Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20323131343332.roa
File: 39332e3132372e3136382e302f32342d3234203d3e20323131343332.roa (raw, json)
Hash identifier: aWkxvfrmsftm+U5oFKFE+pGTFuST8bC5jeERo/7ScFA=
Subject key identifier: 8A:B7:A0:5C:80:52:C4:B5:D6:69:CF:9B:5D:9C:0B:D5:FC:A5:5F:B7
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5A7752B7F347E51CD548E441B4FD5D71020C60AF
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20323131343332.roa
Signing time: Fri 20 Jan 2023 06:26:12 +0000
ROA not before: Fri 20 Jan 2023 06:21:12 +0000
ROA not after: Fri 19 Jan 2024 06:26:12 +0000
asID: 211432
IP address blocks: 93.127.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:77:52:b7:f3:47:e5:1c:d5:48:e4:41:b4:fd:5d:71:02:0c:60:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:12 2023 GMT
Not After : Jan 19 06:26:12 2024 GMT
Subject: CN=8AB7A05C8052C4B5D669CF9B5D9C0BD5FCA55FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:56:b3:18:66:80:08:fe:7c:26:6d:7b:57:
43:c5:a2:b6:a2:43:bc:d9:ba:ac:5c:ed:08:b2:69:
31:ea:9b:9d:4a:0d:24:05:19:e5:fd:bd:54:6c:22:
32:61:ba:d2:83:f9:26:7c:e0:01:37:d8:89:72:39:
40:97:f0:4c:b1:f1:55:9a:fe:5a:43:61:3f:ca:05:
76:ee:18:6b:17:1e:0f:e2:b7:65:7b:56:9e:31:67:
33:bd:e3:72:7a:bf:0f:93:31:a3:d7:0c:ee:cf:3e:
bb:4a:61:52:6c:7f:ab:e7:16:d1:03:eb:6b:2c:ba:
dc:33:44:f2:97:c2:43:67:1e:38:b2:a7:1d:d2:2f:
c6:47:e9:55:b0:23:fc:b2:9d:a2:8f:7a:a1:14:53:
c6:8e:e3:6f:07:59:e8:1d:61:10:51:9e:2d:5e:dd:
2e:d4:d2:0b:9c:0b:e7:cb:fa:93:da:02:56:8d:d3:
79:e2:2e:75:1e:92:30:67:de:9f:b7:f8:ef:86:fb:
dc:1b:69:11:f6:21:47:65:54:ea:a8:96:b0:dd:e7:
41:9f:b6:6c:4d:69:80:76:30:f5:27:e6:df:b1:6a:
a4:74:ae:da:4a:31:d9:e4:90:9b:cf:72:3c:7b:29:
ec:8e:4c:c6:2a:7b:5f:3e:1d:8d:fd:a8:58:04:d3:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:A0:5C:80:52:C4:B5:D6:69:CF:9B:5D:9C:0B:D5:FC:A5:5F:B7
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20323131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:72:99:ee:85:9e:97:13:f5:64:27:e6:62:22:49:f1:f0:6c:
20:e3:32:84:84:57:fc:f5:b3:37:80:f0:33:24:7c:c0:d9:74:
61:84:9e:f0:c4:ce:85:a5:f3:e8:9f:bd:a9:04:b2:fb:06:77:
49:ca:df:14:6c:9e:d3:4f:19:ca:1c:60:05:f8:d0:34:29:4c:
3a:a0:2e:f7:e6:9f:31:64:da:7d:66:5d:a2:24:23:f2:f7:3e:
ee:03:1d:dc:ff:c2:b2:93:9b:dd:1e:cf:e9:da:bd:3c:20:4a:
c9:56:76:2c:33:9c:38:bb:03:13:3e:e8:11:a4:fe:03:3a:14:
10:66:17:f0:da:33:05:53:27:01:fb:35:68:d5:31:d5:fd:71:
43:8f:03:d0:f7:dd:ca:de:ea:d6:c4:86:7f:92:35:25:f0:c0:
57:5c:0c:84:9a:43:d2:7d:7f:01:7d:4f:1a:ed:9c:26:02:53:
80:12:46:66:22:c3:f9:0c:d7:ee:02:d2:2e:a6:a8:ef:ba:4c:
76:69:7a:7a:db:22:f0:05:9f:7b:a7:a9:ee:74:43:d4:6b:ec:
2e:84:3f:b7:ba:7a:6f:14:a6:c6:b9:a0:28:bf:d5:f1:ce:ac:
f7:5c:90:a9:5d:98:d3:b1:84:8c:13:36:90:ef:1e:3c:32:72:
aa:46:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org