Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20323034383433.roa
File: 39332e3132372e3136342e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: h/hvlepwXhIkkaanl3ol0jYf+e34hhk4FHcxtXJDhRQ=
Subject key identifier: 05:87:31:20:6A:2C:23:07:59:E2:F0:6C:A8:DA:D9:FA:5A:20:6A:6E
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7071C21856E4E3E9ED2AC3ADFAFF9005DD2AC7E4
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 30 Mar 2023 14:45:58 +0000
ROA not before: Thu 30 Mar 2023 14:40:58 +0000
ROA not after: Thu 28 Mar 2024 14:45:58 +0000
asID: 204843
IP address blocks: 93.127.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:71:c2:18:56:e4:e3:e9:ed:2a:c3:ad:fa:ff:90:05:dd:2a:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 14:40:58 2023 GMT
Not After : Mar 28 14:45:58 2024 GMT
Subject: CN=058731206A2C230759E2F06CA8DAD9FA5A206A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:89:2c:0f:61:cd:64:d6:68:67:27:6d:e7:
31:35:c5:a4:9d:d3:e0:36:1c:8d:09:68:ed:76:f8:
74:ce:ed:0d:32:2b:af:2b:fe:d1:74:42:c1:f0:f8:
e8:ec:d8:e8:34:e7:3f:6c:10:0a:71:33:f5:d5:87:
45:da:60:3b:0d:b2:7f:c5:7d:87:20:3c:64:43:de:
29:8e:a2:76:5e:23:1b:a2:12:9a:d5:b3:8b:b9:5e:
00:bd:33:eb:c9:be:df:df:b9:bb:85:e1:e7:69:00:
bc:2b:80:98:11:47:51:36:7d:28:50:6c:c1:9b:1a:
49:52:c3:93:60:a9:87:04:89:0d:e7:42:e4:45:c6:
c8:50:71:59:14:bd:2b:c8:8a:40:ff:9a:3e:08:19:
80:56:d0:f6:ba:5c:30:6b:6c:c7:87:cd:26:d4:11:
43:0a:94:14:03:1b:34:2b:df:c5:c4:eb:f3:68:91:
45:a7:f9:e7:d9:9a:b3:5a:70:b2:6e:30:6c:b6:1f:
b2:5d:53:86:25:ee:cd:e3:f9:53:94:30:3c:39:76:
51:d4:8b:0b:eb:b2:37:c0:c4:89:11:e1:28:e4:86:
0e:52:10:73:8e:c7:f0:09:93:5c:f6:92:f7:a0:bc:
5f:4c:73:aa:9b:1f:40:eb:88:72:f6:9a:52:56:06:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:87:31:20:6A:2C:23:07:59:E2:F0:6C:A8:DA:D9:FA:5A:20:6A:6E
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:91:3a:5a:87:b6:7c:de:50:1d:36:71:18:cd:6a:fb:e0:03:
80:5a:85:bf:71:45:26:3c:8e:ab:41:0b:2d:92:8b:bc:12:b1:
f4:ab:82:20:e2:c3:53:1e:c3:97:38:f0:1d:01:dd:05:39:ce:
a5:94:2a:02:50:d6:8a:bb:ae:eb:c5:2e:ce:ed:09:35:f5:df:
0e:f2:98:f8:a9:48:a7:f8:be:ab:12:d4:9a:60:6c:1c:dc:c0:
30:21:2d:17:47:26:df:a8:e2:78:fe:2c:57:e5:e2:90:d8:18:
01:6c:98:08:1e:e5:9e:e5:d8:9e:1c:7d:e9:60:09:e4:a0:5e:
1a:8e:7c:a7:aa:ca:6a:6a:c0:90:d5:e2:86:fc:1a:a6:1b:38:
92:86:d4:ac:b1:39:56:5a:c0:30:4f:48:c0:db:7d:98:3f:f1:
64:93:97:50:d9:b5:c0:ee:ce:d8:83:ee:4e:79:56:04:b2:bc:
a0:f5:17:11:2b:61:c7:d9:fe:2b:c0:e2:d6:25:03:c0:a7:a3:
97:f5:ba:06:10:51:34:3c:3c:40:36:02:4d:fa:1f:77:3e:91:
01:ba:cc:bf:5c:6c:4c:e9:d8:e8:bc:a7:61:24:25:de:08:70:
77:1b:30:14:64:58:72:dd:f0:20:5c:eb:eb:8a:2f:55:e5:3a:
1e:c3:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:19 2025 by rpki-client