Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TFQHjwVpHGk1a0fINXsj9R2zT3Bbb87VFiajoxIvXfc=
Subject key identifier: 4C:D8:B8:24:9A:94:54:F6:7B:88:54:99:D9:C3:1B:B3:67:3D:95:DF
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 42AFC0FDC7EB5D01FF26EF8182DD3DDFB5A1B779
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Jun 2023 12:00:09 +0000
ROA not before: Thu 15 Jun 2023 11:55:09 +0000
ROA not after: Thu 13 Jun 2024 12:00:09 +0000
asID: 834
IP address blocks: 93.127.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:af:c0:fd:c7:eb:5d:01:ff:26:ef:81:82:dd:3d:df:b5:a1:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 15 11:55:09 2023 GMT
Not After : Jun 13 12:00:09 2024 GMT
Subject: CN=4CD8B8249A9454F67B885499D9C31BB3673D95DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:18:fc:a9:21:9d:e4:9b:78:49:06:20:06:
58:dd:a9:fd:92:b9:da:40:90:db:9a:93:f4:44:eb:
32:ea:92:83:a3:d2:49:89:fd:f9:f7:e9:c1:be:92:
70:c1:d0:38:89:3c:8e:62:a3:37:83:fc:73:4d:d8:
a0:a9:b0:ca:da:b8:c0:71:17:65:88:1a:0d:ac:8f:
8c:69:fd:f1:7a:af:a1:3a:f9:13:dd:61:60:28:24:
8f:29:00:fe:f5:8e:bc:d0:12:ed:ad:f7:a5:b6:25:
37:90:ee:ba:84:d5:07:be:9d:2b:27:3f:40:e3:08:
a2:13:80:28:66:73:ee:03:52:21:27:6c:76:c4:75:
1e:e2:a1:75:d8:31:e2:f7:c1:b4:df:a1:c6:6c:ec:
b7:ec:16:f1:cd:a7:58:e9:41:8c:9b:15:12:83:18:
67:46:65:3f:76:01:82:f6:9f:a2:db:b4:ec:44:1e:
d6:39:50:4f:e0:14:c5:83:63:34:86:26:a4:98:ce:
be:53:51:67:8d:af:49:ee:93:77:9c:89:5c:33:14:
60:a6:fc:d1:66:41:a3:ae:ef:a0:09:54:ed:6d:30:
9e:6c:08:87:7e:1f:7e:07:84:40:f3:b3:17:d3:9b:
3e:21:95:7b:cf:6a:4d:96:d5:cb:ca:28:b7:bb:b4:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D8:B8:24:9A:94:54:F6:7B:88:54:99:D9:C3:1B:B3:67:3D:95:DF
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.173.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6a:36:e3:be:5f:77:4b:d6:7d:3b:1f:50:5b:15:ac:7a:18:
9b:cd:8a:ab:05:81:10:f6:e2:a0:2c:fb:ad:e9:e9:57:f6:01:
e3:f1:4d:9a:20:61:56:99:72:19:c5:62:d0:ff:4c:22:ed:ec:
cf:3d:49:50:2f:1c:91:a2:5f:26:32:a6:28:68:7b:af:ba:fe:
b2:80:c7:c4:29:9b:74:f7:d3:5c:57:61:54:66:ca:fe:23:f2:
99:78:e9:f2:83:d8:80:7c:6a:4c:c7:f2:2a:65:c9:6c:77:0b:
ac:01:99:f1:77:6c:88:bd:a2:3e:6b:67:5a:01:2c:25:cd:3f:
62:b8:3a:c3:6e:73:d3:e0:68:79:cf:f9:e7:6d:7a:d7:74:5e:
c9:18:fc:f3:a6:83:77:a3:f5:df:1c:03:ad:20:c5:df:61:64:
94:bc:98:db:12:96:e6:ad:02:ed:9c:17:27:f3:83:df:42:95:
15:7a:21:07:93:ad:e7:cc:05:f4:fc:f7:07:8f:03:1a:75:6e:
e6:5a:dc:99:ef:e1:a8:7e:78:cc:4a:38:e2:13:8e:03:fa:cb:
31:9b:85:9d:34:f1:32:64:f4:93:a6:ae:71:23:04:67:63:66:
b7:8b:80:0f:5f:7c:0d:15:8d:41:62:5a:f2:bd:6c:44:1b:8c:
7a:7d:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:34 2025 by rpki-client