Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2smmkTn0I4J9VFQ/zvugAGYADAAlCm+7FKuMl5Hx670=
Subject key identifier: 8F:58:0F:FF:B1:65:06:1E:DA:1E:B1:A0:98:09:BE:E6:E7:32:D9:09
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 38410EBD4D003701370CF608A6065CE6361C2811
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Mon 15 May 2023 20:00:03 +0000
ROA not before: Mon 15 May 2023 19:55:03 +0000
ROA not after: Mon 13 May 2024 20:00:03 +0000
asID: 834
IP address blocks: 93.127.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:41:0e:bd:4d:00:37:01:37:0c:f6:08:a6:06:5c:e6:36:1c:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 15 19:55:03 2023 GMT
Not After : May 13 20:00:03 2024 GMT
Subject: CN=8F580FFFB165061EDA1EB1A09809BEE6E732D909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:7c:02:b2:43:ed:37:7f:4e:4d:25:a3:d0:
38:82:43:fa:33:c6:25:63:0f:f1:d2:59:c7:76:64:
f1:f6:f3:89:7e:5c:a4:35:06:cc:4b:ac:41:8e:4c:
fd:56:c2:b2:b6:81:a1:fa:83:56:23:0b:ce:8b:b1:
40:f9:eb:5c:3b:3a:c2:04:16:ca:7f:96:71:08:3b:
3e:57:df:dc:b1:c3:48:24:5c:27:eb:64:84:1f:27:
86:e5:8f:4f:f2:47:e6:0b:ed:1f:28:45:2b:da:db:
c2:72:64:c7:d8:00:8b:cb:5d:d2:a5:08:de:f8:77:
40:ae:be:f9:b3:8f:8c:de:7e:34:5c:b1:2b:71:bb:
b7:d1:34:3f:54:1d:cf:c8:c7:bc:6f:2f:b7:36:6f:
de:34:9d:2d:72:30:7b:a0:04:b9:57:9b:c4:d6:11:
4c:bd:23:af:22:8b:58:6d:09:84:05:cc:91:44:1c:
3b:f3:69:d7:98:86:cd:a8:a9:fd:19:c0:0b:82:86:
a9:ab:90:5c:80:c3:09:6a:11:80:fd:57:16:60:c6:
bf:11:ab:2c:a5:10:92:97:68:a9:e2:bb:45:4f:6b:
a6:5f:cc:5a:da:0e:38:d6:af:db:2d:34:57:95:d9:
11:9b:c6:31:01:af:ca:f8:87:50:eb:92:91:63:ba:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:0F:FF:B1:65:06:1E:DA:1E:B1:A0:98:09:BE:E6:E7:32:D9:09
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.208.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7e:1d:1b:26:40:99:5b:98:89:be:de:c0:9d:a1:f1:bb:d2:
77:be:df:1d:72:c8:4e:a0:00:52:c4:87:30:2f:d7:bb:4d:b2:
44:28:87:b3:31:28:59:96:63:a7:80:f1:57:18:4f:8b:e3:fe:
d7:55:dd:7e:77:2e:a6:df:2a:ac:9a:5e:ae:b3:97:0c:5e:21:
9b:49:3d:07:2f:92:3a:24:90:f5:31:df:45:cb:2f:0e:8a:28:
43:23:bb:c6:48:0d:85:73:cf:31:59:bf:f0:05:d6:9b:5f:93:
e7:44:00:32:db:3b:80:17:fd:97:0f:97:8e:ff:10:8a:e2:93:
4d:40:38:8e:ed:23:88:de:a1:dd:6f:60:7d:e3:7d:56:4f:2a:
ae:b5:91:9a:d7:90:ea:73:8e:0c:4e:c3:b6:25:12:66:af:fd:
79:f9:02:b9:c7:6e:aa:c7:98:aa:b2:af:dc:39:1c:82:b1:f0:
89:36:f2:4b:5e:2f:5e:01:77:bf:0b:e9:cf:a5:d0:41:f9:8f:
14:85:a1:17:b6:b9:15:05:a7:23:e4:55:0d:80:3f:19:3e:56:
d4:1a:f4:50:8a:a7:ce:78:32:51:9e:9c:01:14:69:e3:5a:35:
1d:ee:68:f1:12:9c:63:2e:8c:b2:39:06:d4:0b:80:66:fb:be:
26:b0:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:09 2025 by rpki-client