Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
File: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (raw, json)
Hash identifier: cb3ta0ZICUw4TBhmpfDovuJmFoilBi40vbgr3V8jyjY=
Subject key identifier: 5F:73:B0:F5:EA:C3:DB:D1:80:2A:56:5A:52:C7:C9:10:ED:E6:16:7B
Certificate issuer: /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial: 35D156CFB30227FCEEE8282A2196A336F5F44A23
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
Signing time: Sat 07 Oct 2023 14:16:59 +0000
ROA not before: Sat 07 Oct 2023 14:11:59 +0000
ROA not after: Sat 05 Oct 2024 14:16:59 +0000
asID: 216222
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d1:56:cf:b3:02:27:fc:ee:e8:28:2a:21:96:a3:36:f5:f4:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
Validity
Not Before: Oct 7 14:11:59 2023 GMT
Not After : Oct 5 14:16:59 2024 GMT
Subject: CN=5F73B0F5EAC3DBD1802A565A52C7C910EDE6167B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:15:1b:e5:79:dc:20:16:f2:d2:14:e0:82:
88:8e:38:40:2c:71:d0:d2:7a:f7:de:12:3f:f6:9d:
c5:21:98:ac:f4:2a:10:bb:c5:f3:d1:68:30:c3:6c:
6c:66:4b:a9:12:6c:7e:9d:58:e1:f3:8f:9e:6d:b4:
67:e1:ef:47:26:ed:10:68:e1:ac:42:6d:c1:2e:7e:
4e:16:d1:e3:7f:f8:a6:00:70:d3:08:d1:b6:e2:4c:
cd:3d:3f:83:8e:ca:56:a3:b2:8c:c6:f1:06:33:cc:
bf:b1:58:18:b9:3d:d5:98:27:2f:e6:52:c8:b1:50:
04:c0:14:9e:13:51:15:47:f6:e7:22:78:96:8e:db:
51:1c:f8:62:41:e8:01:17:ea:da:fc:30:82:d5:8f:
d2:dd:f8:4b:49:d0:17:98:5f:45:81:c8:c2:4d:03:
d5:9c:b0:54:65:37:3d:e4:a6:1c:ca:2f:99:27:c6:
09:1c:c1:d5:46:22:ae:56:ad:2e:35:24:2a:b1:69:
6e:12:fe:69:bd:3f:37:5c:92:2e:25:54:4f:52:31:
eb:64:97:4c:55:c7:7e:9a:0c:34:de:42:7d:bd:86:
e9:6d:e8:9a:85:0a:9c:21:96:df:f7:b3:08:94:ef:
f4:2a:c5:c0:f4:25:85:18:b4:e8:48:38:03:c4:0d:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:B0:F5:EA:C3:DB:D1:80:2A:56:5A:52:C7:C9:10:ED:E6:16:7B
X509v3 Authority Key Identifier:
keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8a:50:ff:47:ac:7b:09:13:75:3b:9a:c4:96:04:38:a2:f3:
3f:90:71:f3:a6:41:71:3b:dd:19:99:da:0e:87:07:20:b0:05:
5c:b2:a6:ea:3c:11:63:c6:c1:07:76:18:b9:61:79:51:3b:13:
0c:39:a9:dc:6e:7e:a3:28:0b:2b:15:1c:42:49:be:80:2c:8f:
0b:7f:e3:ad:e7:f4:35:ac:05:83:e9:30:7e:ac:c5:8f:de:45:
1e:e5:d3:a9:0b:f8:98:5d:e4:b2:94:2b:a7:89:b0:b5:e5:b1:
1f:64:6b:f1:6d:55:79:9c:7a:ca:5a:fd:c0:d2:0d:3e:7d:7e:
dc:69:32:21:69:dc:62:fb:cd:27:fe:dd:e5:13:cf:a0:af:1d:
e7:71:9e:93:ae:27:00:e1:ca:d6:99:c4:cb:23:71:23:a1:e9:
8a:ed:eb:c6:6d:07:0a:0c:56:af:9a:3e:9a:da:2b:8c:e1:ef:
aa:05:ca:da:e5:03:82:fa:ed:66:89:f6:07:41:5c:b9:81:fc:
1c:cb:e6:b4:a9:ba:e3:c8:17:86:9f:a3:da:b1:5d:57:02:cb:
68:1b:ac:6f:dd:0e:ca:20:10:c9:ca:da:f5:d3:54:0b:74:94:
7e:e4:be:1c:1a:cf:43:49:e7:29:82:7a:15:9e:c7:72:85:44:
6c:1c:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org