Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vVLnh93Hjhu1wcETcCrQu0o4DSPolSj1XcOyYJTcoEc=
Subject key identifier: CF:1B:2F:5A:3F:64:7E:D2:49:E5:0B:88:41:76:A9:2E:F8:2A:35:77
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3782251C1F0AF8786A35D3093CCD785D5D4F08EB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20383334.roa
Signing time: Fri 07 Jul 2023 00:00:14 +0000
ROA not before: Thu 06 Jul 2023 23:55:14 +0000
ROA not after: Fri 05 Jul 2024 00:00:14 +0000
asID: 834
IP address blocks: 93.127.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:82:25:1c:1f:0a:f8:78:6a:35:d3:09:3c:cd:78:5d:5d:4f:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 6 23:55:14 2023 GMT
Not After : Jul 5 00:00:14 2024 GMT
Subject: CN=CF1B2F5A3F647ED249E50B884176A92EF82A3577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:c2:44:a1:af:30:23:6a:c3:5d:7c:79:a4:
d9:24:47:1f:01:2a:2c:58:7b:06:cf:6d:48:43:c8:
cd:3b:29:71:97:51:14:b6:9a:18:47:09:7b:5e:3c:
6e:c0:c9:76:eb:ca:85:47:97:f2:23:45:d8:d7:05:
99:50:7b:14:89:a0:23:ff:e7:5f:68:f7:5b:5d:0d:
d5:59:9c:6d:31:f3:ad:0c:7c:49:15:df:e2:a7:ef:
f9:25:32:43:d9:f4:2f:49:26:a2:75:04:bc:10:33:
7d:55:9d:86:f7:75:3d:ec:77:d9:55:ac:b7:0c:0a:
5f:32:57:af:fc:33:f7:6e:cd:62:60:08:19:5d:15:
d1:06:2e:22:3d:46:f3:39:5e:15:97:cb:58:1e:b5:
81:9c:e6:a3:3a:6f:e3:b4:02:f8:1c:00:e0:f7:47:
a2:09:9c:71:d0:0c:01:83:3a:7c:5b:93:31:fa:91:
71:96:fa:bf:95:04:36:1e:ba:82:26:dc:dc:e3:95:
28:a8:fd:77:9c:66:ce:33:3a:70:7e:f3:8c:7a:0b:
71:5a:6a:6d:62:b9:82:bd:ce:22:fd:f8:fe:be:2f:
d3:5e:ce:ca:3e:bd:29:53:19:c8:49:84:24:54:1d:
c4:26:eb:84:68:64:34:c6:bd:09:7a:72:c3:44:8c:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:2F:5A:3F:64:7E:D2:49:E5:0B:88:41:76:A9:2E:F8:2A:35:77
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.205.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8a:f8:48:2f:fd:1c:25:ee:28:07:d0:f4:26:92:c0:fa:b9:
57:55:70:12:42:68:2b:55:03:82:8c:e2:46:0f:20:48:16:19:
be:cd:59:c6:37:bc:66:13:b3:a6:4a:e2:fe:d5:25:98:77:9e:
54:cb:56:26:3b:57:d0:57:fb:0a:b1:8d:f6:da:40:38:69:28:
d8:0d:98:c3:89:18:ab:be:02:c1:77:fe:be:79:2c:d0:31:2b:
ea:2a:3f:69:e2:bd:8b:1a:9d:f5:17:9a:2a:1f:78:4c:eb:91:
4c:26:93:48:7d:79:ec:62:1c:a3:a1:f7:aa:b4:3e:39:db:7e:
c5:ab:2c:03:d1:7f:58:20:70:fe:c2:0f:44:08:7d:ab:e5:45:
25:f1:d3:c9:5e:96:25:07:f0:0c:dd:f9:e6:72:de:3b:e2:b6:
7d:b8:70:1c:f3:dc:b8:cb:42:cc:94:00:b5:77:8e:e2:eb:46:
7d:1b:c9:4e:43:93:b3:93:c8:8a:91:03:f9:72:e6:84:b8:2d:
e0:c7:4e:84:04:0c:71:a0:61:ae:b1:46:cf:28:6f:9f:54:7c:
2b:f6:c4:78:62:a6:89:f2:d1:81:0a:85:1a:73:ae:43:41:e4:
79:3a:19:86:36:93:09:e8:1b:e5:0d:fc:83:2f:e1:5e:1c:17:
22:b7:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:34 2025 by rpki-client