Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hYsQIgyWQMLXweg6tOeevJ9B4jKzP6aTFoPZRUF7+tc=
Subject key identifier: 28:D1:AB:B8:31:D9:20:2A:0D:08:F4:5C:16:77:36:07:D5:87:71:7B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 1235B77A245D70C7B0E4A2D59DD09BC9A1B3DCA9
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e20383334.roa
Signing time: Mon 22 May 2023 00:00:06 +0000
ROA not before: Sun 21 May 2023 23:55:06 +0000
ROA not after: Mon 20 May 2024 00:00:06 +0000
asID: 834
IP address blocks: 93.127.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:35:b7:7a:24:5d:70:c7:b0:e4:a2:d5:9d:d0:9b:c9:a1:b3:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 21 23:55:06 2023 GMT
Not After : May 20 00:00:06 2024 GMT
Subject: CN=28D1ABB831D9202A0D08F45C16773607D587717B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:25:58:ae:22:b4:24:00:59:cb:08:0a:0e:
ed:5c:d8:7e:3e:55:2d:ed:3e:86:c5:02:51:0d:1d:
ab:01:2a:bc:b2:3a:bf:3a:d1:ee:40:94:57:ff:36:
2e:ae:6b:50:6b:00:7b:ae:40:c2:0b:94:62:d8:79:
87:90:9b:62:50:2c:c7:04:27:17:aa:a1:45:9f:e9:
cc:1b:bb:3c:37:1f:05:1e:15:71:72:ce:3a:0e:78:
fa:7e:49:c2:2b:b0:18:5e:51:d4:89:d7:c4:31:bc:
38:52:d6:8f:c1:04:cb:2d:45:0f:26:35:e1:b8:bb:
10:c6:35:15:17:cf:91:22:b4:02:71:92:f2:8c:62:
56:3f:c7:1f:44:44:a2:79:9f:0a:34:ef:5c:87:0c:
a3:61:ec:ce:93:e7:35:c3:68:64:cf:91:26:fa:9f:
24:43:a6:20:f8:0b:ed:1b:fb:bf:91:6f:4c:ca:19:
ec:ce:d4:b8:98:95:85:06:bc:b0:33:30:70:79:b7:
07:86:b5:ca:5f:9a:0d:28:a5:89:06:0a:b9:f4:93:
6d:c1:1b:84:52:90:99:e7:df:a0:6a:b0:93:82:7c:
50:37:cd:d4:c0:25:10:7c:7e:7e:5b:8d:88:32:31:
48:9f:3b:21:49:95:5d:77:03:b7:96:3a:bb:68:e9:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:AB:B8:31:D9:20:2A:0D:08:F4:5C:16:77:36:07:D5:87:71:7B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.204.0/24
Signature Algorithm: sha256WithRSAEncryption
68:35:8a:e7:46:27:99:9f:ef:8a:85:99:38:17:2e:f4:df:a9:
f7:df:1d:f3:99:ce:54:97:d7:60:f9:d4:cd:b7:75:c2:9c:de:
25:4f:26:08:06:9e:68:2a:87:61:85:94:4a:e2:41:1d:19:38:
73:6b:08:20:3a:29:a6:e6:6a:55:01:dd:4c:fc:48:73:b9:b7:
1a:35:69:0c:49:0f:09:c2:13:a3:9d:c9:05:2d:6a:62:b7:6b:
c3:ad:42:41:e3:ee:05:d9:f1:fe:7d:97:ec:06:d6:45:a6:a9:
f8:2b:85:77:4c:c8:b8:6c:1b:69:95:fe:d1:0e:57:8a:a0:6d:
95:21:ec:1c:37:d6:20:f9:01:1d:cd:65:37:6f:16:38:42:33:
5c:77:ae:ee:ef:45:1d:d3:09:bb:46:a4:9a:2f:21:49:3e:5a:
16:30:f6:46:b0:d3:4c:f1:61:f8:a6:ac:ec:2f:84:91:3a:62:
99:5f:96:c1:57:44:7e:45:72:69:3f:50:7d:19:a0:07:fc:40:
4d:c3:89:d0:f4:89:70:3e:fa:c3:32:99:36:c6:20:f3:2c:4c:
a0:91:46:ff:63:e0:9e:ae:85:74:79:f6:63:18:88:11:1c:f8:
14:cd:58:48:72:b8:4a:4d:63:8c:eb:0c:0d:ab:63:0c:c8:cb:
9b:14:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org