Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137352e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wBDnuMEeGjCRAxgp1DAQJ16FxPs3efOPBPMUIDkwhMc=
Subject key identifier: E2:83:19:EE:CB:F4:55:5B:0A:DE:40:67:E7:EC:58:0A:C4:35:34:FC
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5821303BE04884B0A838D7A07CBFFC9F6440A0A0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137352e302f32342d3234203d3e20383334.roa
Signing time: Sat 22 Apr 2023 00:00:09 +0000
ROA not before: Fri 21 Apr 2023 23:55:09 +0000
ROA not after: Sat 20 Apr 2024 00:00:09 +0000
asID: 834
IP address blocks: 93.127.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:21:30:3b:e0:48:84:b0:a8:38:d7:a0:7c:bf:fc:9f:64:40:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 21 23:55:09 2023 GMT
Not After : Apr 20 00:00:09 2024 GMT
Subject: CN=E28319EECBF4555B0ADE4067E7EC580AC43534FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:69:3a:ed:a8:b3:6e:86:1f:12:12:61:c3:
d2:2f:d2:ab:83:01:9c:ab:dc:f7:4e:40:01:1f:b0:
69:46:47:ea:8b:ea:40:ac:09:b7:ef:29:ba:78:d5:
4b:d9:07:33:83:fc:06:9c:a7:14:95:e9:21:91:6a:
30:9c:de:cf:d9:83:ea:34:74:58:f8:4f:2c:b8:12:
24:f9:ce:18:1c:7a:f1:a8:ab:6e:04:99:cd:e6:97:
da:1d:37:eb:66:9a:05:16:99:34:10:dd:30:7c:b4:
4d:0b:b1:bf:8d:fb:97:bf:38:ee:94:ed:4b:2b:1d:
3d:b1:a7:6c:74:19:43:7b:a9:ad:07:cb:b0:7b:0f:
93:25:9c:59:f2:7e:12:dc:de:87:59:37:a7:b5:2c:
3f:9b:17:77:db:0c:a8:53:55:c6:c2:f5:09:05:fe:
52:86:26:db:b9:cf:36:f0:59:18:09:36:b9:b1:c3:
38:30:d1:d9:ec:04:96:20:2d:cd:00:70:79:15:92:
f4:41:2b:4c:01:91:86:39:bb:d5:d1:fa:19:1d:8f:
18:e5:bf:d9:a9:6d:66:54:a8:03:5f:59:4d:17:de:
4a:10:ea:12:88:f2:fe:5c:bd:30:d7:37:17:5c:a9:
8f:3a:c4:7d:ce:b3:ea:cc:17:41:72:bd:ca:ce:ed:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:19:EE:CB:F4:55:5B:0A:DE:40:67:E7:EC:58:0A:C4:35:34:FC
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.175.0/24
Signature Algorithm: sha256WithRSAEncryption
23:74:2f:83:63:94:eb:d3:f0:e5:bf:06:14:15:5a:54:4f:ca:
74:7a:ae:0f:ac:ef:fe:3e:9c:15:0a:30:58:0b:a0:ba:13:8e:
85:d2:d9:ca:07:6a:8f:6c:d7:a3:c3:61:e4:eb:b1:14:b8:df:
19:81:ab:b0:08:de:68:fb:12:5b:7a:ce:40:0a:8a:71:42:22:
d4:11:13:fc:d6:88:b0:12:d5:21:0d:e9:42:33:37:7c:2b:e1:
59:81:df:d7:2d:d3:b2:d8:96:a8:c2:b4:d5:8f:83:21:06:3f:
f0:7d:66:21:45:7f:3a:ed:3d:58:f0:82:15:34:f1:4a:15:e8:
c3:53:1c:cd:1f:3b:0d:c9:08:71:11:38:a5:22:ba:37:8b:72:
49:41:5b:ae:27:89:37:e4:45:2c:98:60:9f:05:59:57:75:17:
cf:aa:62:0f:56:63:d6:8b:31:4b:bb:b2:3c:1e:86:5f:52:6b:
64:86:cc:68:13:34:b8:87:bd:a6:38:62:91:a7:50:67:af:27:
20:23:56:4d:12:1b:4f:ce:f8:8a:40:8a:73:8b:89:b6:9a:6c:
bd:48:bb:97:ef:5d:77:c9:c8:30:d1:ac:25:35:40:03:31:48:
f7:8f:0b:42:92:5c:71:dd:8a:9b:b3:a4:19:04:c0:29:64:c2:
ec:34:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org