Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20323131363139.roa
File: 39332e3132372e3230352e302f32342d3234203d3e20323131363139.roa (raw, json)
Hash identifier: gnft54zyxRSCe1YOQTVL/k2yS8zyi6MSqXp7raEawdk=
Subject key identifier: D7:53:12:3C:5D:07:56:04:71:B4:7A:9B:80:9C:AA:CA:80:3B:C2:84
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6E60CEAADADCBFD6779484B155015612BFF9B250
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20323131363139.roa
Signing time: Wed 07 Jun 2023 15:43:00 +0000
ROA not before: Wed 07 Jun 2023 15:38:00 +0000
ROA not after: Wed 05 Jun 2024 15:43:00 +0000
asID: 211619
IP address blocks: 93.127.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:60:ce:aa:da:dc:bf:d6:77:94:84:b1:55:01:56:12:bf:f9:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 7 15:38:00 2023 GMT
Not After : Jun 5 15:43:00 2024 GMT
Subject: CN=D753123C5D07560471B47A9B809CAACA803BC284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:5e:ed:5a:59:4c:af:15:2a:76:25:22:c1:
bc:24:16:30:61:d3:14:b1:4f:c8:32:ca:ed:22:19:
c8:09:57:e5:90:52:3d:27:8b:82:c2:3c:63:e6:42:
05:6f:ab:5a:b0:7a:66:13:7e:c3:65:1e:63:6c:7b:
60:4f:0b:1b:c5:81:b5:32:11:cb:d9:17:4a:be:61:
de:24:3f:84:ea:26:8d:b5:f3:00:96:1e:26:f4:99:
32:c2:e8:e8:b7:39:c3:c2:6c:73:ab:99:a8:63:42:
8a:3b:c1:3c:2d:32:7d:65:27:1f:54:14:18:cf:46:
25:9d:96:a2:a1:b3:fb:c2:3d:bb:6f:18:39:ed:1b:
2f:67:ee:54:b6:c0:60:17:f8:fc:e8:9c:ec:9a:c0:
14:c2:bc:a7:9e:17:08:c5:fd:a0:40:a1:e2:7f:e5:
d1:a9:93:ef:48:86:d5:c9:3e:48:5c:24:5c:aa:e4:
8f:de:ad:e5:a0:b5:f8:47:54:c1:91:41:cb:85:28:
31:80:ed:59:67:37:fc:02:0b:3f:3d:54:c9:99:14:
e7:f5:11:3c:58:ac:bb:b6:31:52:03:5b:a1:1a:c8:
a2:f0:54:83:c2:32:75:85:c8:10:31:a6:a2:1a:1d:
9e:ca:4f:64:6b:ac:39:64:f0:0f:06:04:c6:0c:2b:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:12:3C:5D:07:56:04:71:B4:7A:9B:80:9C:AA:CA:80:3B:C2:84
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20323131363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.205.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a1:89:19:f5:38:3b:61:62:a7:f5:d4:8b:ab:c6:a5:82:cb:
13:82:65:03:7f:84:fd:dc:3f:eb:cf:87:86:45:45:f6:c2:62:
58:b6:3e:6b:57:51:63:53:97:f1:c2:8e:43:d6:c5:49:71:88:
67:c7:dc:3f:9e:c0:ab:10:da:82:0f:f5:dd:76:64:47:26:6c:
7d:da:17:f0:76:a3:76:9b:ed:b6:b2:42:5d:da:c2:94:ba:6a:
57:44:72:68:30:36:ca:70:53:9e:91:db:b7:4f:83:4f:11:40:
bb:7a:98:89:a5:93:39:05:3a:b5:a5:d8:9c:65:b8:af:e3:d8:
c0:60:bc:82:d5:aa:05:d7:ca:80:4a:45:91:ec:d3:b7:55:8c:
c4:9d:1b:91:a4:c3:51:c8:9e:44:4d:34:1d:88:63:54:54:f2:
da:88:7b:e3:42:2f:8c:37:1e:5f:b1:4f:b0:a2:4a:71:c1:bb:
f3:85:68:e5:5d:23:e9:a0:0d:af:c1:e5:2c:7e:a0:22:8b:81:
f1:91:05:1d:2a:54:40:cc:54:32:6a:59:4d:88:ef:69:4f:bc:
9b:2b:9d:ed:64:8c:3c:26:72:55:fd:74:12:25:cb:1b:52:8e:
2e:4e:c2:b9:27:a0:9c:0b:dd:85:5c:2b:b3:b8:7e:c3:7c:59:
c4:d9:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org