Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: p2slclY2I+npi6vdvYEn737TeHKzZw7HuMreMMBZ2Nc=
Subject key identifier: EB:8F:3D:D6:63:B7:51:6E:16:53:97:3E:52:E1:BF:40:D5:75:8F:34
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 26DD18B878F6F313D9E551EF8567243123CA88CB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Jul 2023 00:00:05 +0000
ROA not before: Tue 04 Jul 2023 23:55:05 +0000
ROA not after: Wed 03 Jul 2024 00:00:05 +0000
asID: 834
IP address blocks: 93.127.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:18:b8:78:f6:f3:13:d9:e5:51:ef:85:67:24:31:23:ca:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 4 23:55:05 2023 GMT
Not After : Jul 3 00:00:05 2024 GMT
Subject: CN=EB8F3DD663B7516E1653973E52E1BF40D5758F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:48:09:88:e4:cf:90:0c:e6:b0:a3:83:c7:
6d:dc:8f:ac:e5:80:bc:be:17:0c:13:04:2c:b9:27:
8c:65:8f:6a:b8:ee:6f:80:f8:10:e0:9e:5e:ed:ed:
e5:f6:1e:5a:27:30:b9:aa:2a:9b:c9:86:88:7a:cb:
23:dc:f0:d2:3a:9e:a1:bb:c5:ce:d2:4e:91:9a:4b:
ea:8e:95:63:e5:f7:0c:17:3d:1e:51:e3:ba:ca:42:
67:ff:59:42:99:8b:02:43:77:e2:4d:f0:fa:aa:e3:
69:e7:d2:e6:c9:dd:50:9b:f2:87:dc:a3:a3:ff:3d:
29:4a:13:96:ab:52:b4:4d:a3:6a:fb:c0:f6:8f:de:
92:94:c5:51:03:f9:5b:4f:8b:4e:1f:2d:70:6d:d6:
ad:37:44:8d:ce:36:08:e8:16:e5:21:82:1e:81:4e:
80:3e:8c:a6:c3:ac:28:be:46:2e:d6:19:7f:86:cd:
19:8f:73:0f:d8:37:2b:3f:a8:49:70:d7:27:82:4d:
a5:bd:6a:68:f5:0a:96:33:34:5e:25:88:8d:ba:53:
fc:95:91:8e:37:a2:85:87:ef:41:31:b9:69:1e:40:
06:25:d6:4b:a7:0f:43:0b:44:fe:d7:48:e7:9b:44:
b2:ed:b1:2a:5e:db:28:f3:a9:09:aa:84:e8:5c:60:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:3D:D6:63:B7:51:6E:16:53:97:3E:52:E1:BF:40:D5:75:8F:34
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.200.0/24
Signature Algorithm: sha256WithRSAEncryption
88:14:fe:02:fc:66:60:41:75:dc:c3:cf:21:21:c8:0d:6d:7f:
0b:e8:d3:fd:2e:72:56:c6:7e:0c:af:4e:63:81:07:23:d9:dc:
21:12:35:a1:0a:00:1e:17:aa:bb:5d:e8:6b:52:f5:3b:d4:9b:
1a:a9:e4:9a:a3:88:43:4a:ff:62:cb:39:49:67:af:d5:34:5d:
1e:58:a8:1c:15:43:b0:49:ae:83:27:3b:83:4f:ca:64:1d:51:
96:2f:5d:4c:d2:ee:d8:a3:91:e0:2e:4f:08:29:7e:b7:03:c4:
67:96:6c:05:96:96:81:1a:2e:bd:54:00:1a:39:91:c3:10:2f:
f7:82:11:e2:eb:e6:8b:55:5e:31:db:95:75:2f:75:b9:fd:27:
96:50:2f:60:c8:a8:76:b5:e2:4b:d1:c8:99:3a:5b:fd:41:c7:
02:c3:e7:59:41:7b:05:31:1f:ee:8f:17:67:33:f0:99:40:0a:
9a:a1:81:b8:00:79:f9:92:7c:f3:9d:66:df:8f:9b:95:76:68:
d2:12:ab:6e:98:43:f2:e3:9e:e4:c6:53:70:84:0e:c2:59:3f:
92:1e:65:7a:47:69:ac:f0:2c:3e:37:fb:e8:26:33:e0:fe:e1:
65:d6:4d:18:be:b7:a4:7e:90:e6:19:13:aa:a7:d7:8a:7a:00:
9e:7e:9c:ab
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJt0YuHj28xPZ5VHvhWckMSPKiMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA3MDQyMzU1MDVaFw0yNDA3MDMwMDAwMDVaMDMxMTAvBgNV
BAMTKEVCOEYzREQ2NjNCNzUxNkUxNjUzOTczRTUyRTFCRjQwRDU3NThGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf0gJiOTPkAzmsKODx23cj6zl
gLy+FwwTBCy5J4xlj2q47m+A+BDgnl7t7eX2HlonMLmqKpvJhoh6yyPc8NI6nqG7
xc7STpGaS+qOlWPl9wwXPR5R47rKQmf/WUKZiwJDd+JN8Pqq42nn0ubJ3VCb8ofc
o6P/PSlKE5arUrRNo2r7wPaP3pKUxVED+VtPi04fLXBt1q03RI3ONgjoFuUhgh6B
ToA+jKbDrCi+Ri7WGX+GzRmPcw/YNys/qElw1yeCTaW9amj1CpYzNF4liI26U/yV
kY43ooWH70ExuWkeQAYl1kunD0MLRP7XSOebRLLtsSpe2yjzqQmqhOhcYCbFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU64891mO3UW4WU5c+UuG/QNV1jzQwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdf8gw
DQYJKoZIhvcNAQELBQADggEBAIgU/gL8ZmBBddzDzyEhyA1tfwvo0/0uclbGfgyv
TmOBByPZ3CESNaEKAB4Xqrtd6GtS9TvUmxqp5JqjiENK/2LLOUlnr9U0XR5YqBwV
Q7BJroMnO4NPymQdUZYvXUzS7tijkeAuTwgpfrcDxGeWbAWWloEaLr1UABo5kcMQ
L/eCEeLr5otVXjHblXUvdbn9J5ZQL2DIqHa14kvRyJk6W/1BxwLD51lBewUxH+6P
F2cz8JlACpqhgbgAefmSfPOdZt+Pm5V2aNISq26YQ/LjnuTGU3CEDsJZP5IeZXpH
aazwLD43++gmM+D+4WXWTRi+t6R+kOYZE6qn14p6AJ5+nKs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org