Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa
File: 32372e302e3233322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: q/RF7DHoWUYHBsYsVxWD0t6pmlS9/Imp/+1UoVqC5oE=
Subject key identifier: 3A:D0:E2:4C:14:87:5F:6A:E4:CD:30:56:15:6E:CE:FB:66:0F:5E:39
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 5ED37CDE5ECCF0B78ECFEA8BF3405AD476E2D1B8
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 61138
IP address blocks: 27.0.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d3:7c:de:5e:cc:f0:b7:8e:cf:ea:8b:f3:40:5a:d4:76:e2:d1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=3AD0E24C14875F6AE4CD3056156ECEFB660F5E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:27:d0:f1:ac:80:36:04:f8:09:f3:d9:3d:
b5:e1:57:b6:f1:aa:4f:5d:40:a5:3c:9d:af:98:0b:
37:49:96:65:e3:11:d6:19:d8:02:41:5f:e0:32:7c:
de:28:57:5e:80:cf:56:ba:45:ec:68:e9:a8:da:48:
6d:ef:57:2d:ae:3a:89:aa:a2:5c:24:cf:a1:05:13:
84:58:62:e0:36:09:eb:ee:7e:2c:6d:ff:d8:a0:2b:
d5:86:29:31:e2:aa:b6:c5:e2:a5:e7:9c:fe:9a:da:
53:c2:7d:b3:c6:36:1c:4d:7c:2a:02:42:36:c3:35:
a6:f0:b8:e5:1e:b4:e2:a7:bc:cc:6c:51:e0:50:1e:
85:8f:94:ed:35:f8:78:b7:ee:92:16:2e:a5:f0:ec:
77:79:f1:ea:57:e4:71:6d:fa:4d:4e:31:e9:5b:2d:
5e:4e:57:fe:11:1e:46:7a:57:8a:bc:cb:59:0b:26:
87:2c:78:be:ea:a2:41:3c:f4:c4:2c:bb:c0:7d:0b:
14:22:00:66:cf:fe:bd:dc:93:f0:ae:0c:c7:19:14:
37:5e:12:1b:00:e2:eb:95:2d:39:74:96:71:13:e3:
84:3a:df:85:a5:cf:cd:d5:8c:e2:0c:3a:11:fb:fd:
92:49:4f:85:8c:1c:6d:5c:d6:ce:ef:a0:c0:85:a7:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:E2:4C:14:87:5F:6A:E4:CD:30:56:15:6E:CE:FB:66:0F:5E:39
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a5:63:c7:d1:d4:c9:20:cc:d6:4a:29:3b:ee:75:bb:ec:a0:
90:01:fd:f4:c3:21:c5:68:89:10:34:24:fe:53:16:56:4c:33:
f2:aa:e0:f6:0c:e6:ec:db:79:3e:4b:5b:72:6b:df:48:52:bb:
3f:71:58:90:48:97:1a:ec:7e:65:a7:17:28:1d:d6:49:2b:19:
16:00:86:48:cd:7e:4c:ba:42:37:09:36:bd:44:4c:3f:21:20:
a7:ee:1d:45:5d:ac:d7:88:f3:ec:3c:cf:16:b3:b8:15:e6:b5:
ad:e0:a7:48:cf:53:eb:d1:20:77:43:b6:ea:52:e1:81:0e:c5:
c4:f8:6a:50:a3:99:66:1c:0a:6b:26:4b:d0:fe:4b:97:16:a9:
bd:a6:3e:f6:ca:20:1b:dc:00:e6:0d:27:f9:65:fc:8c:40:ae:
3a:3a:73:2d:15:e1:51:cf:5c:f8:b8:c8:d0:45:34:25:74:0e:
4f:5b:86:95:62:ef:65:71:74:56:02:f7:28:28:bc:e9:7a:88:
2a:d5:a5:96:3c:a5:c8:98:22:13:bb:17:e2:7b:aa:35:4c:cb:
7d:83:6c:26:c3:e4:d2:94:52:7f:9a:35:d8:c7:a6:08:3c:4a:
3b:25:b1:18:08:5e:cc:a3:a7:31:a0:81:e3:84:b5:dc:78:d1:
68:47:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org