Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139302e302f32342d3234203d3e203630373231.roa
File: 39332e3132372e3139302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: lZDD7Y0bReZaDJ0kyKqg3V6lsWf7rx3qPaB4KkucGeU=
Subject key identifier: 8D:77:8A:CE:DD:7B:15:43:12:66:A7:F9:3E:12:28:8F:C7:85:04:FD
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 0C81A4BCD750A87ECC08BC33E569ED5C53CACAE0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139302e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:12 +0000
ROA not before: Fri 20 Jan 2023 06:21:12 +0000
ROA not after: Fri 19 Jan 2024 06:26:12 +0000
asID: 60721
IP address blocks: 93.127.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:81:a4:bc:d7:50:a8:7e:cc:08:bc:33:e5:69:ed:5c:53:ca:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:12 2023 GMT
Not After : Jan 19 06:26:12 2024 GMT
Subject: CN=8D778ACEDD7B15431266A7F93E12288FC78504FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:47:d7:ac:98:76:d8:db:0a:f9:dc:85:7a:
1e:b8:e1:0a:b3:6d:22:5f:cd:72:31:6e:a6:a8:10:
34:47:35:67:f3:bd:3b:ae:9e:8c:a8:55:ae:aa:13:
e5:58:79:33:3a:c5:db:41:d9:e2:e8:a8:0e:2a:66:
6f:22:f5:29:6f:28:3e:a7:9e:ae:5f:6d:fb:02:9e:
f4:dd:84:5d:60:6c:18:e1:2e:a8:8a:ba:72:4c:ba:
b1:7d:bd:44:c3:ea:56:b2:e3:01:5b:b9:35:df:77:
df:c6:c2:1f:6e:63:a0:b0:b3:90:2c:7a:5f:f4:6c:
1c:a2:4f:d3:9e:55:4d:84:d3:ac:6c:e4:e4:12:c0:
fd:37:13:24:b7:e3:0c:70:9a:bf:06:c7:83:ac:d9:
b7:c7:37:d8:70:1b:6a:39:37:dd:2d:ae:01:3b:20:
c4:12:b2:d6:07:77:78:43:a8:22:07:87:f0:fc:46:
85:49:b4:7a:92:b8:14:4f:c6:1a:b6:41:92:7b:1b:
27:05:e3:92:d9:62:27:6d:d6:83:8c:80:2f:94:d2:
41:17:46:ca:3e:0a:91:02:67:7b:05:54:94:37:af:
9d:f4:ab:90:d4:2c:66:a8:68:ed:6f:58:8d:f0:86:
38:f9:8d:d5:94:47:a8:4a:9a:fc:ac:35:e2:e9:0b:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:8A:CE:DD:7B:15:43:12:66:A7:F9:3E:12:28:8F:C7:85:04:FD
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139302e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.190.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a7:16:b8:a7:87:37:f4:46:13:0b:e4:b6:24:44:8e:7b:45:
90:fa:2d:9f:24:db:98:d5:e4:ea:3c:2d:f2:8f:31:7a:ba:1f:
ee:e6:82:c4:a2:f3:72:15:11:83:9d:6e:b9:08:21:db:95:02:
79:0a:50:32:26:89:a9:34:38:51:0c:cb:a3:c6:ad:f0:d7:f6:
be:b2:84:75:f4:13:7e:37:80:7a:d1:4b:f0:a3:39:23:0f:26:
f0:ab:cb:2c:14:32:58:1c:0c:92:81:52:de:ea:3f:da:82:c2:
87:b4:2c:a5:c7:9a:00:b7:68:6f:ca:5b:e9:aa:50:20:7d:08:
fd:e2:f9:b7:68:ad:30:62:bb:5f:7a:f4:50:a5:a4:74:fe:3f:
0d:bf:47:96:ea:2f:a4:01:92:e4:df:e0:f5:50:e2:c6:8b:97:
4d:4f:ed:0d:40:52:13:3c:f1:00:75:92:ff:59:20:f3:d3:50:
f2:1e:7d:8d:b6:c8:95:14:b1:da:ef:25:5a:28:2b:84:d8:86:
66:41:e0:ef:6f:f2:e8:85:b2:5a:37:0e:bb:05:d9:9d:62:f7:
af:ec:71:59:fa:6d:9a:84:ac:e2:4e:78:0d:76:d0:ab:1d:ca:
f0:70:13:8c:48:03:b5:2d:ef:3f:b9:a3:ed:5f:40:d1:b6:cc:
18:a4:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:32 2025 by rpki-client