Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ncpRcaiLZvOxeIpl8mNIJ839iRWA+nU9QCV6fvBe5UU=
Subject key identifier: 3B:96:C1:1E:D9:74:27:FF:C8:71:73:90:9A:78:50:E6:54:CE:45:26
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 52EB1027EB48B70025DDF7F3F6ED2FE6BBD96BD1
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Apr 2023 10:00:14 +0000
ROA not before: Thu 13 Apr 2023 09:55:14 +0000
ROA not after: Thu 11 Apr 2024 10:00:14 +0000
asID: 834
IP address blocks: 93.127.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:eb:10:27:eb:48:b7:00:25:dd:f7:f3:f6:ed:2f:e6:bb:d9:6b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 13 09:55:14 2023 GMT
Not After : Apr 11 10:00:14 2024 GMT
Subject: CN=3B96C11ED97427FFC87173909A7850E654CE4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:eb:07:fa:36:2a:1a:b3:2c:bd:6a:05:3d:
49:44:f2:59:4a:f2:5e:17:5e:86:a1:72:1e:e4:24:
13:5c:3f:26:f0:0a:02:8a:a0:74:90:d5:d8:78:82:
c7:c5:10:b4:3a:3e:74:7c:19:a8:2f:f6:2b:f0:79:
77:81:6f:35:60:e2:98:a3:87:77:7f:e3:e2:ed:e3:
ce:bf:04:c1:2d:da:5d:33:2a:ce:55:48:80:a1:9f:
1d:27:73:fc:1a:dc:01:50:80:2a:d8:ae:d5:38:78:
61:b8:ca:9f:a5:e6:c6:6e:c2:08:a7:a2:43:c7:cf:
76:10:a9:5c:5f:89:f7:ee:c5:12:2f:d3:fa:ed:dd:
98:3a:1d:7c:7b:af:5a:43:6f:8e:e2:f5:be:ec:37:
4b:70:83:c0:bb:78:fd:7b:50:79:e8:5c:de:70:91:
44:f9:01:56:09:39:5d:67:38:9a:d7:9c:e8:7e:4b:
32:72:d3:a7:f7:ba:16:ae:30:b9:02:10:cb:da:13:
ea:d6:2a:36:1a:59:1f:6d:c4:86:33:d0:f3:0d:18:
86:20:89:1f:45:90:be:42:5f:71:7e:0d:81:e7:db:
b2:1e:4c:54:08:a7:9a:8c:76:ec:6e:98:2b:7d:d5:
67:9e:63:13:08:96:0b:88:85:72:b7:8d:16:bb:80:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:C1:1E:D9:74:27:FF:C8:71:73:90:9A:78:50:E6:54:CE:45:26
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:88:07:2c:6d:de:e4:ca:5c:a7:36:33:98:5f:88:a8:e0:
8d:8e:66:fc:29:20:ec:01:03:c5:e4:8d:b9:4d:cb:7a:2e:cd:
3a:ac:84:0d:db:2e:b0:ce:d3:d1:9c:d0:e7:8d:01:b2:86:17:
ea:5f:40:94:8f:ce:95:1b:d4:5e:25:01:58:05:ae:5f:2a:cb:
f3:57:a9:77:75:2e:4d:27:68:5d:ae:9c:25:a4:42:18:6d:cf:
a3:c3:c6:d4:ff:c7:ae:d4:87:27:f0:84:c8:43:88:0d:24:a0:
5a:3e:30:f6:b8:8b:47:e7:8d:74:74:19:0e:5a:73:db:13:bc:
07:b6:46:e0:22:f3:ac:5e:de:65:ca:90:35:c9:61:f2:66:80:
b1:65:98:45:42:05:6f:77:5f:85:98:a0:5e:8c:15:36:51:09:
f7:65:bb:63:3b:9c:2e:1d:f4:c1:d1:77:b2:f3:78:a6:bb:cc:
11:e4:c9:c0:73:c1:2d:ef:a9:6e:ef:40:e1:df:b3:25:9e:60:
a2:af:4b:21:b5:6e:94:d6:70:47:ab:6f:0a:fa:53:2b:c2:5b:
cc:89:e3:76:fc:27:70:bc:b9:ae:46:72:ab:ee:42:f7:36:f4:
d3:85:f9:91:65:33:b4:06:4b:56:dc:49:bb:c9:c1:35:e2:14:
35:e2:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:53 2025 by rpki-client