Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
File: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=
Subject key identifier: 5E:83:F3:B5:8E:6F:40:A0:52:1F:FE:B3:FD:2D:52:C3:61:BC:A3:59
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 2F1C9C7F10D0EE7143D3E06C84A409B57F677BEA
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
Signing time: Thu 27 Mar 2025 14:58:00 +0000
ROA not before: Thu 27 Mar 2025 14:53:00 +0000
ROA not after: Thu 26 Mar 2026 14:58:00 +0000
asID: 13347
IP address blocks: 62.122.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1c:9c:7f:10:d0:ee:71:43:d3:e0:6c:84:a4:09:b5:7f:67:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 27 14:53:00 2025 GMT
Not After : Mar 26 14:58:00 2026 GMT
Subject: CN=5E83F3B58E6F40A0521FFEB3FD2D52C361BCA359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:9f:ff:99:cd:46:71:e4:3a:96:35:ef:8b:
9e:8d:3b:3e:16:1e:a9:c7:0f:39:7d:ec:8a:b5:da:
66:a2:4f:f3:33:3f:06:16:12:39:70:ce:33:4b:00:
af:8d:0f:9c:23:ad:e7:61:bc:54:8f:39:71:ea:bc:
9b:84:ee:db:dd:74:61:45:e6:39:b9:28:d7:f0:58:
d2:9a:82:1f:c1:84:20:79:43:83:01:59:72:99:95:
03:f0:66:85:4b:e8:fe:24:6a:d2:61:42:cc:11:b2:
ca:65:b9:ac:84:08:20:76:b8:ba:ce:c1:f0:82:c6:
3f:2f:c2:e1:90:f4:31:f6:e1:d8:3f:d5:82:15:c7:
9e:ae:f6:b1:c4:da:88:91:70:e2:76:88:1b:46:de:
e8:e9:40:a0:e5:e5:f2:1a:6f:d7:60:e3:84:ca:1e:
bb:6e:3a:12:52:48:14:63:04:cf:58:7f:34:76:eb:
52:5a:16:34:d4:b3:f0:d4:64:19:09:80:f2:9b:68:
55:36:08:21:66:25:a2:8a:6f:64:50:3d:e6:cc:2d:
75:d8:d3:47:72:52:e7:68:1d:61:b6:6e:c0:4b:20:
74:22:9e:cc:2d:bb:22:40:b8:f2:06:ed:b7:bf:d7:
ab:e0:87:b2:20:3b:49:f0:b9:d4:1e:78:f7:65:a2:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:F3:B5:8E:6F:40:A0:52:1F:FE:B3:FD:2D:52:C3:61:BC:A3:59
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
42:df:ad:f8:7b:b0:71:5c:b4:c1:29:4a:31:33:1b:6c:24:74:
f7:4f:32:f8:de:db:b0:57:37:76:b6:c5:9c:30:40:22:9a:bf:
2d:bd:aa:07:4c:3c:d5:9f:e3:f5:05:06:35:55:20:27:14:bb:
87:7f:17:02:b8:11:ec:8f:b3:00:51:0f:17:c9:a0:7b:78:c6:
0b:d5:e7:d7:69:a0:3c:9b:39:da:86:4b:01:b4:a2:09:8c:d0:
aa:52:b5:0e:60:7b:cf:9b:74:32:20:f4:6b:b6:d0:cc:aa:22:
a2:52:cf:2f:2c:c3:2c:8a:40:2b:46:78:a6:95:0f:77:eb:89:
b3:d8:cf:dc:5e:48:7b:b6:40:1d:77:7b:44:00:7f:d1:a7:4b:
c9:b5:eb:94:90:c3:53:19:e6:92:07:35:02:2c:d3:6b:aa:52:
a9:8e:37:71:42:58:a3:e1:68:00:06:b7:cc:59:33:0d:73:4d:
c1:fb:2c:44:51:91:a6:c0:97:aa:01:d9:38:82:3f:de:c1:ab:
81:26:b0:23:9a:02:ad:d3:a0:8e:21:a8:ef:d6:d2:31:84:3e:
43:6b:af:5e:09:ec:5b:c9:6b:36:03:74:cd:22:83:0a:86:15:
58:41:35:e4:30:4e:95:a7:c9:70:ef:18:2e:ad:8b:14:61:56:
4e:c5:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:19:54 2025 by rpki-client