Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
File: 36322e3230342e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hr6gYJlr5u1kUpXVVZIkmAph1cSJBThS7vlQO+chOGw=
Subject key identifier: 0D:88:8F:4A:BE:6E:84:44:63:DE:BF:B3:6F:F4:E2:5C:D0:A0:D8:9C
Certificate issuer: /CN=b3d614895c94d30810a11d74ca52246da3bd84fc
Certificate serial: 024E69A1D07E1BC16A6F1449AA79A6B2F1897A27
Authority key identifier: B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 14:29:07 +0000
ROA not before: Mon 01 May 2023 14:24:07 +0000
ROA not after: Mon 29 Apr 2024 14:29:07 +0000
asID: 136787
IP address blocks: 62.204.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4e:69:a1:d0:7e:1b:c1:6a:6f:14:49:aa:79:a6:b2:f1:89:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d614895c94d30810a11d74ca52246da3bd84fc
Validity
Not Before: May 1 14:24:07 2023 GMT
Not After : Apr 29 14:29:07 2024 GMT
Subject: CN=0D888F4ABE6E844463DEBFB36FF4E25CD0A0D89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:74:2e:e5:bc:0a:0b:55:85:95:8d:1f:48:
9b:d5:dc:ee:00:9a:57:0e:04:72:22:fe:f2:86:b5:
95:3d:6b:03:47:1d:9e:20:1f:d0:f3:c1:d4:94:1b:
b2:0d:18:d4:1d:1c:ad:de:14:40:8b:ce:aa:b7:32:
8c:74:06:32:d0:31:09:a6:90:59:a0:2f:4b:a3:cc:
3d:bd:47:fa:f4:25:f2:30:6e:fe:f9:40:05:01:0c:
f7:cb:14:36:ee:c2:d4:9e:e3:21:58:4d:de:a1:7d:
19:94:24:9c:89:57:67:30:02:7c:d1:50:dc:49:79:
48:b9:cd:00:a8:01:8f:dc:a3:7d:08:81:c1:d8:36:
68:9f:d8:9c:d7:3c:0a:92:66:d2:d7:6a:97:f1:bb:
49:38:3a:53:71:7c:fe:36:3e:3b:e9:1c:23:dd:0c:
52:4a:7a:fd:2c:25:34:db:2f:07:9e:64:76:c4:22:
b0:15:21:b0:69:46:73:4c:e1:62:11:0c:c8:69:2c:
73:2c:25:9f:cc:4f:db:d4:9f:f9:7b:ad:57:f7:74:
86:95:2c:b1:85:90:75:50:a1:97:94:0d:8a:05:53:
b5:32:05:a0:0f:a6:a5:97:70:09:fc:db:e5:44:0c:
5c:8b:5e:0d:82:b6:8b:12:76:e0:5e:ce:fb:94:d6:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:8F:4A:BE:6E:84:44:63:DE:BF:B3:6F:F4:E2:5C:D0:A0:D8:9C
X509v3 Authority Key Identifier:
keyid:B3:D6:14:89:5C:94:D3:08:10:A1:1D:74:CA:52:24:6D:A3:BD:84:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/B3D614895C94D30810A11D74CA52246DA3BD84FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9YUiVyU0wgQoR10ylIkbaO9hPw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/222/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0e:c7:07:d1:9a:5c:8b:ce:b2:0e:8b:1f:06:28:52:da:91:
f8:41:43:40:78:f2:32:04:b3:21:ee:2c:12:7a:85:c2:ae:fc:
79:fb:e1:e2:f6:b2:81:7c:98:4b:40:a2:31:3f:16:a4:4b:19:
6c:b5:19:0e:4e:a0:43:53:19:df:0b:65:53:5e:0f:f4:e1:21:
57:61:2c:cb:44:60:5d:a9:7a:5d:53:94:7a:71:1f:29:ba:e6:
79:7b:ef:bf:ac:e0:cc:b4:31:e5:f1:53:11:70:a0:a2:8a:42:
0d:bf:c6:90:08:85:29:5b:d8:3b:be:d7:44:5d:a5:86:96:8a:
98:a0:b6:d6:10:77:79:f6:96:6f:95:fd:26:98:55:41:0e:1e:
f2:04:ec:76:52:4d:5d:35:21:5d:61:db:9d:a0:5c:4a:60:32:
b5:c1:21:72:ec:63:e9:94:9f:c5:68:7f:a1:d4:c3:43:e1:33:
40:ba:ce:d6:1d:4c:c9:0c:f1:bf:e3:9d:f3:75:73:d6:26:0b:
a9:c3:de:1f:4e:3b:a4:3e:6f:c3:83:e7:ae:40:f9:da:70:3f:
43:03:86:7d:5e:10:87:9b:e4:2c:99:b9:bb:f3:d4:34:a6:ac:
07:16:70:6f:5f:29:a6:fc:16:d6:4e:c4:4a:f9:9c:43:fb:9e:
24:f0:19:4a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUAk5podB+G8FqbxRJqnmmsvGJeicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNkNjE0ODk1Yzk0ZDMwODEwYTExZDc0Y2E1MjI0NmRh
M2JkODRmYzAeFw0yMzA1MDExNDI0MDdaFw0yNDA0MjkxNDI5MDdaMDMxMTAvBgNV
BAMTKDBEODg4RjRBQkU2RTg0NDQ2M0RFQkZCMzZGRjRFMjVDRDBBMEQ4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfW3Qu5bwKC1WFlY0fSJvV3O4A
mlcOBHIi/vKGtZU9awNHHZ4gH9DzwdSUG7INGNQdHK3eFECLzqq3Mox0BjLQMQmm
kFmgL0ujzD29R/r0JfIwbv75QAUBDPfLFDbuwtSe4yFYTd6hfRmUJJyJV2cwAnzR
UNxJeUi5zQCoAY/co30IgcHYNmif2JzXPAqSZtLXapfxu0k4OlNxfP42PjvpHCPd
DFJKev0sJTTbLweeZHbEIrAVIbBpRnNM4WIRDMhpLHMsJZ/MT9vUn/l7rVf3dIaV
LLGFkHVQoZeUDYoFU7UyBaAPpqWXcAn82+VEDFyLXg2CtosSduBezvuU1jrvAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUDYiPSr5uhERj3r+zb/TiXNCg2JwwHwYDVR0j
BBgwFoAUs9YUiVyU0wgQoR10ylIkbaO9hPwwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMjIvQjNENjE0ODk1Qzk0RDMwODEwQTExRDc0Q0E1MjI0NkRBM0JEODRG
Qy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5WVVpVnlVMHdnUW9SMTB5bElr
YmFPOWhQdy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIyMi8zNjMyMmUzMjMwMzQy
ZTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA+zC0wDQYJKoZIhvcNAQELBQADggEBAEYOxwfRmlyLzrIOix8GKFLakfhB
Q0B48jIEsyHuLBJ6hcKu/Hn74eL2soF8mEtAojE/FqRLGWy1GQ5OoENTGd8LZVNe
D/ThIVdhLMtEYF2pel1TlHpxHym65nl777+s4My0MeXxUxFwoKKKQg2/xpAIhSlb
2Du+10RdpYaWipigttYQd3n2lm+V/SaYVUEOHvIE7HZSTV01IV1h252gXEpgMrXB
IXLsY+mUn8Vof6HUw0PhM0C6ztYdTMkM8b/jnfN1c9YmC6nD3h9OO6Q+b8OD565A
+dpwP0MDhn1eEIeb5CyZubvz1DSmrAcWcG9fKab8FtZOxEr5nEP7niTwGUo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org