Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203239383032.roa
File: 36322e332e32302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: Yh/WFiy6mjMsz3/JEAB1LQHTn8LOl84LsqBfB9U/DLc=
Subject key identifier: 76:7D:7F:86:18:F2:3A:D5:06:4A:F1:AF:12:1F:94:0E:BC:5F:2E:15
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 32C9A1CE4AC2BAEFAFDFC08FB3DFD59B988D4F75
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203239383032.roa
Signing time: Tue 10 Dec 2024 14:53:48 +0000
ROA not before: Tue 10 Dec 2024 14:48:48 +0000
ROA not after: Tue 09 Dec 2025 14:53:48 +0000
asID: 29802
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c9:a1:ce:4a:c2:ba:ef:af:df:c0:8f:b3:df:d5:9b:98:8d:4f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 10 14:48:48 2024 GMT
Not After : Dec 9 14:53:48 2025 GMT
Subject: CN=767D7F8618F23AD5064AF1AF121F940EBC5F2E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:53:9f:3a:bd:46:7c:86:85:a6:5b:66:0d:
0d:1a:cd:65:0b:ae:1d:e9:e7:69:85:f9:4d:19:5d:
c3:74:52:79:8f:66:a7:74:ee:5a:96:17:a5:34:c0:
81:a5:3f:de:18:8b:8a:e8:a6:99:ba:20:07:3d:7c:
17:08:07:0f:1c:f8:b1:01:90:47:af:d6:d6:0e:60:
ee:a4:57:20:2b:70:67:d0:c2:9e:a0:55:cb:93:9e:
b3:03:f8:84:71:00:46:78:99:24:12:01:68:82:5d:
ee:58:46:7f:5e:0b:70:2d:fc:97:17:dc:70:30:b5:
dd:be:bb:8c:d9:ad:00:da:94:76:22:96:45:51:57:
91:24:48:ea:cd:03:97:ed:c7:f1:1f:19:e5:e5:33:
b1:af:5f:7e:df:99:58:ac:4b:4d:81:a6:15:87:d5:
04:23:99:5e:2b:94:07:4b:7c:b6:ee:e7:29:08:02:
31:c1:9f:cf:b2:e2:21:5d:19:5d:92:d3:a2:30:08:
ee:c2:ad:d4:b8:77:31:2d:3a:07:2d:44:7d:44:fe:
bc:ab:61:10:03:67:89:14:e8:a5:6f:b2:a4:77:00:
d7:5f:28:3a:02:41:55:5a:9e:ed:5e:f1:0c:33:a0:
10:f7:76:b2:6b:e5:d0:79:4d:1e:f3:02:cb:03:b5:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:7F:86:18:F2:3A:D5:06:4A:F1:AF:12:1F:94:0E:BC:5F:2E:15
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:62:32:9c:0e:6e:6a:c5:4b:f5:cb:87:40:8e:4f:3b:02:e9:
d0:0a:72:90:23:43:07:8b:8a:18:8d:19:cf:bc:3e:9a:8f:67:
a6:22:1a:b3:1e:ec:95:10:8b:2c:61:6c:fe:b8:42:86:0b:60:
df:67:85:91:61:ea:73:48:97:6b:0e:13:d4:01:5b:b2:60:b7:
b3:c2:54:72:fa:1d:26:6d:a4:6b:a9:0a:93:ab:0d:08:68:b6:
e9:99:30:28:75:2a:be:c1:41:a0:ee:aa:6e:d6:27:1a:fa:55:
28:db:3e:da:75:c8:c6:03:05:8c:2b:be:b5:e6:8b:11:a9:a0:
fc:36:19:2d:f8:c9:62:39:de:3b:b2:ed:26:ee:01:05:31:d4:
7e:72:58:79:cc:8d:b3:7f:9d:c0:e6:1d:af:22:44:d6:de:bd:
47:4e:b6:95:9a:7e:c8:34:1b:2f:4c:45:f6:af:61:55:00:89:
a4:cb:81:80:f8:cb:fb:64:59:2b:b5:c0:0f:25:87:85:b5:99:
33:87:45:82:ca:e3:f9:88:18:6d:4e:20:b2:61:f9:54:ef:53:
63:ff:35:ed:17:e5:d7:19:5f:b7:42:af:9e:2a:a3:df:5c:ef:
0e:36:28:db:e7:41:50:f0:96:d0:29:5e:21:bc:eb:a2:e7:ed:
81:8e:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:25 2025 by rpki-client