Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 90/QEA8oyq9vttX7egafs5xGGDNe/zqmGBL4QPc2gko=
Subject key identifier: 32:22:D0:BA:9F:03:22:46:95:1D:A8:55:80:0E:0C:2A:4F:DE:5C:F1
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 47CBC1B384C28BE13D55BBFDEA5AEDB838553959
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 00:00:18 +0000
ROA not before: Thu 30 Mar 2023 23:55:18 +0000
ROA not after: Fri 29 Mar 2024 00:00:18 +0000
asID: 834
IP address blocks: 93.127.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cb:c1:b3:84:c2:8b:e1:3d:55:bb:fd:ea:5a:ed:b8:38:55:39:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 23:55:18 2023 GMT
Not After : Mar 29 00:00:18 2024 GMT
Subject: CN=3222D0BA9F032246951DA855800E0C2A4FDE5CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:26:0a:4e:6b:22:ba:12:e7:84:7d:50:49:
d7:e6:c8:b6:07:cd:e3:ba:05:0d:17:64:1a:21:83:
1e:7e:53:cd:e8:41:83:0e:92:0b:a7:c9:80:5d:85:
4f:31:b2:01:f9:a1:d1:0f:c8:d7:ba:81:ed:6b:f5:
a9:bc:9d:84:03:38:5c:b7:fd:f2:10:99:c8:71:ce:
4f:b0:2e:1d:44:57:0b:c9:47:55:45:e9:cf:98:51:
fe:c7:83:62:21:59:17:5b:4b:54:99:02:e9:f2:94:
11:d7:12:c7:e5:f5:56:33:16:8f:fe:d2:40:6d:93:
19:44:6d:5b:c2:05:2c:2b:a9:7d:01:8c:0d:fe:8b:
93:3e:be:d6:7e:89:f5:09:e5:3b:ba:6a:eb:88:d6:
50:1e:9b:23:b3:38:f2:d5:95:2a:9d:68:f4:6d:2e:
37:66:3a:5d:47:f7:a9:17:15:09:09:d5:a7:a9:a3:
0b:d0:cf:f2:44:e7:cd:30:8b:9c:d5:de:63:2d:b2:
f2:3e:19:0b:8b:ab:7d:3b:e1:97:cb:48:a4:51:53:
0d:99:b8:79:31:6e:0e:ac:0f:ea:99:63:9f:27:17:
4a:9d:6b:3a:90:ec:de:d1:61:88:c6:e3:e4:49:35:
cf:32:be:59:6e:77:15:ca:56:0a:d9:82:c3:78:85:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:22:D0:BA:9F:03:22:46:95:1D:A8:55:80:0E:0C:2A:4F:DE:5C:F1
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8d:2d:9f:db:3d:38:37:ea:fe:61:e5:5a:91:05:4e:60:9f:
80:91:d9:28:c0:26:c1:6f:2c:83:9f:bb:ba:8c:e6:a4:e4:ef:
b1:27:82:55:63:34:3d:26:c2:ba:6a:45:0e:3a:c6:2f:17:39:
36:4a:46:da:24:fc:8c:48:66:2b:d1:1e:0c:e1:e1:11:44:f9:
37:99:35:38:3b:6f:92:b7:37:58:31:6f:ec:b8:ce:a5:2f:33:
ea:01:5b:1e:23:53:29:ac:07:fb:52:46:34:da:9e:6d:9d:de:
a1:63:72:9e:52:84:04:ae:dc:ab:2a:e1:08:63:bc:11:1b:68:
5b:d0:6f:57:da:f4:95:dd:95:02:51:d5:18:7b:e0:b7:49:5a:
83:47:a1:1b:64:d2:80:08:38:90:00:77:d0:44:5d:8d:07:dc:
70:14:59:3e:0b:86:eb:16:33:32:4f:a1:cd:02:ee:7f:e2:5f:
1a:2e:b3:57:eb:eb:3b:66:b2:a1:ce:2c:1d:c0:48:02:b3:29:
b3:ff:ce:76:e0:6f:ba:4c:f8:a9:ed:0c:f0:41:d9:a7:22:bd:
c5:c2:c3:87:1c:e7:b4:9a:e1:4e:b8:71:d2:b7:5c:04:52:77:
4c:ca:af:25:bc:91:45:80:72:9c:40:13:09:4b:be:8c:f2:c0:
ed:03:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org