Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e203439393939.roa
File: 39332e3132372e3230312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 9nUrCJ+63YIe0cr34klsYyVrrCa2kG1QZ2ODd1Ms0lU=
Subject key identifier: F3:12:37:A6:25:8B:74:B7:B3:97:32:60:F1:C4:46:65:BE:9B:01:BD
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4BF2BDAAEB86AC481E91E65A9F1584AFD9147459
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e203439393939.roa
Signing time: Wed 15 Mar 2023 18:47:51 +0000
ROA not before: Wed 15 Mar 2023 18:42:51 +0000
ROA not after: Wed 13 Mar 2024 18:47:51 +0000
asID: 49999
IP address blocks: 93.127.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f2:bd:aa:eb:86:ac:48:1e:91:e6:5a:9f:15:84:af:d9:14:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 15 18:42:51 2023 GMT
Not After : Mar 13 18:47:51 2024 GMT
Subject: CN=F31237A6258B74B7B3973260F1C44665BE9B01BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:df:3d:f7:82:40:eb:f0:a5:24:79:f7:f0:
99:a6:04:7e:cd:da:09:20:48:cd:b3:6a:3c:32:d6:
a7:bd:1f:ed:21:f0:93:cf:ff:ab:fa:e4:d2:1b:af:
f4:77:a6:36:cf:8c:fe:e1:12:ef:54:1a:35:cb:91:
d2:09:dd:92:ea:b2:89:5e:f7:81:54:b0:3d:54:6b:
8f:f7:f8:9f:d7:d8:1e:47:11:1f:ac:f9:36:77:4b:
81:e6:e8:fb:4a:47:bb:d5:46:6d:21:a4:47:1a:7c:
3c:54:c8:15:00:7b:11:93:e1:d0:d6:b9:b6:b7:65:
6e:f9:29:81:99:e2:13:18:b9:68:3e:4b:55:ee:0f:
27:8d:d4:ed:0a:2b:0f:d2:c1:91:16:70:7b:c8:7a:
24:58:2f:dc:14:d3:dd:2a:c4:1a:57:cf:a3:d0:f7:
66:cd:47:75:fb:01:86:d8:1d:e7:20:a0:2b:73:89:
3f:dc:5b:a2:a2:37:a4:17:50:97:db:31:b9:56:77:
d8:71:00:f7:db:8e:50:7a:69:ca:ef:e4:0b:32:12:
3f:ea:2a:65:1f:d5:a8:bd:45:9b:9c:02:2f:c1:e6:
3d:14:db:1a:39:d4:51:94:85:0b:99:83:23:c8:58:
18:c6:90:e9:d2:b7:6d:76:cb:22:79:36:f3:a2:3f:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:37:A6:25:8B:74:B7:B3:97:32:60:F1:C4:46:65:BE:9B:01:BD
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.201.0/24
Signature Algorithm: sha256WithRSAEncryption
22:38:ef:bc:16:8d:ba:1a:2b:5e:23:99:59:3b:ea:e8:b1:d9:
5c:23:8c:7d:18:88:ce:f7:a0:15:27:11:58:5d:f4:96:8d:4b:
a5:65:b1:8b:b0:b2:08:1c:25:42:38:d5:65:96:c8:a8:56:51:
da:f1:ff:5c:ac:2f:84:df:4e:95:52:50:c3:03:1d:40:2b:67:
71:73:47:44:6b:c8:66:16:fb:6d:d5:3e:5a:58:c8:21:37:06:
ff:eb:65:39:1f:7f:4a:15:8f:f2:32:9a:3c:77:57:db:77:1a:
6e:f0:e1:c1:39:63:a8:b0:ee:3e:b5:f9:64:dc:b3:6c:42:7d:
7e:53:36:70:9f:ca:e4:74:c4:80:66:29:64:01:60:6a:8a:35:
b8:8d:b8:85:3a:22:2b:e1:86:a0:ae:1d:b4:c1:36:ed:2f:08:
4e:e1:06:9e:f1:d9:17:8f:d7:11:76:a0:24:ae:a9:df:16:d9:
4b:7b:48:4a:7d:98:c5:77:5d:0b:36:7d:67:46:f5:94:6f:13:
b8:5d:5d:58:cf:15:bc:17:4c:ba:b1:6b:b3:3d:a1:f2:ab:9a:
58:91:10:c1:7b:cd:06:1b:ed:cc:4f:2e:cb:3a:26:7e:19:7d:
de:3a:df:70:ac:e0:0e:43:17:97:1d:8f:c9:8a:82:d6:a4:ce:
c4:7a:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org