Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3136362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5nuEnmFV9RO1iOMkBdQoy1h/HYe7VpZ1BAgB95Yr1Eg=
Subject key identifier: 34:B4:3F:55:94:53:E3:27:79:21:79:0B:56:C6:26:46:31:5E:9B:CE
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 745DD4A6CDC97380466CA74D0F5B2E6CF8E58795
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 16:30:05 +0000
ROA not before: Wed 07 Jun 2023 16:25:05 +0000
ROA not after: Wed 05 Jun 2024 16:30:05 +0000
asID: 834
IP address blocks: 93.127.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5d:d4:a6:cd:c9:73:80:46:6c:a7:4d:0f:5b:2e:6c:f8:e5:87:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 7 16:25:05 2023 GMT
Not After : Jun 5 16:30:05 2024 GMT
Subject: CN=34B43F559453E3277921790B56C62646315E9BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:27:8b:2e:1d:92:6b:07:35:7d:0a:2f:3e:
0f:0b:da:c1:6a:4d:e9:a1:4d:1e:d6:cd:8a:f8:f0:
cc:8a:bb:50:55:a8:0a:99:0e:84:2b:6c:89:fc:11:
df:8c:40:fa:7f:06:49:3c:f2:da:a2:e6:9d:25:ca:
24:26:52:de:ee:74:3c:1b:28:88:a0:db:9c:df:24:
53:46:de:3e:66:17:db:22:a6:31:63:41:59:d6:f2:
6d:e2:5b:92:6a:f4:2d:c3:b3:13:65:5e:2a:73:7c:
4b:3c:b3:18:00:8e:96:15:6d:49:6b:28:1c:4e:f7:
56:02:40:91:28:66:03:44:77:ed:c4:88:62:f6:66:
20:d9:23:9e:03:94:33:38:f5:9b:11:b7:05:d6:99:
f7:89:6a:d3:45:d1:e8:45:55:38:59:cf:61:f3:98:
6a:b7:53:7a:7c:99:9d:df:9a:62:03:69:28:a8:1e:
4e:3d:6c:f4:3a:5d:5d:62:94:d2:71:d9:b0:fa:70:
31:a2:35:91:7c:f8:2b:79:74:24:d0:94:72:b7:28:
bb:38:09:94:c3:f3:20:09:69:02:d6:4c:c8:61:4f:
7c:de:e9:8d:d1:6c:c4:3e:62:41:40:9d:ba:20:1c:
ef:7d:98:35:b4:05:04:c1:46:1d:32:a2:1c:87:15:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:3F:55:94:53:E3:27:79:21:79:0B:56:C6:26:46:31:5E:9B:CE
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.166.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:74:47:73:db:5a:2c:3b:ef:63:8f:af:f9:04:c1:c4:02:
1a:37:d5:ce:09:c8:bc:d6:b8:f5:de:cc:be:00:ae:99:41:b3:
05:38:9b:4d:d8:3e:7d:1c:b7:ec:a4:61:e8:49:41:2e:64:e2:
8d:6f:e1:ee:26:92:82:4a:88:41:14:c7:99:14:8f:58:26:20:
28:4c:ec:25:07:cf:d2:fd:57:46:bf:6c:fb:c0:54:2a:6a:60:
bd:17:cb:d8:69:cc:63:46:7d:34:14:aa:75:9b:54:e6:9f:14:
b7:22:c4:07:f0:9b:95:fe:60:b5:44:50:83:bb:e4:aa:7b:b1:
5a:f2:94:ea:21:56:2f:e0:b1:44:d8:49:3a:7f:ed:3b:ee:9a:
82:91:e5:d7:ca:41:b8:f7:db:5c:53:47:05:20:68:6d:98:c5:
5a:ee:d9:de:f2:b0:cf:6c:f8:fc:24:b2:76:4c:67:4c:61:81:
4e:93:23:71:7e:68:ff:eb:ba:99:2f:69:99:66:2d:ea:6e:b0:
8d:51:8f:ed:b4:8a:2a:98:6f:8f:45:29:e8:3e:32:5a:20:27:
2d:ac:ff:c7:90:61:33:bf:0e:35:5c:da:cb:4f:42:03:2f:77:
07:9e:12:63:d9:0d:f6:c7:92:dc:54:dc:65:67:a4:2d:c1:e5:
1b:5e:a7:23
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUdF3Ups3Jc4BGbKdND1subPjlh5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA2MDcxNjI1MDVaFw0yNDA2MDUxNjMwMDVaMDMxMTAvBgNV
BAMTKDM0QjQzRjU1OTQ1M0UzMjc3OTIxNzkwQjU2QzYyNjQ2MzE1RTlCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxieLLh2Sawc1fQovPg8L2sFq
TemhTR7WzYr48MyKu1BVqAqZDoQrbIn8Ed+MQPp/Bkk88tqi5p0lyiQmUt7udDwb
KIig25zfJFNG3j5mF9sipjFjQVnW8m3iW5Jq9C3DsxNlXipzfEs8sxgAjpYVbUlr
KBxO91YCQJEoZgNEd+3EiGL2ZiDZI54DlDM49ZsRtwXWmfeJatNF0ehFVThZz2Hz
mGq3U3p8mZ3fmmIDaSioHk49bPQ6XV1ilNJx2bD6cDGiNZF8+Ct5dCTQlHK3KLs4
CZTD8yAJaQLWTMhhT3ze6Y3RbMQ+YkFAnbogHO99mDW0BQTBRh0yohyHFXgFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUNLQ/VZRT4yd5IXkLVsYmRjFem84wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdf6Yw
DQYJKoZIhvcNAQELBQADggEBAIW+dEdz21osO+9jj6/5BMHEAho31c4JyLzWuPXe
zL4ArplBswU4m03YPn0ct+ykYehJQS5k4o1v4e4mkoJKiEEUx5kUj1gmIChM7CUH
z9L9V0a/bPvAVCpqYL0Xy9hpzGNGfTQUqnWbVOafFLcixAfwm5X+YLVEUIO75Kp7
sVrylOohVi/gsUTYSTp/7TvumoKR5dfKQbj321xTRwUgaG2YxVru2d7ysM9s+Pwk
snZMZ0xhgU6TI3F+aP/rupkvaZlmLepusI1Rj+20iiqYb49FKeg+MlogJy2s/8eQ
YTO/DjVc2stPQgMvdweeEmPZDfbHktxU3GVnpC3B5RtepyM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org