Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20323034383433.roa
File: 39332e3132372e3136312e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: 33lcGypV+S4eh9zcfpL3sXtx1p1858fzkSvtiIEHeZQ=
Subject key identifier: 72:12:36:C9:93:CB:FB:44:34:5B:35:CE:2F:07:EE:7E:46:70:A3:28
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 288D7DF3E6361080AAF264162BF7EB6BDF05928D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 09 Feb 2023 13:18:11 +0000
ROA not before: Thu 09 Feb 2023 13:13:11 +0000
ROA not after: Thu 08 Feb 2024 13:18:11 +0000
asID: 204843
IP address blocks: 93.127.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8d:7d:f3:e6:36:10:80:aa:f2:64:16:2b:f7:eb:6b:df:05:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 9 13:13:11 2023 GMT
Not After : Feb 8 13:18:11 2024 GMT
Subject: CN=721236C993CBFB44345B35CE2F07EE7E4670A328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:59:3c:1f:13:04:b2:9d:1c:61:20:ee:ce:
e7:b4:66:be:94:42:b3:c3:7e:60:d3:03:79:7f:14:
bc:df:38:05:ec:cc:af:da:c1:80:ee:14:ad:84:cf:
ae:63:8a:09:4e:5c:d2:de:15:83:5e:4e:5d:64:3a:
bb:be:fe:5f:8f:18:6d:91:34:ad:cd:78:f9:78:83:
55:0b:4d:98:8a:a1:de:be:b4:c0:ad:d0:d3:73:b1:
17:16:41:ad:54:c3:59:92:23:45:48:f8:53:e3:8f:
98:2b:26:ce:b5:c5:38:f1:83:ec:15:7c:96:40:63:
d0:49:71:5f:2f:86:10:36:fd:70:f2:c9:e1:1a:98:
70:d7:67:fa:3b:73:8c:fa:f0:7c:fb:43:d1:e7:d9:
2c:f4:d5:07:04:a5:69:7a:f9:af:82:62:ec:40:2f:
d0:bd:b0:8a:19:77:e0:2b:ce:65:f6:a9:49:1b:6f:
5f:87:3a:5d:ae:62:3d:9d:eb:d2:3b:ef:08:b6:26:
a6:08:8b:ee:e4:78:14:d7:25:f8:e5:67:3c:1b:16:
f1:25:57:06:74:62:54:b9:ff:19:8d:33:8e:90:01:
e9:94:d0:bc:6a:aa:5f:7e:e0:8a:7a:88:5d:32:ae:
8b:be:22:f4:7c:70:de:74:14:a8:0f:66:db:6d:ca:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:36:C9:93:CB:FB:44:34:5B:35:CE:2F:07:EE:7E:46:70:A3:28
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136312e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:28:9a:5c:f5:86:43:5f:43:2c:e7:06:8d:b9:3c:d2:d3:9c:
e0:df:8e:3b:97:39:a9:24:87:21:f6:ab:40:4a:76:f5:63:5c:
ad:40:a8:00:70:4c:0b:65:e8:2d:ab:ac:1c:61:96:19:f6:a3:
1f:2a:c2:4a:fd:d7:cb:70:f0:c3:ae:62:06:ff:97:b8:4a:63:
6a:fd:b7:6d:0a:17:68:cf:7c:5a:3c:20:a4:23:ac:c8:56:6a:
70:ab:6b:1e:d4:22:3b:a4:62:92:d9:bb:bb:98:64:da:c8:11:
e3:a7:bc:39:56:cc:8a:52:23:69:f8:1e:8f:ec:1e:c6:7e:3f:
57:83:d8:22:11:ba:2c:4d:16:b8:a8:ad:a8:b8:b5:6b:e9:4e:
36:56:bf:85:ed:b9:02:41:46:7b:15:1f:d3:56:c0:64:9a:1a:
45:81:0a:cc:35:82:6f:8a:0e:e2:dd:81:89:d0:5f:35:06:b4:
36:d8:c8:87:24:46:9d:e6:ab:29:b9:6d:a5:d5:70:99:6d:1b:
7a:84:b2:3d:e1:b4:cd:d1:d9:56:8a:d0:8e:66:69:06:59:08:
4b:3d:28:32:a9:86:3d:7c:82:b3:2a:a4:04:54:8b:3c:3c:ef:
d8:91:40:37:c8:88:28:95:53:ea:15:11:75:a6:39:d4:76:39:
2e:41:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org