Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e203136323736.roa
File: 36322e332e31382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: l8cTYHPOJMTsuGqCRmJeClrJaUOcNjKQFLv9tsXWUSI=
Subject key identifier: 43:50:63:88:47:96:30:E2:3A:EF:8E:9E:D3:24:3B:2A:88:79:3E:5B
Certificate issuer: /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial: 36F27874D4E705DD956EEE6017BE242DC3661E0C
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e203136323736.roa
Signing time: Wed 22 Mar 2023 19:23:57 +0000
ROA not before: Wed 22 Mar 2023 19:18:57 +0000
ROA not after: Wed 20 Mar 2024 19:23:57 +0000
asID: 16276
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f2:78:74:d4:e7:05:dd:95:6e:ee:60:17:be:24:2d:c3:66:1e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
Validity
Not Before: Mar 22 19:18:57 2023 GMT
Not After : Mar 20 19:23:57 2024 GMT
Subject: CN=43506388479630E23AEF8E9ED3243B2A88793E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:b0:53:f2:14:2f:88:43:2b:eb:40:32:bd:
0d:3b:76:1b:4d:b7:d5:4c:0d:85:68:17:61:db:3e:
2e:54:fc:cb:45:ca:01:f2:b9:7a:6f:8c:61:da:07:
2d:e9:26:9d:a9:94:93:1f:ff:2f:50:9a:f1:f4:3b:
9a:eb:b3:1c:50:6c:2e:ba:3b:c1:40:d0:24:28:f7:
16:9a:4e:11:30:e2:92:22:b3:42:0a:4a:c2:96:44:
ce:92:cd:58:ca:0f:8b:65:26:d8:bf:6a:4b:86:ca:
97:bc:f0:dd:10:df:7b:c7:72:1d:eb:75:4b:f2:53:
9a:8c:f4:eb:98:e1:75:9b:38:08:af:82:13:dd:de:
60:c9:3c:e9:17:ca:51:4c:99:4a:8c:4a:5d:b7:0b:
89:b8:dc:c9:f6:7d:1e:18:2a:0f:50:d4:f6:df:0b:
11:dd:38:1e:f8:0d:01:c7:1a:7e:59:90:11:47:88:
e3:a3:f8:9f:8f:cb:28:ee:e3:c2:7b:78:ad:55:e5:
79:c5:76:d9:98:c0:97:56:ef:15:d2:41:42:98:05:
d8:14:84:eb:5b:28:2e:fa:27:39:0d:d9:e4:73:d8:
f0:00:0d:20:fb:2d:e8:83:6c:69:32:35:42:45:98:
6e:48:35:49:c4:87:0d:15:79:28:74:f8:4c:f5:4f:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:63:88:47:96:30:E2:3A:EF:8E:9E:D3:24:3B:2A:88:79:3E:5B
X509v3 Authority Key Identifier:
keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d0:01:8f:33:ff:b4:1e:ba:2f:a3:a7:7a:ef:a8:9b:76:45:
65:10:d1:31:71:a0:8c:81:87:6d:e2:f3:79:44:d6:df:91:62:
d4:0a:39:a2:94:c2:da:5b:53:14:18:e0:ce:16:9a:df:1c:a3:
78:ce:57:3f:aa:d2:a7:54:e8:2c:49:5b:ec:e8:c8:ab:bf:77:
3c:f0:fb:15:a7:39:03:a2:40:de:df:68:09:8b:02:23:d4:e0:
73:89:0a:0e:c5:35:34:ab:7b:cb:9a:55:65:29:82:a4:68:f1:
b1:4d:2c:7a:76:0a:fc:ba:09:61:d9:86:95:4a:b8:c2:27:31:
38:b7:ff:68:f4:f2:93:92:df:37:1c:c8:33:b5:78:e0:a7:18:
ee:da:62:b2:a7:4a:bb:e2:f7:1b:9f:20:3c:14:4f:bc:ee:d3:
03:a7:09:31:9e:33:99:d9:d8:c1:15:08:19:bb:28:90:1b:af:
bf:82:d5:a1:83:a1:a4:09:8c:f1:32:7a:45:89:68:59:2f:e4:
6d:72:24:76:6e:cd:06:d9:82:b2:fc:a2:5b:ef:35:5c:9e:e6:
1b:3f:56:56:fe:78:05:57:f2:7a:57:f7:40:ed:e1:ba:45:3b:
92:fa:fc:9a:20:4b:35:13:0f:d9:fe:5c:14:62:2e:22:b2:02:
e5:56:f3:6e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNvJ4dNTnBd2Vbu5gF74kLcNmHgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmVkZjc4MDI3MTc5N2YzODhlMDg1NjFlNWI1M2U1MjU5
ZDkyYzg2YTAeFw0yMzAzMjIxOTE4NTdaFw0yNDAzMjAxOTIzNTdaMDMxMTAvBgNV
BAMTKDQzNTA2Mzg4NDc5NjMwRTIzQUVGOEU5RUQzMjQzQjJBODg3OTNFNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXNrBT8hQviEMr60AyvQ07dhtN
t9VMDYVoF2HbPi5U/MtFygHyuXpvjGHaBy3pJp2plJMf/y9QmvH0O5rrsxxQbC66
O8FA0CQo9xaaThEw4pIis0IKSsKWRM6SzVjKD4tlJti/akuGype88N0Q33vHch3r
dUvyU5qM9OuY4XWbOAivghPd3mDJPOkXylFMmUqMSl23C4m43Mn2fR4YKg9Q1Pbf
CxHdOB74DQHHGn5ZkBFHiOOj+J+Pyyju48J7eK1V5XnFdtmYwJdW7xXSQUKYBdgU
hOtbKC76JzkN2eRz2PAADSD7LeiDbGkyNUJFmG5INUnEhw0VeSh0+Ez1Txc5AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUQ1BjiEeWMOI6746e0yQ7Koh5PlswHwYDVR0j
BBgwFoAU/t94AnF5fziOCFYeW1PlJZ2SyGowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2E3N2M5MzctOTMwYy00MTM1LWIxNzktNzAwMmZiMTY2
Njc2LzAvRkVERjc4MDI3MTc5N0YzODhFMDg1NjFFNUI1M0U1MjU5RDkyQzg2QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL190OTRBbkY1ZnppT0NGWWVXMVBsSloy
U3lHby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2E3N2M5Mzct
OTMwYy00MTM1LWIxNzktNzAwMmZiMTY2Njc2LzAvMzYzMjJlMzMyZTMxMzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMSMA0G
CSqGSIb3DQEBCwUAA4IBAQCR0AGPM/+0Hrovo6d676ibdkVlENExcaCMgYdt4vN5
RNbfkWLUCjmilMLaW1MUGODOFprfHKN4zlc/qtKnVOgsSVvs6Mirv3c88PsVpzkD
okDe32gJiwIj1OBziQoOxTU0q3vLmlVlKYKkaPGxTSx6dgr8uglh2YaVSrjCJzE4
t/9o9PKTkt83HMgztXjgpxju2mKyp0q74vcbnyA8FE+87tMDpwkxnjOZ2djBFQgZ
uyiQG6+/gtWhg6GkCYzxMnpFiWhZL+RtciR2bs0G2YKy/KJb7zVcnuYbP1ZW/ngF
V/J6V/dA7eG6RTuS+vyaIEs1Ew/Z/lwUYi4isgLlVvNu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org