Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/36322e332e34352e302f32342d3234203d3e20323031333431.roa
File: 36322e332e34352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 0A1nVOlJAM7JxtVM0yeJQ1/Obj2HQswUx3RV99RjZmg=
Subject key identifier: 82:F9:67:C8:0C:23:BA:0F:8E:12:97:22:82:99:4F:E2:45:64:E7:69
Certificate issuer: /CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
Certificate serial: 7A81DBD2850034420E90C445B7FF4A1D061DC0A1
Authority key identifier: C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/36322e332e34352e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:10 +0000
ROA not before: Mon 27 Mar 2023 08:22:10 +0000
ROA not after: Mon 25 Mar 2024 08:27:10 +0000
asID: 201341
IP address blocks: 62.3.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:81:db:d2:85:00:34:42:0e:90:c4:45:b7:ff:4a:1d:06:1d:c0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
Validity
Not Before: Mar 27 08:22:10 2023 GMT
Not After : Mar 25 08:27:10 2024 GMT
Subject: CN=82F967C80C23BA0F8E12972282994FE24564E769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:0c:15:89:ed:99:3c:59:ad:c7:9e:fa:8a:
d4:6b:3b:9e:52:80:12:74:20:62:bb:18:5b:fe:50:
56:f9:3f:63:ff:eb:97:38:42:be:a6:c8:af:8a:21:
4a:17:39:ad:61:e6:44:d3:32:c4:e5:33:5d:08:84:
98:c9:60:a9:37:b8:c4:e1:dd:7b:51:55:d1:5f:73:
f7:14:d0:62:c7:1e:3d:eb:1a:9d:be:31:36:8a:d4:
a6:c6:4d:5e:25:e7:a7:df:88:42:8d:09:18:a6:0c:
7d:bf:c3:3b:25:b6:85:64:56:a2:66:75:0d:7a:c5:
12:57:13:4a:36:38:0b:46:4e:38:31:e7:51:fd:e1:
51:18:16:61:f6:50:61:ad:b5:b9:6d:30:31:1c:4b:
9c:d1:02:78:93:d7:4c:69:be:42:ff:79:df:1c:65:
e2:99:82:1d:0e:ed:c6:0a:ac:b2:3b:fb:01:81:63:
7d:12:d5:c7:42:9a:ac:ce:84:b1:a7:da:d8:c6:b4:
9d:51:cd:6e:bf:79:4b:1e:7b:65:b1:80:3b:de:96:
55:27:04:20:8f:d2:a9:d8:65:a9:8a:68:e5:c4:d6:
e9:23:ff:6f:27:46:1a:c3:a8:cc:08:2e:6e:75:14:
2b:3a:79:45:a1:a6:ba:e5:41:c8:ad:48:a6:21:2e:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:67:C8:0C:23:BA:0F:8E:12:97:22:82:99:4F:E2:45:64:E7:69
X509v3 Authority Key Identifier:
keyid:C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/36322e332e34352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:59:47:45:e5:af:f0:10:88:55:f3:ee:d9:bd:8d:b9:1d:
76:72:ab:d1:eb:42:96:2d:a9:84:73:16:5e:be:00:cc:d1:64:
3b:e5:62:73:47:db:69:8d:ee:14:a8:0d:02:9c:7e:81:e3:ab:
32:0b:4a:5f:d8:7b:9d:10:6a:c8:fc:88:96:3e:55:ac:75:2a:
fe:31:c1:f3:49:6d:d5:91:47:54:c1:7b:43:e5:26:23:4a:db:
66:08:49:e3:27:ec:29:c3:b4:48:eb:07:90:90:17:9e:a1:d3:
12:ff:6e:89:9b:43:74:80:79:1a:2f:1b:93:bf:fb:1a:ef:09:
ab:24:24:f6:c2:b1:91:9c:23:7a:5c:ad:2a:52:86:92:1a:a7:
2d:03:62:77:e8:a2:d1:d9:2c:ae:d1:04:41:60:f2:34:90:b4:
75:28:cc:18:17:f6:47:ba:39:79:ec:f5:2f:41:2d:55:a6:41:
ac:cb:b1:0a:c0:7f:49:99:8b:6c:19:5c:10:a0:ec:1e:4c:d8:
82:08:f1:e2:b1:57:93:87:d6:89:12:a5:a4:85:b9:a3:18:9b:
86:9e:aa:dc:d9:ea:86:cc:2e:f7:32:fe:db:3e:4d:ac:fb:bc:
b4:da:8f:4e:37:a1:84:08:7b:df:0b:0c:e0:3d:6e:9b:8e:99:
b7:aa:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org