Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: O7zNwdhiMv4Msv8QrRKRhiBAaELTAlrd5+JI4cI2+Us=
Subject key identifier: 9D:2C:7B:EB:BB:5F:83:6C:37:81:40:15:8B:90:53:EC:17:92:A8:F9
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 30BF8DEE1AFB1D20214F523C332CB056BD597143
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20383334.roa
Signing time: Fri 15 Sep 2023 00:00:05 +0000
ROA not before: Thu 14 Sep 2023 23:55:05 +0000
ROA not after: Fri 13 Sep 2024 00:00:05 +0000
asID: 834
IP address blocks: 93.127.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bf:8d:ee:1a:fb:1d:20:21:4f:52:3c:33:2c:b0:56:bd:59:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Sep 14 23:55:05 2023 GMT
Not After : Sep 13 00:00:05 2024 GMT
Subject: CN=9D2C7BEBBB5F836C378140158B9053EC1792A8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:57:ab:ac:b4:f9:7d:8c:36:72:20:96:fa:
32:f9:5f:89:08:c2:82:ff:63:b7:21:35:26:03:14:
ca:68:d1:7b:78:83:a5:59:9c:f1:b8:e0:63:7c:0a:
6c:b7:3c:78:ff:18:2a:ab:00:b6:ea:78:e7:8e:34:
98:aa:31:01:a0:e5:6b:cb:85:8f:82:c7:76:6b:d9:
0a:da:57:49:8e:6f:da:9b:d8:cb:71:75:7c:d6:4d:
e8:68:bb:a3:38:a4:92:3a:b8:d2:2e:ef:12:68:3d:
81:69:37:a3:c3:59:0f:3b:ca:f8:22:2d:9b:b0:44:
bc:91:eb:bc:da:72:44:8c:3e:0e:08:07:e1:d8:81:
c7:78:e3:12:5b:7a:a1:89:52:a6:8a:51:79:36:0b:
7a:17:d1:30:8b:8b:09:c9:29:5c:8b:ed:5b:2c:a1:
76:7d:f9:53:e1:e4:61:8d:6f:a8:41:91:12:91:42:
0b:0d:75:e4:21:61:b7:f7:78:a1:ff:c7:8e:41:40:
7d:3e:f2:20:77:41:11:06:29:be:93:8a:d6:47:40:
d1:e2:07:55:54:81:08:c8:f6:2b:3c:50:75:1c:73:
c0:d3:30:88:bf:77:c0:43:99:2c:4f:87:d8:07:ef:
a1:22:40:7d:d8:5a:20:6f:c9:1d:5f:dc:dd:1a:76:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:7B:EB:BB:5F:83:6C:37:81:40:15:8B:90:53:EC:17:92:A8:F9
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.168.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:b8:78:64:5f:62:24:00:9f:63:20:c7:5d:1d:6b:a0:ae:
88:95:a3:28:07:97:3f:58:e8:2c:71:87:8b:b3:65:74:b7:ba:
13:6e:59:f9:38:1f:0a:da:9d:83:c6:c3:7f:e2:14:36:88:a7:
86:fa:6c:cc:7e:d5:34:4a:22:a7:3f:78:6e:76:bb:f3:b8:3b:
00:ba:21:73:69:ff:45:cb:de:a0:1f:0f:84:94:9c:8d:b1:bc:
1e:29:47:70:a4:d0:f0:35:e3:3b:b9:ec:b9:60:03:02:b7:37:
ef:29:d1:e3:37:d2:77:d8:60:9a:c4:c3:7a:0d:36:14:18:da:
e6:1e:e7:eb:c8:75:a4:1e:38:9d:0c:bf:d0:96:89:c6:21:b9:
2f:00:e6:d0:d2:df:50:4d:c2:de:e1:ae:00:0f:2f:c3:65:e5:
66:2a:6c:cb:25:99:48:c6:ca:28:11:9b:35:61:36:5d:a4:14:
ba:7a:6f:a4:e3:15:f1:ca:61:24:70:b8:87:9e:cd:cf:11:19:
fc:02:cc:9c:a0:93:02:4d:f0:d1:1b:5c:8d:bf:3d:3c:fb:90:
e1:39:d8:9a:84:a6:72:99:95:93:50:27:c0:b9:81:cc:db:c2:
1b:1f:d2:88:ab:fa:ae:63:d1:4f:63:95:9c:07:3b:4e:3f:4a:
ef:58:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org