Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e203335343039.roa
File: 36322e3132322e3138392e302f32342d3234203d3e203335343039.roa (raw, json)
Hash identifier: d2fqeUhGOs2qy58PlUvhVAqgHtEMRC8xaunnxO5hHWk=
Subject key identifier: 67:6B:4F:0F:E8:E4:B6:0F:50:A1:80:47:D9:DB:AF:39:2A:C1:12:A1
Certificate issuer: /CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Certificate serial: 5FD000AF00281B43C9B28FF73735AB186B9E7F57
Authority key identifier: D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e203335343039.roa
Signing time: Fri 30 Jun 2023 09:19:20 +0000
ROA not before: Fri 30 Jun 2023 09:14:20 +0000
ROA not after: Fri 28 Jun 2024 09:19:20 +0000
asID: 35409
IP address blocks: 62.122.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d0:00:af:00:28:1b:43:c9:b2:8f:f7:37:35:ab:18:6b:9e:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Validity
Not Before: Jun 30 09:14:20 2023 GMT
Not After : Jun 28 09:19:20 2024 GMT
Subject: CN=676B4F0FE8E4B60F50A18047D9DBAF392AC112A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:e4:4f:9f:f8:20:1d:9b:f5:84:83:39:fc:
a1:7b:0c:6c:be:30:b6:7a:e3:13:10:2f:90:7b:33:
60:8e:c1:c8:d8:f9:87:49:b6:91:a9:bd:03:bb:fc:
84:44:41:42:37:45:0c:dc:46:06:33:11:d4:55:84:
ad:e1:a0:42:1a:54:42:76:de:88:04:57:d5:ce:c9:
74:ab:5b:6a:ad:6d:5a:a3:d6:e2:37:b8:08:e7:b5:
e7:5b:72:5d:a0:99:44:d6:ec:1a:c6:e9:86:bf:44:
c7:44:99:7c:dd:39:4c:9d:bf:8d:b3:dd:11:73:2a:
01:7e:19:0b:00:1d:ef:7c:42:ac:da:68:05:e2:58:
f2:f7:7c:90:6d:73:8d:75:4b:e0:8c:8d:b4:25:c9:
01:37:94:b4:0e:16:ce:ee:8f:51:80:66:e5:8f:67:
06:61:aa:ca:45:70:16:5f:84:c8:dc:7e:fc:2e:b7:
e0:52:4e:7d:d2:3f:dd:7a:cf:c9:7c:c6:c8:8e:91:
14:0b:b6:b6:88:7d:be:0c:06:0c:33:19:65:2c:3b:
51:fc:58:22:b6:d7:5d:4a:db:e5:59:43:52:34:0d:
bb:6f:44:21:40:ac:e7:78:8c:a5:aa:1e:e5:82:c5:
8f:ba:0a:b5:a4:3b:4c:52:c5:2c:e1:bd:ab:a0:c9:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:4F:0F:E8:E4:B6:0F:50:A1:80:47:D9:DB:AF:39:2A:C1:12:A1
X509v3 Authority Key Identifier:
keyid:D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e203335343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
24:55:c0:44:39:31:de:d2:f4:41:f3:59:5e:ff:0d:a1:21:da:
77:57:ba:e6:aa:f8:8b:b3:88:5d:09:41:cc:df:37:b6:cf:4a:
9e:5b:dd:2d:98:43:99:59:7b:61:3b:db:4e:4d:a2:fc:a7:0a:
a1:7f:f3:8d:64:77:e1:8e:2f:b7:e1:a0:d7:6a:d7:38:e7:b5:
1e:55:fd:40:bd:35:a6:a8:a2:a8:fc:fd:e7:c6:44:f8:02:75:
70:c1:90:28:5b:42:b7:48:6b:bb:ad:80:59:7d:49:18:5b:fc:
24:8a:ec:23:09:f0:e5:d5:6b:e4:9c:b4:0a:4f:21:f9:32:01:
ed:5d:00:d4:c2:35:42:0b:74:71:d3:eb:36:23:63:57:d4:b5:
89:f7:2a:bb:7a:ca:54:3f:ba:29:c1:32:aa:45:2f:b7:5a:79:
07:fe:75:d7:57:0b:b4:5e:ec:e7:c2:ee:a5:26:7e:7c:90:85:
fb:7d:c9:24:72:87:3c:b3:b7:a5:24:86:ea:47:eb:bc:f0:57:
97:80:c9:a2:79:18:0a:f3:49:6d:7e:1f:9c:39:96:52:8c:d0:
74:d7:70:14:65:49:f3:7c:c4:7f:76:f2:c4:15:4a:b0:22:1c:
93:d2:26:35:1d:d2:bb:53:df:33:82:f4:2d:bf:1e:b6:ae:51:
db:de:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:12 2025 by rpki-client