Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/36322e332e392e302f32342d3234203d3e20323031333431.roa
File: 36322e332e392e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: tyOn87rPL7tVvbupx0+oUxCeD4+36m1Psigv8dd+gW8=
Subject key identifier: C1:DB:BD:D8:19:D2:DF:E5:BC:30:88:B8:25:B9:8C:C4:49:6D:FD:D5
Certificate issuer: /CN=e9c8644c41ef9bd2798ffee5d731e8849d0be6de
Certificate serial: 25862EC4467588B5AE8C499631BA1756AD64E019
Authority key identifier: E9:C8:64:4C:41:EF:9B:D2:79:8F:FE:E5:D7:31:E8:84:9D:0B:E6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6chkTEHvm9J5j_7l1zHohJ0L5t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/36322e332e392e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:10 +0000
ROA not before: Mon 27 Mar 2023 08:22:10 +0000
ROA not after: Mon 25 Mar 2024 08:27:10 +0000
asID: 201341
IP address blocks: 62.3.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:86:2e:c4:46:75:88:b5:ae:8c:49:96:31:ba:17:56:ad:64:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c8644c41ef9bd2798ffee5d731e8849d0be6de
Validity
Not Before: Mar 27 08:22:10 2023 GMT
Not After : Mar 25 08:27:10 2024 GMT
Subject: CN=C1DBBDD819D2DFE5BC3088B825B98CC4496DFDD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:39:fa:74:7d:cc:9f:2d:55:9d:bd:cf:3c:
18:12:b9:c0:2d:be:d1:23:09:d3:e4:4e:d5:59:3e:
19:76:d4:d2:ce:e9:96:04:6f:61:ce:29:75:d8:4f:
4e:e2:2d:7c:26:c8:d7:d4:14:bb:57:17:f5:88:51:
ab:ec:df:00:d3:1c:9b:92:94:c0:59:72:cf:1e:1c:
27:41:20:3e:6b:ef:47:63:11:d4:b1:b1:a0:7c:64:
68:69:b4:b1:4e:da:50:ca:51:e1:bf:44:51:b4:28:
ed:70:8a:53:bc:a7:31:e5:68:fc:92:0e:54:6c:fe:
c5:a7:cc:66:b7:cf:8b:f1:53:eb:d3:95:6f:9c:06:
34:7c:38:41:ba:be:67:ab:0f:2b:3b:ea:bf:1d:96:
56:2f:36:a1:6c:3e:43:1b:81:06:b6:3b:40:be:51:
55:2f:bf:a2:86:96:27:91:ff:37:02:93:4e:08:f8:
42:6d:10:c0:ed:e1:fb:d5:9c:75:16:d2:d4:66:8e:
9f:5d:90:4f:1d:14:6c:6d:29:50:e2:1b:08:87:ab:
b1:50:bb:92:e7:6b:1c:c8:e7:99:3e:31:8a:09:de:
bb:64:c2:1d:81:65:0b:cc:19:d1:ac:62:9e:02:72:
d7:b8:95:41:84:99:2d:6e:c3:ea:97:09:60:5f:bd:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:BD:D8:19:D2:DF:E5:BC:30:88:B8:25:B9:8C:C4:49:6D:FD:D5
X509v3 Authority Key Identifier:
keyid:E9:C8:64:4C:41:EF:9B:D2:79:8F:FE:E5:D7:31:E8:84:9D:0B:E6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/E9C8644C41EF9BD2798FFEE5D731E8849D0BE6DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6chkTEHvm9J5j_7l1zHohJ0L5t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/36322e332e392e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.9.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4c:aa:29:26:b0:36:cc:a5:30:2c:98:59:16:24:80:d8:e7:
d6:89:f0:59:27:0d:e7:a1:9a:c0:dc:de:7d:9b:c4:67:21:cf:
95:c6:82:da:e0:6f:b9:4c:08:bd:b9:80:af:77:42:f2:45:2c:
cf:f0:b9:4d:62:4b:c4:74:26:99:dd:40:8a:71:fc:0d:01:90:
85:fd:9e:88:70:7b:b4:0f:c0:29:3e:e3:f8:64:35:52:56:04:
68:5b:6f:a0:45:72:4d:47:b9:73:f0:47:46:1e:e4:26:1c:4b:
8f:56:c7:3f:be:58:86:dc:26:ca:b6:cd:5f:ef:90:d5:4a:22:
dd:6a:af:1c:2f:c8:eb:95:ba:e1:0c:b4:a0:1a:eb:81:bb:3e:
90:84:6d:8a:28:50:2d:a0:76:ee:a1:04:0a:fc:c7:51:0a:dd:
6d:bf:a9:79:53:96:9c:e3:6a:72:6b:18:a1:d3:71:60:39:78:
5d:53:5d:4c:b7:45:0f:b4:78:0d:58:cf:c6:d1:6e:c2:32:cc:
d7:2e:86:53:5d:3f:81:c7:a3:b7:a5:6e:f8:9b:7b:52:89:2a:
11:ab:85:40:1a:48:a9:97:e2:b3:c7:9a:70:67:43:b5:e6:5e:
94:cb:64:43:6d:13:28:7c:e1:f7:f9:db:38:09:84:ba:41:48:
ad:e6:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org