Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20323034383433.roa
File: 39332e3132372e3136302e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: f5+Jp1eWfNeeyboWvcJtlsJP3Yvi9cpMWmFar+9pkqo=
Subject key identifier: 93:74:81:5E:BE:3C:ED:1A:80:B0:54:A9:91:67:35:32:C9:09:74:3C
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 602684F1901562C41BAFCD5FF9C583F811AC4F51
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20323034383433.roa
Signing time: Wed 12 Apr 2023 14:14:53 +0000
ROA not before: Wed 12 Apr 2023 14:09:53 +0000
ROA not after: Wed 10 Apr 2024 14:14:53 +0000
asID: 204843
IP address blocks: 93.127.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:26:84:f1:90:15:62:c4:1b:af:cd:5f:f9:c5:83:f8:11:ac:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 12 14:09:53 2023 GMT
Not After : Apr 10 14:14:53 2024 GMT
Subject: CN=9374815EBE3CED1A80B054A991673532C909743C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:55:ac:4b:40:bc:61:85:37:08:44:db:ba:
41:0c:70:7b:d5:31:7b:27:90:3b:96:54:ce:7e:3e:
c8:40:b0:b8:37:a0:8a:9b:f7:2e:06:35:1a:c9:96:
b1:5f:8a:18:be:f7:32:63:41:32:1b:4d:9d:56:97:
da:74:bb:8e:8c:8b:c6:7f:29:ec:d8:5a:52:c5:a9:
6e:4c:9e:f5:fa:eb:df:ae:cd:67:9b:70:0d:b4:94:
d3:76:fe:27:57:15:19:71:3d:ad:87:17:cf:dd:ef:
64:0e:15:17:ce:28:db:f0:fa:9e:ea:7a:c1:67:b3:
07:d2:2a:7c:af:14:d8:c5:db:8d:a2:9b:a6:a4:c4:
34:cc:dc:a2:ad:c2:c8:e7:7a:62:9e:dd:28:9d:90:
e2:10:2a:6a:d7:24:62:01:df:d8:84:a8:6a:69:18:
29:3d:9a:b4:17:aa:3c:9a:25:95:57:05:c6:db:cb:
bb:0b:56:4d:e2:93:e0:b3:41:52:05:0a:46:c7:66:
ca:3f:1d:f7:c2:98:80:7e:5f:94:42:d2:47:db:87:
48:67:ea:b3:05:52:48:b8:23:65:49:8c:97:97:17:
8a:6c:8c:9c:ef:18:81:d7:0d:94:30:a8:f4:ea:4b:
c2:88:c5:76:0d:13:7c:32:40:51:05:ee:e4:f5:7f:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:81:5E:BE:3C:ED:1A:80:B0:54:A9:91:67:35:32:C9:09:74:3C
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136302e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:73:d0:80:9b:7b:cb:b6:6b:db:01:41:a9:81:d2:21:54:25:
c4:0b:a5:5e:d5:94:0d:c5:6b:0f:95:8f:2d:69:c2:6f:b8:71:
cb:aa:58:cd:d1:1b:03:c4:49:df:36:c8:ad:ff:4d:a9:8d:fe:
72:ce:26:44:b9:d6:7d:6c:78:fd:16:01:f3:e8:e7:c9:d2:77:
e8:03:e2:bd:6f:96:12:28:ee:d5:b2:ec:72:0d:8e:32:34:d8:
96:bf:07:4f:80:d2:1b:8e:98:40:0f:dc:2d:73:9c:99:9e:a9:
25:8f:49:b3:2e:7c:b8:ec:20:4c:94:bd:3c:47:24:21:54:0f:
01:9f:b5:e5:9e:c4:b9:99:49:28:e4:61:f4:12:54:d8:20:e6:
8b:22:e8:0f:fb:b1:7f:7b:ce:24:49:23:ec:52:b4:ce:51:a6:
6b:94:2e:a8:72:8d:ac:6f:f7:98:de:51:05:a9:86:a5:91:ec:
60:4a:63:60:d2:6b:db:0d:7d:bf:18:75:41:54:a4:9f:e0:f3:
f2:52:4a:5d:9d:a1:64:88:bb:72:24:a3:93:6d:77:9e:2a:9e:
e3:98:e9:ee:2e:a7:e8:9b:e1:d6:b0:20:e4:b0:ce:a3:35:de:
0a:01:0f:54:f6:c4:82:e9:7d:a6:66:dc:6e:4c:79:0c:f2:02:
bb:6a:6a:8a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUYCaE8ZAVYsQbr81f+cWD+BGsT1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MTIxNDA5NTNaFw0yNDA0MTAxNDE0NTNaMDMxMTAvBgNV
BAMTKDkzNzQ4MTVFQkUzQ0VEMUE4MEIwNTRBOTkxNjczNTMyQzkwOTc0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxt1WsS0C8YYU3CETbukEMcHvV
MXsnkDuWVM5+PshAsLg3oIqb9y4GNRrJlrFfihi+9zJjQTIbTZ1Wl9p0u46Mi8Z/
KezYWlLFqW5MnvX669+uzWebcA20lNN2/idXFRlxPa2HF8/d72QOFRfOKNvw+p7q
esFnswfSKnyvFNjF242im6akxDTM3KKtwsjnemKe3SidkOIQKmrXJGIB39iEqGpp
GCk9mrQXqjyaJZVXBcbby7sLVk3ik+CzQVIFCkbHZso/HffCmIB+X5RC0kfbh0hn
6rMFUki4I2VJjJeXF4psjJzvGIHXDZQwqPTqS8KIxXYNE3wyQFEF7uT1f4qNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUk3SBXr487RqAsFSpkWc1MskJdDwwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM2
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzODM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABdf6AwDQYJKoZIhvcNAQELBQADggEBAJ9z0ICbe8u2a9sBQamB0iFUJcQLpV7V
lA3Faw+Vjy1pwm+4ccuqWM3RGwPESd82yK3/TamN/nLOJkS51n1seP0WAfPo58nS
d+gD4r1vlhIo7tWy7HINjjI02Ja/B0+A0huOmEAP3C1znJmeqSWPSbMufLjsIEyU
vTxHJCFUDwGfteWexLmZSSjkYfQSVNgg5osi6A/7sX97ziRJI+xStM5RpmuULqhy
jaxv95jeUQWphqWR7GBKY2DSa9sNfb8YdUFUpJ/g8/JSSl2doWSIu3Iko5Ntd54q
nuOY6e4up+ib4dawIOSwzqM13goBD1T2xILpfaZm3G5MeQzyArtqaoo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:05 2025 by rpki-client