Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36302e302f32342d3234203d3e203432333636.roa
File: 3130392e3233362e36302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: RkBO9UXZJ0nt9hGrTm6wrxmbcCiR+gfuxbHtwnbcEyo=
Subject key identifier: BD:3D:37:81:01:11:53:50:D6:FF:E4:00:B4:F2:A1:2F:B4:F0:AB:D3
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 2D83E3862E238C6E9FEF5671283671D73EFB53FE
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36302e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:17:45 +0000
ROA not before: Fri 31 Mar 2023 12:12:45 +0000
ROA not after: Fri 29 Mar 2024 12:17:45 +0000
asID: 42366
IP address blocks: 109.236.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:83:e3:86:2e:23:8c:6e:9f:ef:56:71:28:36:71:d7:3e:fb:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:12:45 2023 GMT
Not After : Mar 29 12:17:45 2024 GMT
Subject: CN=BD3D378101115350D6FFE400B4F2A12FB4F0ABD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:8c:0f:82:08:8d:a0:fd:a1:8c:62:fa:60:
71:75:85:07:44:f1:af:51:c0:c3:d2:44:d8:59:a7:
ec:13:ca:77:a2:83:a1:bf:af:82:01:e0:77:3f:65:
96:94:ad:20:e6:18:7f:bf:04:c2:43:00:70:c2:2e:
bf:cf:c0:66:f2:4c:98:52:14:d1:1a:23:cf:ae:2a:
84:03:52:4c:71:11:27:04:41:d2:b1:47:1e:cc:aa:
77:2c:00:93:ab:af:02:b8:f7:93:7c:22:2a:67:5b:
af:32:32:bc:2e:9c:99:59:74:be:72:f7:b7:8c:c4:
90:1d:9e:34:2f:55:5a:f9:00:82:17:ee:88:e5:d2:
33:1a:0a:1b:4e:97:ba:2c:92:7b:ab:6b:5b:d0:51:
ad:c3:2b:05:21:c4:42:d4:52:30:91:30:88:0f:6f:
db:58:f6:43:b0:07:d5:d5:e0:85:61:c8:34:a8:9e:
16:0e:d9:0a:51:72:d8:03:db:cd:a7:6e:0a:0d:bf:
f5:5f:b6:38:ed:b9:bc:a6:ce:9c:c5:32:73:77:8f:
4f:b0:83:07:78:99:9a:e8:56:06:94:a4:00:48:fd:
b0:5c:3b:4b:2c:6b:04:14:bf:63:89:47:86:eb:4f:
06:e9:87:67:a5:7e:d6:69:5c:5d:82:d5:30:61:52:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:37:81:01:11:53:50:D6:FF:E4:00:B4:F2:A1:2F:B4:F0:AB:D3
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.60.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d2:65:cb:13:26:0d:cc:fb:73:ff:bb:c5:01:dc:8d:d3:3f:
9e:85:9d:c7:ca:da:00:8e:3c:81:ec:e3:a0:4a:a7:64:6e:c6:
5a:eb:7d:79:41:fb:2e:92:f1:2b:5f:5e:38:e7:7b:cc:4a:b7:
88:3a:c5:9f:f5:7e:2b:10:54:f4:37:f4:53:2f:78:a5:0a:a0:
5b:af:b3:11:61:c1:10:70:df:11:3c:6c:6f:2d:d2:07:79:c4:
05:5f:ee:6f:7c:86:c8:77:81:6a:30:8e:c0:22:ed:c5:aa:40:
3f:70:6a:a9:a4:49:9e:31:d7:7c:e2:6d:3b:5b:63:f8:46:a4:
32:40:b0:64:c7:89:da:43:13:f1:95:06:33:4a:17:90:e8:cc:
a0:a7:47:69:41:87:7c:eb:2f:96:16:c1:3f:d1:87:f5:66:b8:
6b:b3:ae:24:c4:4b:57:43:f4:17:05:94:0c:64:8c:70:00:b7:
04:b9:8d:85:16:48:8a:c1:c2:a5:03:1a:e3:a6:c8:60:90:b2:
f9:ba:a1:cf:c5:af:46:08:23:c8:b4:73:2a:58:87:db:4b:fd:
a0:8f:57:76:e0:24:f5:12:ba:d8:8f:64:c3:4a:12:b2:dc:1a:
be:07:15:f7:34:70:55:ec:9a:63:59:f4:73:76:ba:b0:43:8c:
0a:fc:5a:fc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULYPjhi4jjG6f71ZxKDZx1z77U/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMzExMjEyNDVaFw0yNDAzMjkxMjE3NDVaMDMxMTAvBgNV
BAMTKEJEM0QzNzgxMDExMTUzNTBENkZGRTQwMEI0RjJBMTJGQjRGMEFCRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNYwPggiNoP2hjGL6YHF1hQdE
8a9RwMPSRNhZp+wTyneig6G/r4IB4Hc/ZZaUrSDmGH+/BMJDAHDCLr/PwGbyTJhS
FNEaI8+uKoQDUkxxEScEQdKxRx7MqncsAJOrrwK495N8IipnW68yMrwunJlZdL5y
97eMxJAdnjQvVVr5AIIX7ojl0jMaChtOl7osknura1vQUa3DKwUhxELUUjCRMIgP
b9tY9kOwB9XV4IVhyDSonhYO2QpRctgD282nbgoNv/VftjjtubymzpzFMnN3j0+w
gwd4mZroVgaUpABI/bBcO0ssawQUv2OJR4brTwbph2elftZpXF2C1TBhUhITAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvT03gQERU1DW/+QAtPKhL7Twq9MwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzMDM5MmUzMjMzMzYyZTM2
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
bew8MA0GCSqGSIb3DQEBCwUAA4IBAQAp0mXLEyYNzPtz/7vFAdyN0z+ehZ3HytoA
jjyB7OOgSqdkbsZa6315QfsukvErX14453vMSreIOsWf9X4rEFT0N/RTL3ilCqBb
r7MRYcEQcN8RPGxvLdIHecQFX+5vfIbId4FqMI7AIu3FqkA/cGqppEmeMdd84m07
W2P4RqQyQLBkx4naQxPxlQYzSheQ6Mygp0dpQYd86y+WFsE/0Yf1Zrhrs64kxEtX
Q/QXBZQMZIxwALcEuY2FFkiKwcKlAxrjpshgkLL5uqHPxa9GCCPItHMqWIfbS/2g
j1d24CT1ErrYj2TDShKy3Bq+BxX3NHBV7JpjWfRzdrqwQ4wK/Fr8
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:36 2025 by rpki-client