Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32322d3234203d3e203439393939.roa
File: 39332e3132372e3230382e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier: sxkJYLkw0U5fmP4HhpuwnL1PWykYMcc1XcYtbvXp/s4=
Subject key identifier: A4:F1:42:13:D2:18:9E:40:13:62:6D:2C:FD:9A:50:AF:FD:1B:32:94
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 59E6EB980C2888255EF1B1DFFF3E06A4AD825D54
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32322d3234203d3e203439393939.roa
Signing time: Fri 20 Jan 2023 10:15:17 +0000
ROA not before: Fri 20 Jan 2023 10:10:17 +0000
ROA not after: Fri 19 Jan 2024 10:15:17 +0000
asID: 49999
IP address blocks: 93.127.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e6:eb:98:0c:28:88:25:5e:f1:b1:df:ff:3e:06:a4:ad:82:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 10:10:17 2023 GMT
Not After : Jan 19 10:15:17 2024 GMT
Subject: CN=A4F14213D2189E4013626D2CFD9A50AFFD1B3294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:56:a6:cb:7a:fd:46:55:15:84:9b:cd:f7:
fa:0c:45:8b:91:84:b5:a6:9d:61:80:c0:dd:2c:9b:
b4:56:d1:e1:1f:dc:a2:2b:24:17:e9:91:c3:a0:92:
8a:7b:5c:3b:1f:c1:d2:44:be:0b:90:a4:95:eb:22:
77:5b:ad:4e:ee:75:d2:35:b4:7a:c0:b2:1a:8d:be:
71:e9:0d:31:d1:7a:67:d8:81:d8:33:85:a8:ea:37:
12:6e:e0:ac:d4:8f:06:46:7b:65:ee:72:fd:60:23:
61:3e:7d:9d:29:d5:15:03:a3:5b:fd:9e:31:05:d9:
94:78:4a:76:be:da:6b:fe:f8:70:7a:4a:1f:9d:75:
8b:50:6d:a4:7f:de:79:58:6a:0f:05:63:54:25:58:
56:15:f0:a5:62:5e:81:a2:f9:ed:db:d7:e5:e6:12:
13:9d:85:87:db:e2:3a:68:f4:f1:a8:d5:c2:1e:43:
d0:19:f8:fe:df:24:a8:f3:a1:65:fa:7c:1f:1a:bb:
d8:2e:33:76:27:ef:36:e8:52:3a:c9:d2:84:07:78:
67:84:a8:1c:43:cc:7d:1a:31:18:99:23:81:27:e3:
e5:69:e5:ba:4c:1a:bb:9c:61:fd:64:cc:bb:bf:a5:
bf:bd:3b:fa:3b:93:48:f6:ca:bc:8c:4d:3d:e9:48:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:42:13:D2:18:9E:40:13:62:6D:2C:FD:9A:50:AF:FD:1B:32:94
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32322d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.208.0/22
Signature Algorithm: sha256WithRSAEncryption
66:8e:25:79:30:d8:03:5f:cc:51:e4:ea:2e:a0:a4:a5:42:c9:
53:58:e7:9c:99:aa:50:28:76:99:fc:ab:2a:60:c1:60:b8:66:
70:51:4f:4d:35:42:6a:b1:b2:77:4e:f4:8e:b4:55:6b:14:b4:
ab:22:9c:14:74:7a:5b:3b:4f:db:c3:d0:ea:da:31:a0:9d:fd:
1f:99:4c:70:98:29:62:b4:6a:55:f9:e7:f6:86:b0:d7:15:09:
e4:c1:46:87:bc:bf:b3:08:5d:8e:15:e1:65:5c:a5:00:74:5a:
52:12:17:77:4d:72:82:e7:fb:77:f8:2f:33:74:ff:12:aa:b8:
b0:50:94:54:60:13:f2:fa:c0:a3:a9:0b:75:a0:71:a8:31:b0:
29:c8:71:4d:f0:d7:41:ce:e4:2f:75:fb:e8:a7:98:be:d0:cd:
f4:5e:98:22:e1:46:69:9b:62:8f:38:14:0a:36:84:af:f2:97:
f8:88:0b:92:a2:88:49:cf:2e:f1:1a:0e:39:e7:19:dd:09:a9:
11:d5:09:54:0f:3f:2b:50:63:bd:a9:dc:57:79:d5:d1:8d:c9:
60:a7:ad:51:ec:0e:4f:82:12:fd:aa:99:59:fe:89:88:a3:dc:
af:56:d7:d3:5c:fa:b8:a8:78:77:00:eb:fe:97:c1:8f:21:d1:
8b:2a:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org