Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31392d3139203d3e203632333336.roa
File: 39332e3132372e3132382e302f31392d3139203d3e203632333336.roa (raw, json)
Hash identifier: R69aINT1Lbv7CaNPsL40FgmWeayubnlVZM5D7NS+HJA=
Subject key identifier: E1:DC:D0:33:AB:B4:47:0C:56:8B:5E:D3:EF:50:B3:E0:C3:16:52:23
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5D27E25C98023E636BBD93DECB3DB7C2A236D248
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31392d3139203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:11 +0000
ROA not before: Fri 20 Jan 2023 06:21:11 +0000
ROA not after: Fri 19 Jan 2024 06:26:11 +0000
asID: 62336
IP address blocks: 93.127.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:27:e2:5c:98:02:3e:63:6b:bd:93:de:cb:3d:b7:c2:a2:36:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:11 2023 GMT
Not After : Jan 19 06:26:11 2024 GMT
Subject: CN=E1DCD033ABB4470C568B5ED3EF50B3E0C3165223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:53:e4:d8:47:7d:5a:c6:7b:8a:0f:bc:bf:
61:46:25:b7:ce:64:e3:b1:5d:16:b1:31:da:f0:67:
f1:28:f3:ec:96:b5:27:c8:c5:8f:4a:19:d3:0c:53:
e1:33:76:50:26:27:c6:8f:ab:68:3c:0d:3e:c2:6a:
ff:4f:ec:24:61:6a:e4:8b:47:61:33:35:3e:5c:cb:
2f:c8:a9:d7:24:fd:0c:2e:0d:ee:54:28:06:d2:17:
64:67:03:41:89:ff:3f:ec:9b:47:26:30:9d:da:04:
20:15:66:21:91:0b:8a:4d:3e:54:e4:8b:9f:2f:2f:
ed:41:a9:44:85:6b:95:a5:68:e5:9a:3e:c9:2e:4a:
2d:70:67:0f:fc:b0:4c:bb:44:37:aa:3a:de:24:d4:
ca:4f:26:48:0d:75:2d:16:91:cb:8e:db:43:23:5a:
60:9c:ed:51:35:d1:92:81:c5:60:1b:c1:21:ed:66:
52:22:63:b4:d0:09:07:98:89:b5:67:64:f3:3a:b4:
fe:2f:ea:3a:11:b6:f0:e4:31:ec:d0:b6:23:db:2e:
8c:92:a8:e7:0e:f9:a9:11:8c:f1:a1:c7:92:5e:d3:
d2:35:09:5c:6a:7c:61:ae:a4:b4:13:e4:96:ac:3b:
b9:49:37:48:9e:50:69:77:9c:88:ad:a9:c5:06:e9:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:D0:33:AB:B4:47:0C:56:8B:5E:D3:EF:50:B3:E0:C3:16:52:23
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31392d3139203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.128.0/19
Signature Algorithm: sha256WithRSAEncryption
74:30:ba:82:51:07:eb:14:99:96:fe:f3:1a:38:33:88:ec:c1:
f4:68:26:78:2d:50:f3:58:2f:87:86:cd:fd:cd:3e:0d:34:af:
dd:e5:5d:65:01:1c:b5:37:25:df:9b:bc:a9:14:10:ab:3f:95:
69:26:05:aa:38:49:8a:87:8d:7a:7b:48:c1:98:a6:c9:e9:f2:
23:00:c4:ba:fb:95:e2:80:50:69:95:31:36:6a:5a:99:db:44:
f3:9b:10:da:53:cf:46:d7:79:56:50:73:e6:05:1d:ad:8a:3f:
01:9a:a4:87:8a:97:1c:40:38:85:76:5d:bf:cb:7a:fa:65:db:
63:e7:4a:8e:83:d7:a5:1a:3b:18:1b:a7:03:fb:e1:10:03:da:
5c:33:ec:80:ea:c7:86:06:25:df:d6:08:67:f5:2e:89:97:12:
6e:c5:39:b0:00:ab:00:ca:86:2f:2f:ae:dc:e9:19:37:8e:39:
c2:9b:9c:5d:25:c1:5a:cd:6a:a2:1f:d1:c7:fa:e4:77:95:62:
3e:a0:ef:88:dc:aa:2e:fd:ea:e5:99:6e:ca:e3:80:bd:4c:52:
09:8f:5a:61:d9:2a:51:ac:d2:11:31:fa:0e:64:03:7e:6b:db:
6f:8c:bd:37:f9:5b:a0:2d:7b:25:3c:2d:d9:1b:c9:ea:fc:e5:
28:09:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org