Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: I1g8imq1BNg2HHsyu7cjJrDS0+vT5ByafTZpHdE0QjE=
Subject key identifier: A3:CC:FB:02:06:08:31:F6:AB:43:D3:7A:C8:E2:34:F9:ED:D8:D9:F7
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 2011323A08FBA66ACF25C924D70A58A2047B2892
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Aug 2023 11:00:15 +0000
ROA not before: Mon 07 Aug 2023 10:55:15 +0000
ROA not after: Mon 05 Aug 2024 11:00:15 +0000
asID: 834
IP address blocks: 93.127.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:11:32:3a:08:fb:a6:6a:cf:25:c9:24:d7:0a:58:a2:04:7b:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Aug 7 10:55:15 2023 GMT
Not After : Aug 5 11:00:15 2024 GMT
Subject: CN=A3CCFB02060831F6AB43D37AC8E234F9EDD8D9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:b8:dd:c7:81:f2:5f:c7:a9:07:00:3a:32:
fa:c3:75:79:29:b4:55:dd:fa:63:c9:5c:a1:73:b4:
be:fe:11:7c:0f:de:6d:11:1c:de:77:31:69:33:cf:
56:9c:86:66:df:1a:65:60:6e:4c:cf:5d:40:6d:8a:
e9:88:20:24:bf:9c:10:41:08:61:60:ed:12:a0:4b:
ac:34:6f:bf:f4:01:02:cc:27:e4:73:38:d4:19:51:
17:bf:ce:00:d0:5b:a9:37:a1:e0:8f:f7:89:00:bf:
75:ea:b6:e3:ce:a5:8e:3c:52:38:eb:fe:5a:7c:0e:
95:b6:b5:aa:17:14:65:5e:45:a8:4c:b0:84:4f:33:
63:77:7a:65:59:fe:ef:af:31:fa:c8:15:32:55:b1:
a3:13:7d:ac:89:80:52:d0:e0:d7:5b:f8:54:f4:75:
83:07:32:7d:1d:3a:5f:6d:b0:56:13:96:2c:62:03:
c9:f8:d5:a2:b6:9d:f0:0a:65:6c:d3:1c:14:34:7c:
9d:fd:39:74:2e:dd:d3:f3:84:41:37:88:03:a0:20:
29:8b:80:37:8d:24:ea:9e:39:54:c0:7c:b0:1c:8b:
e7:c9:d9:3e:ba:80:ec:d8:32:eb:e8:95:55:86:7f:
74:42:72:84:f5:fb:90:95:94:21:2d:bf:a5:e7:53:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:FB:02:06:08:31:F6:AB:43:D3:7A:C8:E2:34:F9:ED:D8:D9:F7
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c9:3f:9d:99:33:51:c1:ea:f4:03:ba:99:0b:31:e2:f5:07:
ed:e1:d2:e2:37:a9:60:0e:7d:71:06:74:8c:bf:03:a7:cf:c4:
2d:8a:5e:70:24:3c:12:bd:40:24:20:6b:9a:9c:d7:37:82:92:
b1:89:7f:26:c3:58:69:9c:19:13:05:66:ad:c5:fe:db:33:6b:
c0:10:23:0f:e3:8b:c1:0b:7b:8a:37:1e:09:b8:c1:d0:33:51:
cb:cc:05:14:d6:d8:d5:fd:c5:83:18:a0:04:0d:04:5f:ce:9e:
b4:1a:eb:fa:1b:68:79:fa:43:29:b0:fa:16:23:fc:67:41:9f:
32:c0:f7:6a:64:e1:d0:77:15:19:af:27:88:0f:7e:c2:e3:95:
10:92:26:ad:e7:9c:3b:a9:50:2f:bc:51:18:d8:67:9e:76:f8:
ca:a2:5e:ac:24:41:0a:9f:67:85:91:4f:77:ff:8a:a1:2b:d9:
05:5d:e7:69:6b:a4:26:df:69:f5:f7:27:20:3d:cd:c9:6c:6b:
3f:8b:8a:20:55:3a:0a:b8:15:da:36:6c:1f:5f:ed:cd:ad:6a:
fe:96:78:50:58:eb:d0:ef:45:55:35:6c:a5:ef:86:0f:1c:c4:
c6:01:38:18:a5:0d:1f:fd:37:76:56:c4:d1:0f:3e:08:26:95:
0e:94:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org