Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20323034383433.roa
File: 39332e3132372e3139322e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: eB/UTCY6ZOWzC3oksVo+tZpDhh3lpz67cdDnLTw5evY=
Subject key identifier: B5:D6:6C:EC:58:05:C3:9B:85:17:75:1C:C0:14:66:B0:FE:16:F4:42
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 10ADECD529F2CDF87338EAA5A8921DAA0088E98D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20323034383433.roa
Signing time: Sat 01 Jul 2023 14:16:29 +0000
ROA not before: Sat 01 Jul 2023 14:11:29 +0000
ROA not after: Sat 29 Jun 2024 14:16:29 +0000
asID: 204843
IP address blocks: 93.127.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ad:ec:d5:29:f2:cd:f8:73:38:ea:a5:a8:92:1d:aa:00:88:e9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 1 14:11:29 2023 GMT
Not After : Jun 29 14:16:29 2024 GMT
Subject: CN=B5D66CEC5805C39B8517751CC01466B0FE16F442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:8d:7c:ac:44:9c:93:9e:d4:a9:e2:10:0b:
27:f0:f8:fa:62:f9:5b:21:35:45:76:1f:fd:75:02:
7e:0e:d5:4f:4b:3e:5f:d9:38:9b:65:77:ba:02:3d:
24:29:e0:0f:4b:b9:d1:ca:34:fa:cd:57:d5:30:3d:
e3:eb:a7:86:d4:dc:3e:fa:aa:93:2e:5d:1a:6a:25:
64:5a:88:db:00:7e:9f:57:eb:2a:14:05:9e:f1:9f:
a3:0e:87:31:2d:27:e9:39:29:73:4f:4d:4e:ce:50:
ef:94:fb:47:e1:84:d2:e2:1f:98:69:84:d5:a6:c3:
91:d6:d7:79:08:19:fd:06:33:68:5b:02:25:90:9d:
b7:b2:7f:8d:5f:b8:9f:09:79:61:ca:fc:1c:ad:88:
48:75:f2:b3:fa:d3:58:01:de:3b:7a:b2:d0:77:d9:
ad:3f:c3:4d:36:db:57:06:51:c3:1b:8c:61:8f:8c:
cf:09:b6:be:6a:7c:54:80:fe:b5:f5:d7:da:b0:18:
6d:fe:94:40:17:ac:50:a9:2a:70:29:f3:d9:e6:dc:
56:55:88:68:47:57:93:f2:01:21:cf:8e:0e:a8:3f:
2e:8d:1a:14:9f:12:fe:ca:a4:58:ca:28:65:ca:58:
11:d1:30:a6:2e:16:6e:03:99:b6:3e:7e:b5:7e:da:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:6C:EC:58:05:C3:9B:85:17:75:1C:C0:14:66:B0:FE:16:F4:42
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139322e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.192.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ae:08:90:82:1f:99:d3:dd:02:b3:8d:b3:3c:d0:df:6b:4d:
07:32:b9:38:3e:1f:fb:6c:6e:a4:e4:41:15:e1:db:ed:62:75:
90:5c:35:44:e8:b1:f2:6f:bd:62:9d:54:9b:04:2f:61:03:9a:
95:b6:d1:58:97:0e:db:43:0d:4c:d3:86:02:3c:e4:c9:c6:68:
0c:b8:7e:cd:d6:c1:c6:9b:47:64:e5:d6:9f:0e:28:f1:5f:57:
88:67:84:75:50:72:38:2d:59:3b:c1:9b:87:b3:3c:78:7a:07:
17:88:86:d5:02:5b:17:1f:6f:ce:70:10:b6:a8:a1:63:d5:7b:
5d:24:7b:9d:e0:83:20:94:e4:94:3b:60:3a:ec:ca:42:2c:4b:
b6:76:51:e4:d3:d6:f2:27:fe:ed:27:2a:1a:ba:00:0a:76:ff:
e1:92:d3:4c:3b:8c:e0:cc:5c:b3:41:13:3c:7a:03:4a:95:83:
e7:e6:6a:08:89:39:33:4f:b4:d4:21:df:40:2c:6b:b3:78:b7:
fb:94:bf:bc:09:e0:5f:ea:50:1f:a3:9b:47:00:3e:12:90:e7:
cb:f6:99:12:d4:a2:94:41:8f:40:24:6f:c0:31:53:3b:fb:c6:
b9:6f:c2:d1:7f:ac:d9:84:e1:cb:b3:aa:4a:7e:01:d3:c0:cc:
b0:26:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org