Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32342d3234203d3e20313337343039.roa
File: 39332e3132372e3137362e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: rkpqS83d4J/SQMIDbGL9x6nKDV/oP3Dgo1p2vQeoKEo=
Subject key identifier: 7F:C6:C5:D0:F3:3C:75:47:00:EF:3E:E7:40:94:8F:84:73:A5:4E:A8
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 20FFFAC5507A38E685A4383B38851894EFA7A943
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32342d3234203d3e20313337343039.roa
Signing time: Thu 06 Apr 2023 11:32:05 +0000
ROA not before: Thu 06 Apr 2023 11:27:05 +0000
ROA not after: Thu 04 Apr 2024 11:32:05 +0000
asID: 137409
IP address blocks: 93.127.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:fa:c5:50:7a:38:e6:85:a4:38:3b:38:85:18:94:ef:a7:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 6 11:27:05 2023 GMT
Not After : Apr 4 11:32:05 2024 GMT
Subject: CN=7FC6C5D0F33C754700EF3EE740948F8473A54EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:29:ec:9e:0b:33:ed:4d:08:aa:01:cd:ba:
db:b7:28:b9:ec:9a:bb:b5:cb:90:84:ae:52:8b:d1:
1f:a3:e6:39:0e:3f:03:9d:b7:b2:d1:85:2e:4d:6a:
a6:6e:05:9f:78:d9:53:1f:27:49:ed:51:5f:a7:45:
1f:65:2b:6e:d5:49:f9:85:27:59:fc:c6:11:49:05:
04:ee:b7:8a:01:e2:c5:df:d8:a5:7c:55:51:59:d5:
97:06:48:2f:10:1c:45:c0:86:e2:3c:1d:4b:44:47:
f2:c2:b8:e2:19:4f:03:39:4a:4f:13:86:79:74:c9:
1b:ad:45:9b:72:8a:aa:dd:09:87:64:d7:ca:5d:fa:
98:df:6e:88:34:68:d1:b5:2f:b5:2d:61:88:31:c4:
4b:af:22:4c:57:43:c9:0e:0c:d4:bf:79:ce:33:a1:
b2:9e:31:8f:8c:a2:6c:48:8c:ec:a3:90:83:e5:e0:
c0:bd:b3:3e:0e:a8:3b:5e:63:9d:43:aa:80:61:e5:
fe:fb:3e:9d:98:c9:78:3c:58:9b:65:0c:48:5c:c7:
ed:b8:eb:11:b2:78:77:a0:9c:a4:5c:87:25:36:ce:
91:a3:3d:6a:ce:2d:8f:64:91:70:2d:f8:2a:01:a0:
d2:37:d6:f5:75:5b:b3:ec:0b:e4:db:18:e4:bd:66:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:C5:D0:F3:3C:75:47:00:EF:3E:E7:40:94:8F:84:73:A5:4E:A8
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137362e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cb:9f:45:7b:92:15:fe:15:0c:a6:42:9c:13:13:31:b6:fd:
52:d3:55:c0:67:63:f4:2b:5e:08:c4:be:b5:30:80:6a:6a:6f:
43:49:3c:e4:3c:09:f4:16:da:53:00:0f:ad:48:e4:b1:1b:08:
27:f9:15:db:44:91:ab:f3:58:be:bf:57:a2:7d:b2:31:11:ae:
f9:ed:a7:13:db:15:cd:1e:4e:73:4b:6d:09:35:37:15:49:90:
bd:21:84:13:09:37:ac:02:88:d4:a4:7c:b3:e6:29:aa:ca:09:
35:82:c1:32:6d:49:26:e2:71:ef:08:45:7e:97:e8:22:b3:ac:
bd:ce:4f:73:de:75:d5:ba:f3:02:bf:f8:bd:d1:49:b2:a4:df:
21:9b:9f:51:28:d5:6a:e0:92:9b:ac:61:2d:56:74:22:39:03:
43:3f:39:59:b4:43:27:6b:10:95:3a:c2:c6:a7:1f:43:b6:f2:
37:6e:63:4f:6c:a7:d9:d4:cf:01:95:88:e3:d8:ba:47:d6:ba:
1c:6f:c5:d4:ec:ef:d3:a8:7b:b0:f4:81:6f:6c:2d:1b:a6:43:
8f:74:cf:4a:2c:5d:de:d5:f0:54:0f:06:20:95:ec:a9:c0:19:
57:30:e0:be:dc:3b:38:5b:c7:67:2b:30:d3:9e:d8:51:d5:7c:
83:bc:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org