52:99:36:29:f8:22:
c1:3f:56:ce:de:42:2f:b8:4d:d9:ad:1b:71:00:a3:07:b8:0e:
67:c1:e5:4f:de:ac:17:93:bf:0c:e2:56:0b:19:84:c5:cc:db:
20:e1:fb:73:70:cb:31:15:d6:de:a8:ee:dd:09:e9:9e:ad:87:
0c:54:88:88:16:ac:3d:f9:5f:13:76:7b:57:d0:05:75:46:37:
14:1b:61:15:eb:f9:f6:06:10:72:a7:07:65:ca:4f:3f:db:b0:
8b:d2:b0:35:38:a5:f3:99:06:78:63:43:2c:8d:ab:49:f8:da:
a3:8a:1d:24:8e:7f:d0:c9:43:75:57:e3:c6:bd:0d:77:ca:00:
87:e8:da:db:d2:dd:47:a5:f4:d8:32:1d:c0:e5:5b:69:92:e3:
7a:d3:9b:8b:2a:f0:ce:3e:8b:9b:01:58:1c:bb:b3:3b:91:d6:
9d:19:eb:04:a3:13:12:56:10:07:e9:29:be:d7:84:60:13:4c:
29:74:b6:78:72:d4:ef:e6:7d:d3:12:dd:b8:7e:49:74:d2:fe:
fb:e3:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org