Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
File: 36322e332e34362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: yF47xR74qdDFZ25tqytEQbCMuq3RSkGbaj1KnSsaSB8=
Subject key identifier: 02:AC:62:CE:9E:83:96:82:E4:96:E8:FA:84:33:AC:D4:1D:E5:AB:E0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 46E1894327D16352967C8BF60CEE0B619E552785
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 20 Dec 2024 15:23:29 +0000
ROA not before: Fri 20 Dec 2024 15:18:29 +0000
ROA not after: Fri 19 Dec 2025 15:23:29 +0000
asID: 204170
IP address blocks: 62.3.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e1:89:43:27:d1:63:52:96:7c:8b:f6:0c:ee:0b:61:9e:55:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:29 2024 GMT
Not After : Dec 19 15:23:29 2025 GMT
Subject: CN=02AC62CE9E839682E496E8FA8433ACD41DE5ABE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:8b:c7:7a:b8:79:78:57:74:02:b0:33:f8:
50:09:80:de:36:02:44:a3:30:8d:88:c7:95:84:df:
da:c3:eb:91:37:15:19:cb:21:cc:fd:59:70:86:4f:
6d:58:e8:88:c9:c6:c1:b8:38:ce:ce:a9:17:cb:75:
c3:1a:5e:2f:7f:57:a8:9d:cd:22:f7:02:56:23:89:
9f:aa:28:e3:de:ba:18:c3:59:52:5b:90:96:2d:ca:
2d:43:b6:3c:d1:ed:94:79:19:82:db:c7:b2:71:76:
3d:18:c1:92:43:1b:e3:81:b3:02:62:10:94:e5:9f:
73:c1:b6:4e:ed:07:66:27:46:49:a6:11:3f:dd:13:
a7:37:4d:13:21:fd:89:46:5e:f2:bd:10:21:6f:2e:
d3:2e:9c:5a:d9:6e:ab:37:76:bc:49:dd:4d:e1:0f:
2d:c9:f6:e4:5b:3f:a0:ba:0f:01:09:ac:64:41:0a:
b6:21:5b:2b:7b:2f:45:35:90:9a:5d:af:89:ed:25:
fd:eb:36:c7:c9:83:58:c1:6d:55:a8:d5:8b:b3:da:
ec:f4:06:14:86:f1:5f:53:23:12:b1:e2:0f:96:b8:
04:e0:4d:f6:b6:2e:a7:1b:f9:a7:bb:58:04:91:f7:
d9:cf:83:f0:e9:17:db:d2:16:43:a5:6a:ad:0c:36:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:62:CE:9E:83:96:82:E4:96:E8:FA:84:33:AC:D4:1D:E5:AB:E0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b1:c9:3b:35:d4:b8:b1:c7:01:4a:f9:f1:cd:67:53:06:a5:
36:ea:23:89:dc:c1:59:54:c1:a9:5a:24:8b:39:d3:47:0b:82:
b6:47:3a:65:b9:13:79:3d:1e:fc:9d:27:97:c7:41:f9:5b:12:
5d:78:68:17:ce:99:21:09:2e:f2:a6:35:68:2a:53:45:fc:ca:
c4:be:a0:68:1b:b0:5e:8d:66:d6:9e:67:88:8a:52:25:21:e9:
e6:e4:f0:d6:b5:1b:5e:e6:b5:08:b7:4f:92:30:1f:46:20:26:
46:8b:f5:5b:85:77:e5:12:89:b7:2a:ec:92:50:11:40:62:7b:
ac:24:fa:89:e2:99:64:62:1f:fc:7e:27:1c:6c:de:5d:f6:a2:
ff:23:9b:9d:6a:aa:73:a1:68:e0:8c:fb:e4:36:0e:57:6d:61:
02:cc:51:f4:cc:6b:c4:e0:88:59:c1:88:d4:82:f2:3c:53:d2:
57:23:c6:a1:f3:5a:57:01:cf:a8:fc:60:f5:a4:f9:84:99:eb:
4d:b5:4c:1f:5a:a7:dd:08:da:bf:2f:84:39:29:95:76:31:55:
1f:f2:98:49:14:17:dd:ef:f3:b7:1d:e9:62:21:06:c4:0b:b6:
14:a7:ee:23:e0:a9:38:ee:68:15:8b:56:48:2d:76:37:d7:06:
b6:7e:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:52 2025 by rpki-client