Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/36322e332e32302e302f32342d3234203d3e203631333137.roa
File: 36322e332e32302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: PQwArp9LdGIKiOwEHTOfDaupCKChlD3bMyt1srlJLUI=
Subject key identifier: 83:39:CC:58:D6:82:E7:04:78:22:06:8A:A3:FC:D8:49:E0:7C:0A:A9
Certificate issuer: /CN=0635bc18e31f9815ec287261638ff125340c4e6f
Certificate serial: 3F1379EFF2BD2817908C3082F5EE731555997DEE
Authority key identifier: 06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/36322e332e32302e302f32342d3234203d3e203631333137.roa
Signing time: Thu 23 Mar 2023 16:05:31 +0000
ROA not before: Thu 23 Mar 2023 16:00:31 +0000
ROA not after: Thu 21 Mar 2024 16:05:31 +0000
asID: 61317
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:13:79:ef:f2:bd:28:17:90:8c:30:82:f5:ee:73:15:55:99:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0635bc18e31f9815ec287261638ff125340c4e6f
Validity
Not Before: Mar 23 16:00:31 2023 GMT
Not After : Mar 21 16:05:31 2024 GMT
Subject: CN=8339CC58D682E7047822068AA3FCD849E07C0AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:ff:5e:52:19:06:45:c0:72:70:cb:15:7d:
0a:83:c4:e1:24:99:68:82:54:02:01:dd:37:fa:c8:
fe:d0:03:8e:44:46:d5:b5:5b:a0:b0:77:28:fb:1c:
e6:33:0d:ea:68:b3:ab:8f:c6:f6:cc:a6:73:4d:31:
dc:4a:3b:7e:d4:dc:a2:10:b9:b5:44:bd:6a:6a:07:
f8:d8:cc:06:d8:c4:68:a0:54:c2:05:9b:34:d0:df:
00:e0:e0:52:f6:af:5b:45:ab:6d:11:dd:bc:cf:cb:
47:f0:ec:73:99:1e:38:05:cb:1b:6a:7e:05:10:ab:
ba:fa:d8:5f:fb:e3:84:2c:30:c7:1d:53:61:44:01:
46:cc:d1:62:65:88:14:93:f4:3e:7d:bf:b5:a0:5e:
1b:88:67:a7:f7:25:c3:66:e4:52:44:74:d7:77:12:
74:6b:a3:a3:6a:4e:38:92:be:bb:0e:2e:e3:a9:0f:
82:6e:f1:29:3f:f2:c9:0a:ca:0e:9f:af:77:93:3a:
65:2d:37:4c:df:54:72:9e:02:3d:3f:af:17:b6:60:
11:25:54:b0:66:1c:aa:4b:17:b8:6c:ac:19:0f:0c:
44:35:dc:3e:dd:83:63:c5:b0:76:3b:a3:e1:3c:ed:
6d:f8:05:73:4f:11:96:ce:94:39:6e:3c:6b:12:04:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:CC:58:D6:82:E7:04:78:22:06:8A:A3:FC:D8:49:E0:7C:0A:A9
X509v3 Authority Key Identifier:
keyid:06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/36322e332e32302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:28:45:d8:a9:47:9e:81:bf:db:95:c4:27:74:4a:f6:dd:45:
72:e9:41:09:3d:4f:1d:39:2d:e4:2a:c9:1a:12:a4:d1:e0:cb:
3e:ce:ba:16:1e:ad:94:c8:13:8a:d9:64:ab:82:6a:f0:f9:7c:
af:f8:d5:b0:1a:ed:7c:bd:ce:23:94:0c:1f:5d:55:eb:7c:84:
d8:f8:f0:af:01:1a:33:cd:07:06:fd:23:d2:6c:dd:09:a9:6c:
82:c4:4e:91:ac:3e:fc:7d:a5:06:16:55:d8:ff:30:94:11:bc:
bc:15:4b:a0:a5:e9:69:e5:12:f1:c7:fd:7e:32:f3:83:b8:39:
8d:eb:81:56:ce:c1:f7:37:f2:b6:fd:7d:bf:f2:e7:84:a7:bd:
72:27:67:a2:92:2b:32:7e:bc:3b:c8:45:f5:16:36:02:3b:bc:
62:ac:a1:a4:a0:10:39:c2:ac:b1:b7:a9:73:81:36:d2:61:70:
56:e4:fb:24:4d:b1:3c:b4:c4:e4:1d:ce:6b:64:76:97:73:39:
8c:8c:7c:ae:53:ff:f1:bd:94:6b:b1:9e:4d:85:14:c6:c7:cb:
33:ec:60:4f:d8:1d:39:1a:a1:c4:e0:c3:eb:5f:e4:9a:d9:fb:
8c:aa:6b:bf:56:86:ed:5e:bf:10:12:d6:ec:6b:d8:97:c2:8f:
d3:30:14:3a
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 11 14:41:26 2023 by rpki-client on console-ams.rpki-client.org