Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
File: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (raw, json)
Hash identifier: 9HtCHEOxITNL8BucIYJ5acXc/Zy3XZ/kQrBGAD+uSf8=
Subject key identifier: 47:64:C9:3A:A6:19:DE:B1:43:D7:F4:66:E8:31:9C:41:ED:C6:C6:4F
Certificate issuer: /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial: 0DD8377D4BB8CD41C81512224FF02BA07BD8563C
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
Signing time: Sat 07 Oct 2023 16:20:22 +0000
ROA not before: Sat 07 Oct 2023 16:15:22 +0000
ROA not after: Sat 05 Oct 2024 16:20:22 +0000
asID: 216291
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d8:37:7d:4b:b8:cd:41:c8:15:12:22:4f:f0:2b:a0:7b:d8:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
Validity
Not Before: Oct 7 16:15:22 2023 GMT
Not After : Oct 5 16:20:22 2024 GMT
Subject: CN=4764C93AA619DEB143D7F466E8319C41EDC6C64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:78:61:1f:d6:f7:4d:5b:a2:a5:4a:e6:3a:
89:ba:b4:3d:26:5e:59:4b:03:81:bd:15:b2:25:bc:
78:f0:7d:74:19:81:02:4d:03:37:de:ab:82:2f:f0:
53:ae:06:d5:f2:25:8b:60:22:4f:eb:e6:8f:e5:a9:
c8:6d:57:82:71:a1:03:31:dc:6b:d8:b0:06:6f:96:
ba:63:2b:d4:11:9c:df:2d:86:e5:50:85:8a:87:36:
a4:5b:4e:e4:5d:cc:e7:1e:81:5c:15:9d:a4:d5:16:
d6:2e:ee:85:16:1b:8e:ad:ab:0c:b6:d5:f3:fb:ba:
1c:07:a8:ab:f3:4e:fb:ec:be:47:83:67:89:0b:fb:
09:e5:45:0e:34:fc:9b:73:f6:3a:21:96:09:21:e4:
27:21:db:42:1a:fe:0a:6d:73:c7:b8:e9:98:96:cd:
36:2e:bf:87:ed:f0:61:8b:e5:7f:d3:79:ad:98:db:
47:51:45:c6:9a:e3:da:6c:e8:c6:13:47:03:27:9a:
c6:45:9c:36:74:29:0c:47:84:b2:cc:52:e0:84:aa:
92:73:06:26:a1:32:c6:54:6a:8e:d6:1f:c3:d7:78:
7a:d0:5b:22:28:15:0c:36:66:7f:69:9e:60:12:38:
62:3f:39:92:c6:81:b5:ea:f7:2d:9a:bc:4d:23:1d:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:C9:3A:A6:19:DE:B1:43:D7:F4:66:E8:31:9C:41:ED:C6:C6:4F
X509v3 Authority Key Identifier:
keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
18:64:29:14:f3:91:09:ba:e1:e2:77:42:60:a7:e1:09:b0:6c:
d9:19:8a:29:4a:ef:49:ab:82:29:b5:cb:2e:19:48:40:4b:78:
bf:0d:07:a0:33:a8:57:39:1f:64:68:fe:5a:5c:70:0e:f3:9d:
3e:7b:79:d7:96:c7:84:34:a6:a0:35:b1:c4:4f:0b:66:76:47:
9c:19:ff:12:3f:19:03:3a:e6:21:62:b5:ac:f4:af:0d:1a:3d:
01:3a:92:8f:5c:60:18:55:b7:1a:bf:53:81:95:b8:f4:9f:eb:
04:0a:71:6a:5e:2d:ee:08:51:b3:de:a5:aa:cf:32:30:a4:29:
6e:3f:23:2e:30:08:c7:04:53:9a:fe:7b:bf:1b:67:89:53:00:
30:e9:3a:a4:4b:ce:7b:b1:6b:9b:1c:f1:ec:9e:ee:53:3f:7e:
af:f0:5f:04:e0:64:46:68:4d:59:41:aa:ad:16:bf:05:5c:e2:
4e:08:fe:0d:35:b5:07:b3:28:03:fb:d7:76:41:77:d2:85:57:
64:59:1f:55:ed:28:07:c2:0b:b0:e1:ad:41:7a:f5:2c:e1:77:
9d:ca:75:7b:37:0d:f0:9f:98:f8:13:51:f0:ff:40:59:66:ee:
03:4d:d9:b2:a7:c4:f7:03:cc:22:eb:53:a2:ee:c3:c3:f2:d8:
07:43:79:a3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDdg3fUu4zUHIFRIiT/AroHvYVjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmVkZjc4MDI3MTc5N2YzODhlMDg1NjFlNWI1M2U1MjU5
ZDkyYzg2YTAeFw0yMzEwMDcxNjE1MjJaFw0yNDEwMDUxNjIwMjJaMDMxMTAvBgNV
BAMTKDQ3NjRDOTNBQTYxOURFQjE0M0Q3RjQ2NkU4MzE5QzQxRURDNkM2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcXhhH9b3TVuipUrmOom6tD0m
XllLA4G9FbIlvHjwfXQZgQJNAzfeq4Iv8FOuBtXyJYtgIk/r5o/lqchtV4JxoQMx
3GvYsAZvlrpjK9QRnN8thuVQhYqHNqRbTuRdzOcegVwVnaTVFtYu7oUWG46tqwy2
1fP7uhwHqKvzTvvsvkeDZ4kL+wnlRQ40/Jtz9johlgkh5Cch20Ia/gptc8e46ZiW
zTYuv4ft8GGL5X/Tea2Y20dRRcaa49ps6MYTRwMnmsZFnDZ0KQxHhLLMUuCEqpJz
BiahMsZUao7WH8PXeHrQWyIoFQw2Zn9pnmASOGI/OZLGgbXq9y2avE0jHR0LAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUR2TJOqYZ3rFD1/Rm6DGcQe3Gxk8wHwYDVR0j
BBgwFoAU/t94AnF5fziOCFYeW1PlJZ2SyGowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2E3N2M5MzctOTMwYy00MTM1LWIxNzktNzAwMmZiMTY2
Njc2LzAvRkVERjc4MDI3MTc5N0YzODhFMDg1NjFFNUI1M0U1MjU5RDkyQzg2QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL190OTRBbkY1ZnppT0NGWWVXMVBsSloy
U3lHby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2E3N2M5Mzct
OTMwYy00MTM1LWIxNzktNzAwMmZiMTY2Njc2LzAvMzYzMjJlMzMyZTMxMzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMjM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+AxIw
DQYJKoZIhvcNAQELBQADggEBABhkKRTzkQm64eJ3QmCn4QmwbNkZiilK70mrgim1
yy4ZSEBLeL8NB6AzqFc5H2Ro/lpccA7znT57edeWx4Q0pqA1scRPC2Z2R5wZ/xI/
GQM65iFitaz0rw0aPQE6ko9cYBhVtxq/U4GVuPSf6wQKcWpeLe4IUbPeparPMjCk
KW4/Iy4wCMcEU5r+e78bZ4lTADDpOqRLznuxa5sc8eye7lM/fq/wXwTgZEZoTVlB
qq0WvwVc4k4I/g01tQezKAP713ZBd9KFV2RZH1XtKAfCC7DhrUF69Szhd53KdXs3
DfCfmPgTUfD/QFlm7gNN2bKnxPcDzCLrU6Luw8Py2AdDeaM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org