Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kWF6+JEOG2axYb6T8cuLBPdRT6Gvtr/f0al/FGessEA=
Subject key identifier: 3E:B2:14:D3:20:BA:9E:E6:C5:9F:63:07:24:04:3F:3D:B4:F1:84:21
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7E4D1762C7650104EC3DFF0B5021C7391B524816
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e20383334.roa
Signing time: Fri 14 Apr 2023 14:30:05 +0000
ROA not before: Fri 14 Apr 2023 14:25:05 +0000
ROA not after: Fri 12 Apr 2024 14:30:05 +0000
asID: 834
IP address blocks: 93.127.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4d:17:62:c7:65:01:04:ec:3d:ff:0b:50:21:c7:39:1b:52:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 14 14:25:05 2023 GMT
Not After : Apr 12 14:30:05 2024 GMT
Subject: CN=3EB214D320BA9EE6C59F630724043F3DB4F18421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:59:9a:79:ee:0e:14:f5:1f:cc:70:b1:4e:
a5:c8:68:66:b5:28:36:82:0b:ab:d8:dc:ff:d2:41:
fc:19:45:c7:26:16:9a:36:d7:a2:22:25:a9:9e:8e:
42:e3:73:d2:d6:8f:77:20:34:56:9f:c0:21:1b:9e:
f7:c2:5f:fe:23:d3:d3:4c:3d:88:a3:42:70:c7:36:
c3:75:c3:eb:9b:9f:0e:8c:a7:ec:76:42:9a:90:ec:
6a:e8:01:8d:32:d8:c8:f2:8e:ce:a0:3a:39:f2:a0:
f9:5c:ff:c1:32:e5:85:7a:f5:48:e9:b0:90:1d:08:
23:9a:4a:d6:b1:48:f1:b0:63:c7:b6:74:2e:53:25:
47:2b:36:0d:24:24:ee:ba:f0:b2:9d:ab:b7:ee:9a:
8b:8c:b6:c6:b0:58:c6:d9:9d:8f:c6:88:78:5c:9f:
75:8b:8b:df:cb:49:40:61:01:41:9c:58:a0:b6:36:
6c:12:a1:13:ee:b0:30:66:c1:bd:67:b0:e8:8c:0e:
1f:5d:f4:59:3f:4c:09:e8:59:f0:88:32:19:4e:f9:
22:e5:7f:bf:36:dd:73:da:93:56:11:15:cb:e8:75:
d5:34:22:26:8d:9c:e1:c3:e6:d5:22:c5:7d:0b:44:
17:6d:32:a7:5b:4d:a8:18:10:e4:ba:ae:38:54:ca:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:14:D3:20:BA:9E:E6:C5:9F:63:07:24:04:3F:3D:B4:F1:84:21
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.189.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e5:12:79:ad:7b:e5:fc:84:74:55:e0:0f:1e:39:f6:78:12:
dc:d6:96:a3:52:51:1a:35:86:76:4e:0d:64:12:99:c5:96:2d:
31:9b:54:0a:2d:f9:75:eb:94:d0:cc:3e:28:1b:ab:d6:03:77:
70:57:9e:3c:9c:ae:0a:fc:5e:64:49:4f:2f:32:ad:ab:cd:ba:
60:51:1a:5d:dd:01:f1:2b:b3:55:08:fe:cf:11:61:42:cd:bf:
32:52:10:87:14:c0:76:97:29:90:83:1d:07:fd:b1:d6:f9:b8:
f9:5e:66:78:1a:f5:fd:ac:e2:d8:2e:66:9b:fb:0e:fe:ba:55:
85:5b:90:26:04:eb:58:56:0e:cc:7f:62:47:9c:53:ac:2e:bc:
f8:5d:89:de:17:54:aa:81:70:6e:ea:82:a8:56:4b:b8:97:b1:
e0:3d:7b:50:02:f0:e8:c7:99:07:4a:a7:4d:d2:1b:05:6b:a2:
ef:53:d8:aa:8a:19:2b:5e:e1:cc:4a:91:ca:01:76:29:e3:53:
72:a6:de:5e:7d:c7:c2:f7:10:f3:6b:a1:6f:b9:fb:4e:8c:24:
ef:4d:b8:7d:82:e4:42:a1:65:a2:bd:00:f3:fb:87:e7:06:eb:
01:f1:86:72:16:fe:99:1d:8c:2a:53:3d:51:50:5a:9f:02:75:
57:f1:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:38 2025 by rpki-client