Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e203134343435.roa
File: 39332e3132372e3230342e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: Gf2iibnHC8nra+dBCcftFwcQ/gUYgebdK3nXAEixcQ8=
Subject key identifier: 7C:41:EE:C3:2B:82:65:8C:B8:D8:CC:11:6C:13:98:19:BA:24:89:AB
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 67E534586821CC8E60F2C4337CFC6D99FA2CD3BC
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e203134343435.roa
Signing time: Wed 22 Mar 2023 08:29:13 +0000
ROA not before: Wed 22 Mar 2023 08:24:13 +0000
ROA not after: Wed 20 Mar 2024 08:29:13 +0000
asID: 14445
IP address blocks: 93.127.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e5:34:58:68:21:cc:8e:60:f2:c4:33:7c:fc:6d:99:fa:2c:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 22 08:24:13 2023 GMT
Not After : Mar 20 08:29:13 2024 GMT
Subject: CN=7C41EEC32B82658CB8D8CC116C139819BA2489AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:69:d9:b8:d6:11:d8:8c:01:8d:b4:99:0f:
a6:1a:d9:45:9e:97:e7:ca:81:63:aa:e1:03:b7:7e:
86:5f:f4:b1:e2:3d:82:a1:fe:6a:fb:59:f1:b1:6b:
c4:7a:b7:7a:cd:b3:58:51:d8:a1:31:c0:c7:06:e5:
f1:85:0d:f9:b5:5b:1b:3f:8b:6f:5d:c4:bf:14:0f:
f5:87:67:35:7b:10:22:0c:0d:f3:96:0f:8c:54:1e:
c9:b8:a3:25:5d:ce:5b:11:25:95:b7:3b:5a:57:f7:
29:33:0c:21:93:3f:5b:b7:04:18:f5:39:8e:6d:6c:
32:85:32:ca:1c:76:3c:b2:ca:72:12:e0:02:ac:ea:
43:b8:b7:51:d6:87:68:a8:a0:b9:7f:58:88:44:e4:
f5:84:3a:23:47:dc:8f:d2:80:86:ec:b3:89:77:17:
82:ab:ce:88:11:85:35:72:f2:f9:11:8d:f6:2f:76:
03:ba:ee:84:13:4b:dc:36:06:0a:65:1b:97:f5:d3:
42:ad:89:95:1f:77:03:1f:66:61:fd:9c:bd:b6:59:
d8:99:13:5b:2b:4c:b8:82:5a:5a:43:21:78:df:eb:
aa:a6:3b:92:0a:fc:51:e9:fd:6c:3a:76:9b:10:df:
0a:05:e6:53:82:34:1a:c5:df:d3:65:7a:63:4d:57:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:EE:C3:2B:82:65:8C:B8:D8:CC:11:6C:13:98:19:BA:24:89:AB
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:72:d3:3a:f6:98:85:94:17:ef:48:8a:63:85:22:66:7b:50:
93:14:f9:2b:52:8b:7f:24:a5:1a:cf:13:2b:0b:82:6f:2a:53:
ea:12:b7:85:fb:0a:5e:fe:7c:97:18:0c:6a:f8:8b:6f:4f:a2:
10:1a:2e:6a:70:a1:05:0f:ef:6e:ca:c9:e3:86:81:7f:ea:a7:
b2:1d:1a:54:df:d5:8a:f1:37:22:20:32:6f:be:5d:a8:12:f3:
24:38:6b:88:30:68:1a:2c:9f:cd:01:2f:d4:9a:33:1c:f6:c7:
6e:a0:61:39:71:69:67:65:8a:49:9b:e0:de:dd:6d:52:5f:36:
50:eb:ee:2a:2f:36:b9:39:8a:6b:b8:72:8e:52:54:a2:ba:5e:
d6:dd:d0:18:8f:42:ba:18:4a:72:55:f2:0e:e3:4e:d0:84:38:
62:1e:09:49:9e:2f:7e:df:aa:6e:e5:ce:95:fd:c4:a3:32:ca:
9a:86:b2:87:48:9f:ba:27:27:5d:14:89:eb:a7:e4:d1:6c:13:
08:f1:32:33:c9:20:b7:23:5c:a6:24:82:45:b6:00:3f:f5:68:
01:cf:fb:bf:14:f0:cb:a9:9f:e6:08:ef:6e:3d:4a:d1:3b:8c:
b6:34:bf:14:95:3d:05:5c:e3:46:3b:ec:64:c1:e6:26:31:e7:
11:96:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org