Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32342d3234203d3e203133323133.roa
File: 39332e3132372e3137302e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier: cQd/KD+XCI27XcwcrWAC0/+Xe6PR8AHnbrk+nurQl1o=
Subject key identifier: 4F:E8:41:DC:62:37:86:7E:8F:94:9E:78:95:EE:9E:37:67:24:BB:90
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 07CD4F4370F87CF0C22F815DD35E679D9E42875B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32342d3234203d3e203133323133.roa
Signing time: Wed 13 Sep 2023 15:11:35 +0000
ROA not before: Wed 13 Sep 2023 15:06:35 +0000
ROA not after: Wed 11 Sep 2024 15:11:35 +0000
asID: 13213
IP address blocks: 93.127.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cd:4f:43:70:f8:7c:f0:c2:2f:81:5d:d3:5e:67:9d:9e:42:87:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Sep 13 15:06:35 2023 GMT
Not After : Sep 11 15:11:35 2024 GMT
Subject: CN=4FE841DC6237867E8F949E7895EE9E376724BB90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:a9:7e:0f:62:53:14:2b:4c:69:3e:e6:15:
95:99:01:98:be:1a:56:69:0f:27:17:f5:f2:82:4d:
be:cd:2e:36:b7:1a:82:2d:65:ce:e2:22:b1:9f:f6:
3b:25:97:7f:0b:01:86:4f:f2:fd:f1:4b:80:1c:06:
d3:ee:43:b7:9b:91:32:e9:00:99:76:3e:37:9e:61:
b8:01:74:9b:a5:b0:b5:ab:eb:24:75:0f:ac:c6:29:
73:ef:76:40:c0:3d:f3:01:a6:67:59:c4:94:13:99:
69:c4:cb:42:9a:bd:f0:e7:75:eb:3f:43:40:66:4f:
ad:77:c0:42:d1:56:5e:01:11:f4:4b:89:c6:ed:07:
75:e9:14:bc:a6:94:13:92:80:32:50:ba:6e:66:ec:
89:a6:36:3b:45:37:14:e4:61:a3:45:22:7f:77:60:
a5:cb:6e:d3:c8:67:97:35:49:fa:04:56:cc:c0:46:
80:e7:32:98:d6:d0:6a:ad:a6:00:b9:e8:27:c1:f1:
47:8a:c2:24:bc:ed:bb:a7:5b:7f:3a:f3:84:da:ca:
00:74:ee:db:0f:46:68:13:88:09:ed:26:31:61:60:
5d:c2:84:30:5b:84:7f:8f:6d:50:05:41:6f:d9:82:
55:6e:1b:01:ca:3f:ff:2c:0f:44:43:3d:7d:e5:cf:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:41:DC:62:37:86:7E:8F:94:9E:78:95:EE:9E:37:67:24:BB:90
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137302e302f32342d3234203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.170.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f2:df:31:4f:3e:56:b2:d7:27:c7:55:e9:c4:ad:40:cf:90:
3c:f2:a2:77:0f:d4:66:a3:be:b8:de:77:70:0c:ca:d1:5e:db:
41:70:3f:5d:92:f1:79:62:0f:01:98:2f:16:23:c6:9b:34:80:
8c:e9:30:fe:dd:29:d7:7c:32:ab:8f:54:b1:05:24:d6:2a:f7:
28:49:26:14:3a:99:13:30:42:57:5e:d6:da:d1:81:32:05:a6:
35:35:2e:6b:ae:bc:ca:d3:95:c7:f7:84:6a:82:46:43:62:33:
ad:b5:fd:63:be:3a:0a:83:51:00:57:71:fa:55:65:4b:c4:e6:
bf:f7:f1:dd:d7:7d:06:81:ae:a2:7e:1d:e7:2c:12:61:2a:bb:
5d:55:85:68:e4:26:12:41:6d:ba:f2:c7:09:5a:db:95:ae:6e:
5b:73:d9:3a:06:f6:2f:38:4b:94:7e:85:b6:aa:f7:40:dc:22:
2b:20:0a:1f:94:f7:08:36:d5:fd:e2:21:e6:86:dc:68:cd:b2:
0d:79:bc:d6:1a:17:f0:45:a8:cd:a2:da:d2:33:df:88:3b:6a:
43:59:c8:ae:93:28:e4:54:dd:3c:84:0b:63:07:fd:14:ee:7b:
de:d3:e2:17:30:72:a4:e4:d0:bb:7d:f8:88:59:02:6f:6a:97:
ac:e9:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org