Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139392e302f32342d3234203d3e203630373231.roa
File: 39332e3132372e3139392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 0/pmRhDroJQcolZPb03NN6RZgi8z1FhFqMLhokRYv3c=
Subject key identifier: 33:28:A9:99:9F:D9:03:DC:3A:80:F1:DE:7F:4D:8E:A1:8A:B5:87:9A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5FCFB94A25F0B21E0E6D4C6CAA5C86236FBB5E48
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139392e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:13 +0000
ROA not before: Fri 20 Jan 2023 06:21:13 +0000
ROA not after: Fri 19 Jan 2024 06:26:13 +0000
asID: 60721
IP address blocks: 93.127.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cf:b9:4a:25:f0:b2:1e:0e:6d:4c:6c:aa:5c:86:23:6f:bb:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:13 2023 GMT
Not After : Jan 19 06:26:13 2024 GMT
Subject: CN=3328A9999FD903DC3A80F1DE7F4D8EA18AB5879A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:77:ed:7d:06:0b:f5:06:6d:81:c5:62:2b:
0d:38:33:54:c3:2a:47:0e:6d:18:ed:cd:09:36:37:
54:b6:6b:76:77:f3:0e:53:d5:4c:cc:39:a5:f3:95:
b5:4e:9d:f1:67:69:15:ce:55:b5:98:1c:a5:d7:f0:
bc:a9:d2:93:bc:1c:53:2b:e8:57:c6:17:04:cf:69:
01:c0:55:0a:cc:4b:21:4d:fc:2a:3e:c1:d3:72:c8:
7b:23:2c:1c:50:0c:2c:b6:2d:5b:5f:77:ca:93:8c:
f4:a0:e1:36:64:7c:c7:17:be:10:03:2f:14:50:6c:
22:08:1e:c4:a1:31:5c:fe:cb:41:16:5b:5d:ef:1e:
1f:20:4d:88:f0:af:bd:77:c8:6b:d8:7f:91:3e:8a:
c2:a7:f8:7e:5a:94:25:c9:ff:8c:47:e6:14:38:f8:
7c:7d:92:55:df:0b:73:c9:2f:f9:60:0d:06:20:88:
2c:e6:2e:cd:f0:95:f8:dc:a3:c3:6a:8d:b6:7f:90:
23:90:e1:f9:5b:3e:e8:cc:15:12:ba:3b:6a:85:c5:
6b:1a:ca:b0:4d:c6:71:0f:82:62:7e:a6:b9:22:b5:
64:31:98:77:fe:f0:e2:a0:13:b3:fa:53:45:47:58:
3c:72:ab:46:cc:25:87:6b:d2:18:41:07:25:5f:fb:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:A9:99:9F:D9:03:DC:3A:80:F1:DE:7F:4D:8E:A1:8A:B5:87:9A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139392e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.199.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bb:af:08:35:47:90:46:c8:ec:42:69:cd:fc:4d:d5:ac:a6:
3e:e4:89:22:cd:f8:bd:8b:b4:20:be:31:ae:91:7a:e1:3b:42:
a5:26:10:ae:07:27:0f:53:a2:a6:63:e2:b8:fa:b8:c8:6f:85:
47:87:42:1b:44:42:93:66:65:c3:a9:fe:52:c6:be:b7:bd:80:
40:f5:49:44:ac:bf:22:26:53:2a:e6:61:86:c9:eb:f4:67:41:
78:a4:31:e2:5e:91:2f:95:83:82:0e:f8:b4:fc:f3:86:7d:47:
c4:18:0d:bd:a9:d4:83:58:4b:9c:81:c9:8a:43:25:ef:eb:c3:
ed:cc:b7:43:5f:d7:4b:c9:0b:3e:9f:89:93:4d:43:d0:eb:1f:
a3:ec:fd:7b:89:77:e2:23:b8:54:c7:32:aa:ea:5e:18:5e:5c:
d1:e0:59:50:2a:34:b0:d9:29:08:de:db:a0:d2:e0:31:89:f1:
b8:42:ea:02:ec:e9:35:24:c0:86:cb:d8:ef:6d:40:bf:69:f5:
08:33:e5:a1:2d:38:00:03:0c:60:8f:f8:b6:32:49:71:7d:33:
23:8f:93:3d:52:52:a2:5d:9f:96:dd:0f:17:b2:9b:7f:38:a4:
4e:dd:b2:12:f9:86:31:dd:21:be:1b:f1:f2:9c:63:bc:4d:96:
0c:ab:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:58 2025 by rpki-client