Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e203439393939.roa
File: 39332e3132372e3139352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: Spk4og/21RqsGMtTTSc5pUgRO3MJ4HkvfzTUzVTK+SI=
Subject key identifier: 78:F8:14:F9:0F:2A:E5:78:3E:0A:B5:0E:BA:E5:CC:48:27:56:F5:DF
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 20F3D80EBEDD382AD2A6B6CE882E863B316F280F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e203439393939.roa
Signing time: Sat 28 Jan 2023 22:23:00 +0000
ROA not before: Sat 28 Jan 2023 22:18:00 +0000
ROA not after: Sat 27 Jan 2024 22:23:00 +0000
asID: 49999
IP address blocks: 93.127.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f3:d8:0e:be:dd:38:2a:d2:a6:b6:ce:88:2e:86:3b:31:6f:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 28 22:18:00 2023 GMT
Not After : Jan 27 22:23:00 2024 GMT
Subject: CN=78F814F90F2AE5783E0AB50EBAE5CC482756F5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:04:c8:79:88:77:cc:c9:81:cf:db:8e:dc:
ba:7b:a8:87:f5:ca:4d:c2:34:53:a5:10:c0:42:5c:
e1:0c:fc:9e:b3:44:cc:4f:6d:0a:de:1d:1a:70:85:
38:ce:39:5d:4d:d7:9a:c8:24:3c:ac:35:b0:c5:ea:
48:a9:2c:8b:1f:a5:29:89:7e:84:d1:e6:4f:a1:6f:
7e:19:eb:db:0d:d7:bb:aa:70:b6:e1:6f:bc:59:6b:
d9:5e:69:cd:3b:ab:3d:17:8c:53:9a:d4:96:97:60:
4d:95:bf:8d:2a:64:43:23:84:a9:3c:a1:a2:82:3d:
85:b3:ff:6d:56:a9:67:62:88:ab:21:0c:50:35:71:
69:f5:2c:29:19:62:70:80:dd:cf:a9:a0:ff:09:89:
77:ea:d4:9f:d3:ca:8f:ee:57:37:c6:db:d2:de:5f:
92:9b:4e:dd:07:cb:61:3c:73:bc:c6:ae:9b:c4:27:
70:b9:36:72:1f:21:c3:28:fd:70:5e:8f:3b:32:1f:
8e:2f:d7:8e:42:81:fe:6f:1e:33:e5:3c:6f:4c:1e:
97:f6:4e:74:52:e1:bd:97:52:18:21:0a:6a:8b:da:
d4:6b:4c:7f:e4:3c:f4:fb:48:f1:8e:e7:ae:3e:31:
52:73:ea:9a:1d:3c:0b:4d:50:f5:65:b1:53:bf:2d:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:14:F9:0F:2A:E5:78:3E:0A:B5:0E:BA:E5:CC:48:27:56:F5:DF
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a3:68:b4:34:d0:e2:9f:e2:f5:70:6a:b8:0d:f9:c3:8e:ee:
62:5b:be:27:ff:30:2c:a4:dc:68:89:b3:36:4a:4f:f8:4b:1a:
c7:77:ea:ff:c8:93:f4:6a:14:b8:f9:45:bc:a6:17:e2:44:c9:
a1:a3:a5:92:14:cd:28:17:50:b4:1f:85:66:3a:61:c3:5a:b8:
85:23:3f:00:2c:91:15:6f:87:d1:9e:38:a5:e9:cc:85:12:82:
5b:a6:d5:82:9a:33:51:3e:cc:af:72:48:91:df:3a:4f:65:82:
57:b7:cb:97:47:4a:4c:24:59:12:54:cb:02:9e:e2:a7:c2:1f:
86:56:fc:df:cf:65:4f:50:bb:5d:42:a0:93:aa:fc:f4:c6:f5:
5c:c4:56:28:7c:13:f9:b1:c1:f9:cf:c8:a8:7c:9f:b8:4d:73:
7b:93:d5:81:1a:4a:80:d3:f1:19:0b:e7:7a:7e:b6:e3:48:6d:
a4:b1:38:2d:18:d3:03:03:28:59:0e:63:c8:48:d5:1c:4a:43:
71:45:9c:5b:a6:27:b9:a7:81:1a:d9:70:35:ec:b9:0c:4b:86:
6c:69:65:58:e0:ce:8d:07:54:84:fd:f0:5e:80:60:53:51:6f:
ac:33:3b:66:be:0c:a2:09:cc:07:15:d8:1b:51:15:c1:9b:32:
69:6e:0b:38
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIPPYDr7dOCrSprbOiC6GOzFvKA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjgyMjE4MDBaFw0yNDAxMjcyMjIzMDBaMDMxMTAvBgNV
BAMTKDc4RjgxNEY5MEYyQUU1NzgzRTBBQjUwRUJBRTVDQzQ4Mjc1NkY1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBQTIeYh3zMmBz9uO3Lp7qIf1
yk3CNFOlEMBCXOEM/J6zRMxPbQreHRpwhTjOOV1N15rIJDysNbDF6kipLIsfpSmJ
foTR5k+hb34Z69sN17uqcLbhb7xZa9leac07qz0XjFOa1JaXYE2Vv40qZEMjhKk8
oaKCPYWz/21WqWdiiKshDFA1cWn1LCkZYnCA3c+poP8JiXfq1J/Tyo/uVzfG29Le
X5KbTt0Hy2E8c7zGrpvEJ3C5NnIfIcMo/XBejzsyH44v145Cgf5vHjPlPG9MHpf2
TnRS4b2XUhghCmqL2tRrTH/kPPT7SPGO564+MVJz6podPAtNUPVlsVO/LdEJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUePgU+Q8q5Xg+CrUOuuXMSCdW9d8wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM5
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XX/DMA0GCSqGSIb3DQEBCwUAA4IBAQA/o2i0NNDin+L1cGq4DfnDju5iW74n/zAs
pNxoibM2Sk/4SxrHd+r/yJP0ahS4+UW8phfiRMmho6WSFM0oF1C0H4VmOmHDWriF
Iz8ALJEVb4fRnjil6cyFEoJbptWCmjNRPsyvckiR3zpPZYJXt8uXR0pMJFkSVMsC
nuKnwh+GVvzfz2VPULtdQqCTqvz0xvVcxFYofBP5scH5z8iofJ+4TXN7k9WBGkqA
0/EZC+d6frbjSG2ksTgtGNMDAyhZDmPISNUcSkNxRZxbpie5p4Ea2XA17LkMS4Zs
aWVY4M6NB1SE/fBegGBTUW+sMztmvgyiCcwHFdgbURXBmzJpbgs4
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org