Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
File: 36322e332e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: A8AX8OczkwfqXjEYw6gx7AvYfR4u1Y4D6JQjpniR7EE=
Subject key identifier: 66:4B:58:ED:20:F5:4F:2F:14:CD:A3:B9:74:A9:9A:6A:59:AD:78:51
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3C69FE90A39EB3C65A3CBD26760C56C4A703A055
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:24 +0000
ROA not before: Mon 30 Dec 2024 15:36:24 +0000
ROA not after: Mon 29 Dec 2025 15:41:24 +0000
asID: 136787
IP address blocks: 62.3.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:69:fe:90:a3:9e:b3:c6:5a:3c:bd:26:76:0c:56:c4:a7:03:a0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:24 2024 GMT
Not After : Dec 29 15:41:24 2025 GMT
Subject: CN=664B58ED20F54F2F14CDA3B974A99A6A59AD7851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:7c:00:a1:e1:13:bb:ff:24:f8:38:d2:eb:
bd:3f:15:7e:97:90:5b:33:5e:68:b1:8e:93:c4:4f:
95:bd:0d:58:71:04:ec:21:4a:70:00:27:ab:db:95:
ce:8f:62:14:56:32:76:9f:bf:26:c1:a9:0f:94:54:
ab:d2:7c:78:23:6d:88:b4:3f:bd:01:09:9b:54:48:
71:42:fc:ca:7b:eb:fc:57:24:05:04:a3:8c:a0:5b:
d5:67:45:5c:98:c4:4b:0d:be:f8:56:dd:e0:31:2a:
65:4b:e6:0f:3a:60:8b:7f:3c:06:3a:13:a3:32:03:
cb:32:eb:ae:b4:d0:fb:bd:4c:7e:61:60:a5:d4:0b:
2b:3f:71:c7:67:cb:03:66:2a:7a:5b:2e:cc:2d:80:
06:70:d8:d9:ec:f2:38:50:7c:07:e2:9b:4c:d7:16:
77:83:29:aa:d9:77:d4:d1:18:59:16:97:a0:e6:30:
f9:60:d4:ed:27:d7:28:df:a4:73:68:7b:db:cf:77:
9a:37:1d:8c:08:a2:dd:74:eb:26:7b:aa:3e:45:71:
50:b1:05:66:72:1d:e8:69:39:04:17:da:5e:b1:e2:
ff:d1:c8:9a:c3:9e:56:fc:bf:97:5b:43:a3:79:1e:
8d:84:8e:2f:8f:43:88:df:34:39:95:6a:2b:d1:40:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:58:ED:20:F5:4F:2F:14:CD:A3:B9:74:A9:9A:6A:59:AD:78:51
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9c:00:92:fc:79:f3:fe:77:26:a9:70:c5:bf:cf:f3:e3:a4:
0a:36:b5:09:51:9d:46:cf:ce:57:25:9a:2b:00:a7:52:8e:07:
fe:d4:21:6d:24:ec:75:df:8f:60:ab:3e:ed:9e:ef:f2:27:ab:
60:09:47:59:33:aa:22:8f:dc:ef:4d:4b:83:4b:c4:8e:49:22:
c9:5a:3e:87:fa:bf:7d:06:7b:c3:56:ee:9a:b2:95:fc:f7:ac:
c0:08:51:f8:4f:0c:a7:3a:51:67:71:53:c1:3c:1f:23:35:bc:
2c:4f:7d:9d:65:f6:63:c5:8d:ab:ba:2a:14:e8:56:57:44:84:
61:76:db:79:b2:7d:7a:91:6c:78:29:73:ee:85:9b:41:93:3d:
46:fc:e5:fb:ba:57:b9:eb:fb:f8:1a:63:45:dc:01:05:09:6b:
6c:3c:d9:99:29:7f:86:9a:c3:37:e7:71:50:71:38:6b:93:0f:
7e:c4:86:d8:38:ce:d3:e0:f6:fa:ec:87:0d:21:cc:0a:4a:f8:
54:70:24:b8:9d:3c:01:0a:51:e2:13:a4:52:b3:74:a1:f4:b9:
ea:98:42:99:cc:56:37:53:17:de:22:f8:12:0a:20:15:62:86:
88:ba:f8:2f:8c:f9:24:f2:37:1d:88:49:5f:eb:3c:06:45:b7:
a5:42:13:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:59 2025 by rpki-client