Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e203134343435.roa
File: 39332e3132372e3138392e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: uiVZvTYHUVxvxiUOA1p2U6XFZqIWghWKIcrAEV7djDY=
Subject key identifier: B2:18:63:32:33:CD:79:F1:BA:44:ED:52:70:AE:3C:65:D6:21:02:F3
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6B943D4305888C3DC11BA8A97F5858BE082E1733
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e203134343435.roa
Signing time: Wed 22 Mar 2023 08:29:13 +0000
ROA not before: Wed 22 Mar 2023 08:24:13 +0000
ROA not after: Wed 20 Mar 2024 08:29:13 +0000
asID: 14445
IP address blocks: 93.127.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:94:3d:43:05:88:8c:3d:c1:1b:a8:a9:7f:58:58:be:08:2e:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 22 08:24:13 2023 GMT
Not After : Mar 20 08:29:13 2024 GMT
Subject: CN=B218633233CD79F1BA44ED5270AE3C65D62102F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:b5:88:35:58:2a:90:31:b7:8e:a1:5a:f6:
70:91:40:af:65:39:c4:df:5d:ec:eb:59:e7:25:ff:
b6:7a:a4:1b:d3:44:61:52:ed:d3:ad:4f:03:d7:3d:
d0:26:82:53:ee:48:f3:c5:f9:ee:63:77:bd:48:3f:
1b:de:7d:29:47:c9:d0:de:2a:93:ad:da:33:e4:82:
6e:af:53:0f:94:ef:e3:47:2d:52:e2:83:52:34:c9:
ad:05:a1:00:bf:57:6a:15:58:6b:32:2c:ef:85:ab:
da:08:4c:50:5c:b5:1e:8f:2b:1c:91:a5:5c:8a:3d:
77:47:a4:de:c1:d0:6f:0a:3f:12:73:cd:21:4e:5a:
03:2a:33:d6:e0:4d:b3:cb:87:a8:16:82:d0:ea:ae:
a6:fc:d9:7c:b2:dd:9b:2c:3e:55:a5:77:a9:5a:03:
37:ec:84:f7:ba:d9:a8:0d:8f:a4:7c:7a:4f:1b:00:
d8:b1:c4:51:04:1c:c8:c6:c6:c3:a9:03:86:28:20:
57:56:04:f6:d0:9a:ff:06:56:1c:39:f1:6c:b2:38:
91:97:9d:3e:ff:0a:56:76:02:b6:c8:4a:a8:69:e4:
49:45:2b:6d:71:1c:19:ad:e0:99:71:29:a8:c2:41:
ad:74:53:88:13:ba:4e:88:6a:60:d7:0d:dc:fb:2a:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:63:32:33:CD:79:F1:BA:44:ED:52:70:AE:3C:65:D6:21:02:F3
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9b:db:76:fa:19:33:f9:a9:bb:da:f9:fb:7a:39:0a:59:91:
00:4c:a8:20:07:ec:19:8d:1f:ee:63:13:da:90:b8:09:45:ba:
33:ea:5d:90:01:ec:77:e7:9e:e0:82:16:76:8f:b0:d0:a0:c2:
eb:d5:9b:f6:94:47:05:78:7a:0a:18:39:7d:cf:da:87:01:3e:
77:9b:52:41:5c:47:aa:bf:bf:8c:cb:d5:5d:a0:be:71:1a:d6:
79:09:f4:df:e8:bb:23:8e:6f:3c:e5:79:c3:5d:75:05:e7:9a:
46:ec:1f:4b:a0:e6:56:9b:93:03:79:d2:10:0d:ad:77:1f:c8:
3b:9a:d4:10:21:e5:65:45:3d:8b:66:67:e9:13:cb:26:86:2e:
0c:46:c8:20:cc:8e:df:a1:3a:8e:68:eb:a4:b5:2f:5e:5b:12:
a1:0e:17:ae:f0:f5:52:f1:62:63:96:92:a8:f5:fe:55:72:cf:
f9:35:ba:4a:f3:dd:f3:35:68:d4:50:15:69:9d:ac:4f:20:c0:
41:90:6d:21:6e:04:7e:41:8a:89:a2:1e:c3:d1:09:48:50:2c:
c3:92:05:b2:7f:b5:67:ee:68:46:d8:29:f6:23:71:ed:59:79:
7c:a2:cb:93:38:82:b3:76:bf:fd:f8:26:2d:f2:cc:1b:47:24:
f0:79:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org