Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138362e302f32342d3234203d3e203630373231.roa
File: 39332e3132372e3138362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: mn/UGhLvFdj+VAQj9RZmAByW8lmMc4ER/SL2ZA/q7cg=
Subject key identifier: 3D:01:F0:7D:56:3C:EA:4F:28:45:F0:B3:26:F4:F9:4C:0B:FA:2D:29
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7A767BBF824178047C6C876D18AB8130C5AAA489
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138362e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:12 +0000
ROA not before: Fri 20 Jan 2023 06:21:12 +0000
ROA not after: Fri 19 Jan 2024 06:26:12 +0000
asID: 60721
IP address blocks: 93.127.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:76:7b:bf:82:41:78:04:7c:6c:87:6d:18:ab:81:30:c5:aa:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:12 2023 GMT
Not After : Jan 19 06:26:12 2024 GMT
Subject: CN=3D01F07D563CEA4F2845F0B326F4F94C0BFA2D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:4a:79:54:0e:19:0e:51:9f:cc:b4:b6:04:
d1:0f:72:97:78:f3:c0:47:4f:9a:40:d0:d2:4a:3f:
08:ec:71:ac:e7:81:3f:56:eb:e4:5c:e3:f6:2c:c1:
2e:24:c3:9e:2c:06:95:79:a7:6d:0d:26:8d:ec:79:
cf:15:85:4b:85:0b:5f:e5:2d:5a:76:fe:d4:7e:d7:
31:59:3e:51:6e:e6:0a:bc:06:ab:cf:5f:09:47:7c:
f2:80:ab:db:81:73:82:be:71:89:57:13:84:ad:6f:
87:26:26:a2:26:4b:d1:9c:1a:7d:be:68:9e:6e:06:
3d:6f:f0:06:d9:b9:39:e6:37:ea:45:ed:85:ce:73:
42:88:8b:6a:d2:0c:f8:c1:e8:b7:1b:48:8b:c0:70:
9b:03:1d:14:bb:59:9e:0a:e6:7d:16:59:c2:9c:b9:
e8:2b:78:5f:45:e9:da:96:d5:7e:0e:92:d0:4a:9c:
85:15:94:e2:a3:08:e7:08:33:aa:1f:7b:c1:51:49:
27:4c:6e:19:f2:fa:99:50:6b:2f:b6:00:b1:24:3a:
2f:68:5f:28:ee:7b:36:04:bf:14:ef:2c:27:ef:ac:
27:01:20:d3:d4:01:ab:ae:a7:aa:e8:5a:3d:a4:d5:
63:5e:df:b6:b3:b0:b4:0b:31:f1:b1:39:1e:56:59:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:F0:7D:56:3C:EA:4F:28:45:F0:B3:26:F4:F9:4C:0B:FA:2D:29
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138362e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.186.0/24
Signature Algorithm: sha256WithRSAEncryption
21:20:24:97:56:42:dd:ec:e7:a0:50:d6:3f:5a:28:69:e8:7f:
de:d8:8c:65:f6:95:54:46:48:79:70:46:03:09:9d:6b:f9:c7:
a8:ae:3e:53:eb:62:29:f6:8d:aa:a4:09:a9:63:11:e6:c6:b2:
9c:89:f7:e0:a7:80:65:80:a2:e7:f5:c2:43:09:23:78:12:b9:
09:e3:3d:b4:4b:cf:a2:e0:de:b5:89:d7:bd:44:a9:7d:cb:6b:
0c:c1:12:be:db:95:ae:38:1c:0a:dc:8b:78:f5:9c:ef:41:9e:
5c:a4:93:5f:08:05:1b:4f:ec:99:34:99:7e:5d:88:f5:a6:ea:
5d:58:ac:47:cd:20:22:18:15:63:08:92:86:63:ca:b6:ba:c1:
37:54:7c:fd:e3:7b:b4:9d:56:98:78:d4:02:6d:77:be:d6:46:
78:0d:85:29:05:94:c1:bb:85:ec:6d:53:f5:91:19:3d:f4:ce:
79:fe:d8:d4:31:de:d4:fa:38:fa:e5:f3:ef:ef:dd:51:93:d1:
72:76:98:47:d0:86:06:1e:2a:62:1b:36:ee:52:a7:c7:ed:a2:
f1:ea:db:08:24:94:db:53:ad:d0:f0:a9:8b:9b:32:54:2f:14:
0b:36:5e:49:ef:e2:c8:1f:2c:32:90:5c:54:20:b2:8a:68:93:
73:aa:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org