Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
File: 36322e3132322e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: igjvMmsUKWKPDnaPkephiyaOSvpczA43z9f+M/O9P5o=
Subject key identifier: FD:25:8D:D9:94:F7:20:25:85:E2:48:88:2F:63:0E:F5:B3:3B:62:92
Certificate issuer: /CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Certificate serial: 5181B717DCEDD683F20A1AA6340EBDD1F54C4B2C
Authority key identifier: D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Jun 2023 06:22:00 +0000
ROA not before: Fri 30 Jun 2023 06:17:00 +0000
ROA not after: Fri 28 Jun 2024 06:22:00 +0000
asID: 834
IP address blocks: 62.122.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:81:b7:17:dc:ed:d6:83:f2:0a:1a:a6:34:0e:bd:d1:f5:4c:4b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Validity
Not Before: Jun 30 06:17:00 2023 GMT
Not After : Jun 28 06:22:00 2024 GMT
Subject: CN=FD258DD994F7202585E248882F630EF5B33B6292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:7c:5f:c9:ff:a3:63:b0:7b:39:1d:30:aa:
64:6e:b2:2d:06:4a:d8:d2:a1:8c:c6:dc:af:f8:14:
91:20:6d:9e:e8:dc:76:89:70:81:48:08:f1:57:35:
40:55:ec:55:4d:0e:68:7c:22:32:43:bb:22:4d:4d:
f6:3b:8b:c7:d9:8f:a0:0b:33:d1:08:4b:1a:42:99:
8b:4a:fc:a5:11:9a:bf:e1:14:2c:8d:f8:27:91:f1:
f5:d7:fe:e5:17:d6:2b:07:75:6c:b6:cb:28:35:4d:
b5:94:8b:29:2d:65:6a:ab:31:ea:68:7e:9b:24:ae:
73:d2:c7:b5:00:6d:ed:cf:45:d0:30:dd:0d:32:57:
f4:e9:99:46:8b:ed:d8:f8:7d:f5:be:9a:a6:15:2e:
bb:36:ab:2a:49:50:22:58:c1:99:5e:19:4f:4d:dd:
40:15:77:23:b7:b1:01:0a:d4:aa:bb:e7:e3:68:0f:
3e:29:94:ff:bd:45:24:35:b5:43:7a:dd:8b:c9:68:
55:f2:01:69:55:9b:6a:f4:56:82:33:5d:72:08:ec:
7f:ba:5c:e0:c9:30:06:71:78:45:6b:9e:1d:3d:fd:
c1:5c:02:ea:79:5e:8d:8b:2a:e0:0c:b8:90:09:26:
17:58:68:04:3d:67:ff:c2:bc:66:95:b6:be:e9:52:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:8D:D9:94:F7:20:25:85:E2:48:88:2F:63:0E:F5:B3:3B:62:92
X509v3 Authority Key Identifier:
keyid:D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/36322e3132322e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5d:c2:ce:6f:63:ed:f3:08:a2:d9:c0:20:d8:d8:3e:40:1d:
86:e0:5e:b9:58:57:ca:c5:3d:85:fe:ed:bd:d5:0c:eb:47:10:
3f:35:52:8a:04:6e:d1:be:e7:de:78:ef:b3:c5:6a:da:3a:c6:
b2:03:05:95:e1:6a:48:d8:66:01:48:b4:2b:b8:77:ff:22:2c:
b9:00:10:38:e7:eb:d7:92:27:cf:1a:d0:5f:7f:2d:4e:c5:76:
cb:0f:2d:1d:ba:59:53:e6:33:77:d1:16:5c:f4:6c:07:3a:d7:
08:aa:76:8b:0c:48:88:ab:b2:c4:77:6e:ee:4c:0b:cc:57:bf:
40:d7:28:1d:47:18:ef:3b:b9:55:f0:a2:9d:97:4e:cd:9a:e5:
13:91:b2:81:72:d1:c6:88:19:14:f9:54:c3:07:39:ff:1c:96:
89:e2:17:e0:58:d3:14:17:a5:75:82:32:57:cd:42:29:83:23:
a0:60:a3:4d:18:c3:06:12:ee:cb:72:57:d7:8a:5d:52:df:46:
c2:94:73:ae:79:c6:87:94:d6:8f:36:f1:8f:17:9e:06:61:60:
47:cb:a0:b6:8c:8c:fa:6e:65:37:21:de:1b:bd:bd:3a:02:2f:
ce:b4:48:58:c9:a5:cc:f9:b6:7d:1e:b6:d4:5f:82:e7:35:cf:
31:5e:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org