Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e20313337343039.roa
File: 39332e3132372e3137302e302f32332d3234203d3e20313337343039.roa (raw, json)
Hash identifier: WsiAd0fFeyqJhPLqY9XNjRhNzL/0p40N5dO5QE/afDA=
Subject key identifier: 57:B9:6C:F4:CE:8B:7E:C6:2B:F3:1A:E6:98:3D:59:0A:CA:C1:D3:5A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 53EA3CF151720FD7234415B40F6476DF37162775
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e20313337343039.roa
Signing time: Wed 22 Mar 2023 08:48:33 +0000
ROA not before: Wed 22 Mar 2023 08:43:33 +0000
ROA not after: Wed 20 Mar 2024 08:48:33 +0000
asID: 137409
IP address blocks: 93.127.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ea:3c:f1:51:72:0f:d7:23:44:15:b4:0f:64:76:df:37:16:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 22 08:43:33 2023 GMT
Not After : Mar 20 08:48:33 2024 GMT
Subject: CN=57B96CF4CE8B7EC62BF31AE6983D590ACAC1D35A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:74:94:22:e2:f8:0f:63:0d:af:8b:8c:1a:
1f:31:d5:c0:d6:fd:84:c8:ae:6f:5a:a6:5d:60:f4:
55:3a:26:e5:e8:24:be:f4:c2:19:9d:9f:53:2e:a0:
84:54:78:69:4f:6b:d3:e5:75:e9:8a:3a:2c:b3:54:
50:d1:d7:bd:07:e1:45:88:c4:51:7d:ea:55:65:1b:
f9:7b:7a:f4:85:59:51:f5:20:7d:da:e6:88:61:ae:
e9:67:21:fb:fa:09:1a:f7:5a:99:f4:b9:2c:11:3b:
19:2e:9e:2c:45:f7:79:4d:a0:b1:6c:58:1d:0b:58:
ec:9d:b7:a3:b9:4f:6e:36:0c:07:a0:3a:f1:6e:3f:
69:50:01:45:91:a6:85:0a:34:8f:44:62:d1:5a:45:
98:72:5f:75:57:e0:ef:11:62:f1:66:19:d1:ad:3f:
ba:2b:92:ed:f6:b3:eb:3c:ad:8a:c5:61:e9:07:f2:
3f:68:bc:fa:96:d0:fa:4e:9b:ff:7f:71:23:40:6f:
3f:b3:3e:11:d1:c2:a7:c8:8e:a8:02:af:54:05:a1:
91:22:d3:f3:10:90:fc:b4:8a:a4:31:d7:0d:3d:4c:
1a:11:ba:fc:5e:d1:92:92:ef:a6:bf:04:4f:71:b3:
f2:b6:9f:4f:c4:45:0e:14:82:4d:06:38:5a:9b:34:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:6C:F4:CE:8B:7E:C6:2B:F3:1A:E6:98:3D:59:0A:CA:C1:D3:5A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32332d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.170.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:28:ab:dd:8b:19:40:e5:d9:d5:da:2c:2b:49:2e:06:6d:99:
07:4d:9c:40:80:6b:52:e0:9d:c9:61:49:34:fa:e4:53:0f:22:
26:31:e1:2b:38:c0:5f:e1:38:10:96:79:f4:d2:97:c2:74:d0:
b1:97:5d:d4:ce:0b:3f:62:53:56:4e:81:ab:25:ee:76:18:34:
61:71:03:88:ad:74:c6:94:c3:5e:98:6c:58:c0:59:4e:25:ba:
54:ba:4e:9a:37:25:43:c4:c9:a7:3d:aa:a0:cf:3e:41:1c:a9:
a4:59:b8:aa:4f:1b:d3:ce:7c:63:c4:74:16:de:06:95:80:79:
56:1f:1b:6d:b7:33:92:d0:24:6d:d1:1e:fc:72:13:1c:ac:bd:
8b:28:57:99:e7:90:dc:e0:e1:2d:e9:f7:f1:ad:d4:35:1c:89:
7d:b4:fd:2c:df:f2:5d:dc:5c:ae:ea:93:bc:fc:3f:77:60:29:
de:f0:15:17:25:de:5b:a8:4c:35:a7:c8:da:32:73:c2:a3:40:
97:a5:b2:61:10:8f:4f:c7:3e:12:75:ae:e5:9c:d1:0a:6c:7e:
a8:c8:6f:57:71:90:f7:97:c5:4a:bb:80:8e:48:f7:d5:03:07:
a0:7a:e5:45:ba:dd:b3:46:9e:e1:fc:74:c2:63:53:df:82:45:
bc:01:1f:2f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUU+o88VFyD9cjRBW0D2R23zcWJ3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAzMjIwODQzMzNaFw0yNDAzMjAwODQ4MzNaMDMxMTAvBgNV
BAMTKDU3Qjk2Q0Y0Q0U4QjdFQzYyQkYzMUFFNjk4M0Q1OTBBQ0FDMUQzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsHSUIuL4D2MNr4uMGh8x1cDW
/YTIrm9apl1g9FU6JuXoJL70whmdn1MuoIRUeGlPa9PldemKOiyzVFDR170H4UWI
xFF96lVlG/l7evSFWVH1IH3a5ohhrulnIfv6CRr3Wpn0uSwROxkunixF93lNoLFs
WB0LWOydt6O5T242DAegOvFuP2lQAUWRpoUKNI9EYtFaRZhyX3VX4O8RYvFmGdGt
P7orku32s+s8rYrFYekH8j9ovPqW0PpOm/9/cSNAbz+zPhHRwqfIjqgCr1QFoZEi
0/MQkPy0iqQx1w09TBoRuvxe0ZKS76a/BE9xs/K2n0/ERQ4Ugk0GOFqbNK/1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUV7ls9M6LfsYr8xrmmD1ZCsrB01owHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM3
MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFdf6owDQYJKoZIhvcNAQELBQADggEBAB8oq92LGUDl2dXaLCtJLgZtmQdNnECA
a1LgnclhSTT65FMPIiYx4Ss4wF/hOBCWefTSl8J00LGXXdTOCz9iU1ZOgasl7nYY
NGFxA4itdMaUw16YbFjAWU4lulS6Tpo3JUPEyac9qqDPPkEcqaRZuKpPG9POfGPE
dBbeBpWAeVYfG223M5LQJG3RHvxyExysvYsoV5nnkNzg4S3p9/Gt1DUciX20/Szf
8l3cXK7qk7z8P3dgKd7wFRcl3luoTDWnyNoyc8KjQJelsmEQj0/HPhJ1ruWc0Qps
fqjIb1dxkPeXxUq7gI5I99UDB6B65UW63bNGnuH8dMJjU9+CRbwBHy8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org