Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20313938383235.roa
File: 36322e332e31382e302f32342d3234203d3e20313938383235.roa (raw, json)
Hash identifier: TFRfrsT4nKwCMbOL1IQCW07RFe86AOBXVNw654X0Bhg=
Subject key identifier: 7D:5B:B9:73:A0:1C:57:3F:E8:92:B3:71:85:8B:91:AF:89:92:7D:C9
Certificate issuer: /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial: 08F0101B886300DA5A0E211E158B3F6D53DC7A3A
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20313938383235.roa
Signing time: Sat 16 Sep 2023 13:36:30 +0000
ROA not before: Sat 16 Sep 2023 13:31:30 +0000
ROA not after: Sat 14 Sep 2024 13:36:30 +0000
asID: 198825
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f0:10:1b:88:63:00:da:5a:0e:21:1e:15:8b:3f:6d:53:dc:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
Validity
Not Before: Sep 16 13:31:30 2023 GMT
Not After : Sep 14 13:36:30 2024 GMT
Subject: CN=7D5BB973A01C573FE892B371858B91AF89927DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2d:78:3a:ff:36:ff:1b:b9:4a:17:49:05:78:
3e:0a:b8:84:d9:3f:3d:70:7a:96:18:5f:8c:e2:73:
72:e8:dc:c3:e1:27:c5:af:5f:16:99:8f:f7:4f:64:
bd:6b:9c:f9:72:8d:bd:70:76:29:25:ad:98:af:83:
29:9c:88:7e:37:10:14:b0:23:5f:6c:7e:5d:a3:61:
88:61:33:e0:d8:d5:6b:5e:b4:32:d2:1d:23:a6:3f:
13:ca:94:62:ed:a2:e3:0d:32:68:29:28:5b:dc:56:
9e:76:00:79:46:d7:ad:14:98:77:47:1e:a0:63:07:
0d:ed:18:5c:3e:6a:0f:9a:69:3d:55:8c:50:a2:c0:
08:f1:1b:22:d5:62:a1:11:15:4e:82:cc:9a:61:84:
d6:1c:4f:74:3c:7c:9b:87:5f:75:26:a4:32:3e:b5:
f7:20:b1:f4:b6:31:3c:38:16:70:64:fe:e3:69:2e:
70:31:c4:f7:75:8a:83:24:bf:79:a3:b4:ec:08:53:
52:46:d1:03:ad:b5:65:6b:ea:cd:71:e4:11:98:b1:
45:f8:37:8e:82:67:39:32:b3:21:d3:26:f5:24:25:
9d:ce:ca:b2:61:53:23:5e:fb:23:13:41:ef:92:23:
af:37:d4:84:e7:59:42:0e:ed:6b:db:fe:ce:5b:da:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5B:B9:73:A0:1C:57:3F:E8:92:B3:71:85:8B:91:AF:89:92:7D:C9
X509v3 Authority Key Identifier:
keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20313938383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b8:0f:1a:58:92:0c:0d:1f:fe:86:4e:d3:ec:13:43:ce:97:
a6:35:6a:31:82:40:7f:59:db:dd:90:f8:eb:a2:fd:02:e1:3c:
fa:26:62:a6:22:3c:5c:4f:bf:ae:f3:a5:7a:89:cf:36:35:48:
39:d9:d4:5d:3d:cf:74:ee:cc:8d:f3:60:d7:45:1d:1b:d1:d7:
49:e4:70:34:cd:3e:df:53:64:18:72:6d:93:a5:06:98:d8:31:
11:e8:e4:24:bd:ef:1c:2a:8d:57:5a:e2:35:09:0d:f7:0c:83:
28:ba:13:66:e9:82:76:bc:b9:c5:50:78:fe:4e:61:e4:7d:8a:
a4:d6:58:4b:0a:6a:e8:68:56:19:e5:ad:e8:7a:be:46:72:db:
27:83:c6:c7:47:a2:1a:87:b1:84:25:91:25:74:52:4e:1d:1c:
27:18:72:af:2b:0c:a9:36:71:69:70:e7:22:cf:18:e0:60:56:
40:0f:e9:7e:30:c7:bb:04:60:f0:a2:0c:6a:4f:42:65:c6:7f:
7f:78:78:90:e1:b0:81:5f:51:79:9a:ab:7d:00:78:c3:36:13:
b7:06:96:d1:64:ee:18:eb:65:24:66:2b:1e:76:3a:da:c6:b4:
ce:ca:4d:ae:be:66:6d:9e:6b:a6:c4:53:13:8a:41:6b:d6:98:
78:4b:6c:70
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCPAQG4hjANpaDiEeFYs/bVPcejowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmVkZjc4MDI3MTc5N2YzODhlMDg1NjFlNWI1M2U1MjU5
ZDkyYzg2YTAeFw0yMzA5MTYxMzMxMzBaFw0yNDA5MTQxMzM2MzBaMDMxMTAvBgNV
BAMTKDdENUJCOTczQTAxQzU3M0ZFODkyQjM3MTg1OEI5MUFGODk5MjdEQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5LXg6/zb/G7lKF0kFeD4KuITZ
Pz1wepYYX4zic3Lo3MPhJ8WvXxaZj/dPZL1rnPlyjb1wdiklrZivgymciH43EBSw
I19sfl2jYYhhM+DY1WtetDLSHSOmPxPKlGLtouMNMmgpKFvcVp52AHlG160UmHdH
HqBjBw3tGFw+ag+aaT1VjFCiwAjxGyLVYqERFU6CzJphhNYcT3Q8fJuHX3UmpDI+
tfcgsfS2MTw4FnBk/uNpLnAxxPd1ioMkv3mjtOwIU1JG0QOttWVr6s1x5BGYsUX4
N46CZzkysyHTJvUkJZ3OyrJhUyNe+yMTQe+SI6831ITnWUIO7Wvb/s5b2lCrAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUfVu5c6AcVz/okrNxhYuRr4mSfckwHwYDVR0j
BBgwFoAU/t94AnF5fziOCFYeW1PlJZ2SyGowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2E3N2M5MzctOTMwYy00MTM1LWIxNzktNzAwMmZiMTY2
Njc2LzAvRkVERjc4MDI3MTc5N0YzODhFMDg1NjFFNUI1M0U1MjU5RDkyQzg2QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL190OTRBbkY1ZnppT0NGWWVXMVBsSloy
U3lHby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2E3N2M5Mzct
OTMwYy00MTM1LWIxNzktNzAwMmZiMTY2Njc2LzAvMzYzMjJlMzMyZTMxMzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzODMyMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+AxIw
DQYJKoZIhvcNAQELBQADggEBAKa4DxpYkgwNH/6GTtPsE0POl6Y1ajGCQH9Z292Q
+Oui/QLhPPomYqYiPFxPv67zpXqJzzY1SDnZ1F09z3TuzI3zYNdFHRvR10nkcDTN
Pt9TZBhybZOlBpjYMRHo5CS97xwqjVda4jUJDfcMgyi6E2bpgna8ucVQeP5OYeR9
iqTWWEsKauhoVhnlreh6vkZy2yeDxsdHohqHsYQlkSV0Uk4dHCcYcq8rDKk2cWlw
5yLPGOBgVkAP6X4wx7sEYPCiDGpPQmXGf394eJDhsIFfUXmaq30AeMM2E7cGltFk
7hjrZSRmKx52OtrGtM7KTa6+Zm2ea6bEUxOKQWvWmHhLbHA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:39 2025 by rpki-client