Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +FjveWMEKjMP3qHjkBggqtD/WaWE87IJ16yKeSPnGzE=
Subject key identifier: 65:5D:74:66:FD:55:9E:14:DA:E8:70:65:D7:EA:AC:64:DD:0D:BF:21
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 2D31E7BD00A60ECF557CB91C3EB23295A44E57BF
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Jul 2023 09:30:16 +0000
ROA not before: Mon 03 Jul 2023 09:25:16 +0000
ROA not after: Mon 01 Jul 2024 09:30:16 +0000
asID: 834
IP address blocks: 93.127.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:31:e7:bd:00:a6:0e:cf:55:7c:b9:1c:3e:b2:32:95:a4:4e:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 3 09:25:16 2023 GMT
Not After : Jul 1 09:30:16 2024 GMT
Subject: CN=655D7466FD559E14DAE87065D7EAAC64DD0DBF21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:8b:ab:7a:7a:12:ce:01:00:94:7a:86:17:
bf:3a:f3:af:21:39:54:0e:52:f3:f8:fd:3f:18:b4:
81:2c:fc:1f:bc:98:fc:dc:4e:df:01:a6:3b:63:2f:
ec:a7:99:74:79:a5:8e:be:19:61:ff:b1:e0:9f:c8:
0d:32:af:c4:57:9f:4e:5f:4e:79:54:db:a7:7a:19:
cb:18:de:17:c7:3f:8c:d8:f7:79:49:7d:90:fd:57:
7a:80:3a:22:85:73:cf:35:eb:11:e3:04:bf:8f:0b:
07:c3:d3:fc:be:c2:69:6a:15:ca:5f:05:47:d6:c9:
63:09:90:ae:85:d6:e1:ca:0e:7a:b3:72:d0:76:63:
5a:4f:16:ee:65:e7:a9:53:ef:f8:31:ad:da:fc:8a:
ae:cc:c1:52:42:30:3f:a4:9c:b5:bc:97:c1:ba:41:
2c:be:f8:68:0d:ea:ec:23:cd:9d:c1:fd:6e:bd:27:
f2:88:e0:1e:14:8c:d3:51:40:c2:6c:e1:24:bd:93:
19:32:ca:20:0d:19:35:8f:20:88:52:8c:44:df:e0:
e0:cd:49:87:d3:73:2a:4d:9d:74:b8:fb:8b:ac:09:
2c:45:4a:09:25:48:6b:2c:16:7d:85:b2:c3:1d:89:
63:e9:69:f4:e9:bb:c5:02:10:e2:ed:3e:6d:63:ff:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:74:66:FD:55:9E:14:DA:E8:70:65:D7:EA:AC:64:DD:0D:BF:21
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0e:8c:9a:1f:4b:b7:09:e5:e5:07:5c:11:f1:3c:38:4c:76:
e7:89:a7:04:58:05:b8:e5:f9:70:4f:41:ee:42:c7:fb:a6:fb:
9b:1c:36:44:28:06:10:b4:9c:27:27:b9:3b:0a:90:db:9e:93:
5d:f6:ef:96:83:2f:6d:1c:76:62:81:f9:71:50:61:63:b2:3f:
eb:f5:67:1c:bf:07:85:11:74:f4:0f:47:06:75:63:a9:22:9f:
f0:9b:bd:c0:fe:10:a2:6b:72:67:d9:c0:40:be:f2:ae:e5:e7:
56:2e:4a:5f:b9:77:04:8e:e7:b4:15:23:2d:e6:78:f4:e0:ae:
77:6f:cf:5a:24:68:cf:8a:ad:97:a3:e7:06:8e:9f:63:0c:aa:
42:88:e9:90:d4:53:42:4a:ab:97:2d:2d:cb:ac:6b:cb:7c:1d:
73:4d:a0:dd:ad:6c:4e:f6:77:c3:27:b5:e5:39:f7:31:b4:0b:
38:8d:da:a8:ea:ad:35:e5:68:a5:ca:4d:6f:ce:a6:45:ef:eb:
8d:ef:31:bc:48:73:2a:95:2f:b1:40:36:c7:66:bb:8f:7c:0e:
f8:2d:5b:d7:ad:e1:00:5e:49:1b:4c:77:21:44:fa:50:b3:44:
4a:ae:46:ba:35:eb:7f:48:b1:61:ee:e7:65:3d:3c:cf:e4:fb:
8a:02:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org