Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3IscgInf2Bi5wb79ANh3K1E9Qt7rPZ69SzF+Ks2Dlpo=
Subject key identifier: 0E:2E:77:57:83:25:D5:C2:25:CA:8C:08:08:F2:11:D6:2A:A8:F9:53
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 11966FA78F863825B1D95BF0435AB09E4CB1D675
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e20383334.roa
Signing time: Sat 15 Apr 2023 00:00:13 +0000
ROA not before: Fri 14 Apr 2023 23:55:13 +0000
ROA not after: Sat 13 Apr 2024 00:00:13 +0000
asID: 834
IP address blocks: 93.127.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:96:6f:a7:8f:86:38:25:b1:d9:5b:f0:43:5a:b0:9e:4c:b1:d6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 14 23:55:13 2023 GMT
Not After : Apr 13 00:00:13 2024 GMT
Subject: CN=0E2E77578325D5C225CA8C0808F211D62AA8F953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:36:47:55:16:1a:12:ee:c4:b8:7c:48:ca:
cf:fa:0d:d8:9e:30:ec:6a:fa:46:d1:4e:01:c0:1b:
8c:32:02:5f:63:bc:fe:84:43:43:63:66:e7:bd:52:
d6:88:4e:d7:27:cd:96:5e:c6:df:57:6a:7b:97:36:
ef:16:68:1f:f1:ac:5b:28:ad:95:ea:47:90:8d:2d:
d7:23:37:18:cb:e2:d0:3b:99:e4:1c:96:79:ac:f7:
ce:51:45:52:c4:7b:d0:05:e6:36:72:d0:6e:de:99:
6f:d7:d7:4a:a6:84:a8:67:39:f4:ca:38:39:59:36:
53:35:a3:b5:e1:ff:65:69:3d:07:99:f2:ea:ef:af:
ca:20:36:1d:71:82:ad:32:cf:b9:81:7e:a3:6e:42:
0a:29:53:8e:da:12:46:18:cb:4b:a7:db:f0:49:58:
fa:e8:18:c7:e0:a1:df:28:29:53:57:1e:de:98:95:
d5:a2:94:9f:99:f4:86:77:0d:68:d2:72:95:36:a9:
a3:6b:8d:5c:f6:6b:51:1c:40:53:ac:1b:bb:8f:6f:
bc:ff:ae:69:40:41:ab:9b:9b:5d:e3:5f:61:9f:e1:
a4:a6:ef:5e:cc:5f:7f:30:2f:61:a5:c2:03:fa:fc:
4d:f0:3c:d1:03:aa:ad:14:13:1c:82:38:18:95:31:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:77:57:83:25:D5:C2:25:CA:8C:08:08:F2:11:D6:2A:A8:F9:53
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ef:a0:48:3a:81:4f:ba:fd:e4:ae:ec:a7:a7:dc:64:36:f7:
ed:03:c0:81:8e:32:41:43:82:7d:7c:4a:9b:d1:97:f2:af:a1:
ed:51:60:bb:1d:2a:3f:85:96:5a:fe:85:7c:e8:91:1c:47:40:
c9:11:e4:b7:0d:3d:d6:4d:05:42:8a:91:8e:04:ec:d3:fb:c0:
30:b9:9a:4c:54:09:63:bf:f5:45:0e:94:7a:78:9e:0c:d1:2e:
a6:32:b0:2f:97:5a:83:29:e9:fd:16:63:c6:ef:b4:14:0f:6b:
48:8d:de:52:c4:db:39:03:bb:e4:bf:d1:b0:ca:f4:41:38:4a:
59:94:44:a7:a7:32:14:ca:77:9f:2b:a1:63:0d:6d:87:36:5e:
1a:06:0d:14:2c:98:46:51:bb:a6:1c:77:4f:28:96:41:c3:9f:
fb:cd:fd:48:d1:7a:af:b0:a1:76:c4:ca:ee:98:41:1f:51:37:
80:f9:cd:bc:cd:f3:b1:ae:9f:64:8b:31:d4:96:27:1b:3b:aa:
2f:06:c2:db:f1:f5:a5:a1:e7:39:97:f4:e0:bf:08:f5:4b:c6:
fd:fc:9c:3e:fd:c2:d0:3e:cc:5e:08:11:61:10:4a:4f:69:56:
e9:87:b5:15:25:99:67:af:5f:70:b1:43:28:8d:e6:de:db:c7:
e9:43:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:09 2025 by rpki-client