Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e20383334.roa
File: 39332e3132372e3139362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: QdeMQu9hBYJrpdIkUm3eRBORzZ5ghtEz06KY0lw8s3k=
Subject key identifier: 04:EF:BC:A8:B7:E5:04:5D:E3:8A:3F:2F:25:D0:CB:0A:AB:B0:DE:15
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 1203FC9D609CEAEBEA6F65E455C39F75AA11FDCB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e20383334.roa
Signing time: Thu 11 May 2023 22:00:04 +0000
ROA not before: Thu 11 May 2023 21:55:04 +0000
ROA not after: Thu 09 May 2024 22:00:04 +0000
asID: 834
IP address blocks: 93.127.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:03:fc:9d:60:9c:ea:eb:ea:6f:65:e4:55:c3:9f:75:aa:11:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 11 21:55:04 2023 GMT
Not After : May 9 22:00:04 2024 GMT
Subject: CN=04EFBCA8B7E5045DE38A3F2F25D0CB0AABB0DE15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:1a:6a:cb:59:72:6f:c5:08:78:5d:9c:e6:
53:71:53:65:01:a7:3b:b6:5e:67:9c:91:aa:13:5f:
fa:c0:46:27:00:c3:99:d6:d7:b3:41:e7:66:15:56:
84:0c:7a:11:ed:66:b7:3b:92:96:47:96:76:23:ed:
da:c0:b9:d3:f3:ab:6f:b7:f2:85:0d:32:3a:2b:d3:
7b:e5:36:28:a3:fe:cd:c5:0f:66:bc:67:fd:2a:64:
87:8a:82:14:29:4f:3a:12:28:20:26:fe:f7:9a:b5:
d8:00:7b:fa:cd:9a:d5:e1:5f:38:02:c5:d8:79:98:
7e:d9:a8:e1:d1:8f:c1:ea:e5:76:62:eb:53:55:e3:
e6:a7:88:d7:fb:ab:b5:1a:4c:24:ce:4f:3d:72:ea:
ad:ad:57:63:1f:13:ab:56:4d:09:85:21:c2:7d:66:
82:63:d3:fd:a2:33:92:48:53:17:7c:98:f8:c9:32:
40:e3:75:f3:af:69:fb:79:fa:0b:aa:f6:6e:96:fd:
b1:41:21:23:53:74:23:9c:10:43:17:5d:01:69:33:
89:9c:52:02:86:98:a4:3c:fd:a6:f6:c8:af:83:d5:
77:f7:90:3d:ae:4d:2a:97:4e:db:1e:b0:89:f6:79:
96:7b:80:15:f6:ca:0b:23:7b:7f:db:23:ff:7f:7a:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:BC:A8:B7:E5:04:5D:E3:8A:3F:2F:25:D0:CB:0A:AB:B0:DE:15
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.196.0/22
Signature Algorithm: sha256WithRSAEncryption
21:6a:6d:d1:5a:26:2b:82:72:cb:50:73:e0:77:d1:cc:15:0f:
65:0d:00:70:c1:61:c0:d2:05:5c:75:23:b6:67:24:42:c8:f6:
3b:13:0c:f5:ba:87:07:43:1e:ee:bd:fd:a8:8c:d3:63:a3:8f:
87:63:dc:ce:b1:26:13:bb:55:26:85:2c:05:27:b3:c2:a7:f0:
e1:d2:af:08:17:31:98:a7:5a:77:bc:63:21:8b:63:eb:04:8f:
08:ed:42:93:d8:fe:e4:96:64:d5:80:8e:0b:49:c2:e1:b0:6a:
a5:c5:0a:46:cb:a8:8b:22:a8:c5:56:2c:f4:aa:19:99:00:18:
8f:b9:8b:9f:fd:dd:03:32:29:f7:de:38:2c:c5:30:96:7a:ad:
4d:77:d5:89:c0:88:9b:e7:1b:bb:46:3d:4e:46:0f:e2:a6:d5:
89:17:2a:dd:ee:70:53:77:4b:c2:41:49:10:0a:28:d4:8d:2c:
08:ed:15:db:25:d7:5e:90:6e:86:87:aa:1d:fd:be:64:29:08:
39:89:8c:9a:15:1f:aa:33:79:64:0a:ec:3b:fc:ea:b6:94:37:
e7:f4:1b:25:61:b6:2f:4d:ab:6b:f2:22:14:88:ca:51:df:cd:
08:c1:9d:9e:22:4e:82:25:2c:b5:f1:aa:11:58:53:e3:cc:a4:
6a:fa:7d:16
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUEgP8nWCc6uvqb2XkVcOfdaoR/cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA1MTEyMTU1MDRaFw0yNDA1MDkyMjAwMDRaMDMxMTAvBgNV
BAMTKDA0RUZCQ0E4QjdFNTA0NURFMzhBM0YyRjI1RDBDQjBBQUJCMERFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu8xpqy1lyb8UIeF2c5lNxU2UB
pzu2XmeckaoTX/rARicAw5nW17NB52YVVoQMehHtZrc7kpZHlnYj7drAudPzq2+3
8oUNMjor03vlNiij/s3FD2a8Z/0qZIeKghQpTzoSKCAm/veatdgAe/rNmtXhXzgC
xdh5mH7ZqOHRj8Hq5XZi61NV4+aniNf7q7UaTCTOTz1y6q2tV2MfE6tWTQmFIcJ9
ZoJj0/2iM5JIUxd8mPjJMkDjdfOvaft5+guq9m6W/bFBISNTdCOcEEMXXQFpM4mc
UgKGmKQ8/ab2yK+D1Xf3kD2uTSqXTtsesIn2eZZ7gBX2ygsje3/bI/9/emqBAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUBO+8qLflBF3jij8vJdDLCquw3hUwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTM5
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJdf8Qw
DQYJKoZIhvcNAQELBQADggEBACFqbdFaJiuCcstQc+B30cwVD2UNAHDBYcDSBVx1
I7ZnJELI9jsTDPW6hwdDHu69/aiM02Ojj4dj3M6xJhO7VSaFLAUns8Kn8OHSrwgX
MZinWne8YyGLY+sEjwjtQpPY/uSWZNWAjgtJwuGwaqXFCkbLqIsiqMVWLPSqGZkA
GI+5i5/93QMyKffeOCzFMJZ6rU131YnAiJvnG7tGPU5GD+Km1YkXKt3ucFN3S8JB
SRAKKNSNLAjtFdsl116QboaHqh39vmQpCDmJjJoVH6ozeWQK7Dv86raUN+f0GyVh
ti9Nq2vyIhSIylHfzQjBnZ4iToIlLLXxqhFYU+PMpGr6fRY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org