Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e203630373231.roa
File: 39332e3132372e3231322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: yg12cIKuPRd7pez3YIWPAB4yVpq3gLNOyDjWZ3a0rQ8=
Subject key identifier: 1C:4A:42:FF:2C:F0:99:07:CA:86:CF:97:71:68:E3:0A:99:BC:40:E9
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 76DE102033BEFB85CA8AF54801C2A71A2DA800F6
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e203630373231.roa
Signing time: Sat 01 Apr 2023 01:16:58 +0000
ROA not before: Sat 01 Apr 2023 01:11:58 +0000
ROA not after: Sat 30 Mar 2024 01:16:58 +0000
asID: 60721
IP address blocks: 93.127.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:de:10:20:33:be:fb:85:ca:8a:f5:48:01:c2:a7:1a:2d:a8:00:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 1 01:11:58 2023 GMT
Not After : Mar 30 01:16:58 2024 GMT
Subject: CN=1C4A42FF2CF09907CA86CF977168E30A99BC40E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:06:fd:61:87:26:59:34:ed:47:66:2e:91:
d9:6f:0f:19:90:80:60:3c:b2:5d:56:0e:dc:dd:c2:
60:c5:8f:a7:80:0d:51:67:11:46:a3:66:1e:ca:8a:
7a:e6:e5:17:9d:7b:dc:4d:5b:1c:11:70:8c:36:81:
7d:58:56:f7:c7:03:ee:44:fa:1f:3a:52:22:77:14:
96:56:97:3a:28:8a:c5:0b:6e:ac:43:c1:12:5c:a8:
04:18:b1:41:5b:9f:c7:0f:88:cc:8c:7b:0b:db:c9:
ba:cd:b4:78:85:3c:3f:4f:1a:4a:a8:b9:c1:fe:da:
93:55:4d:8f:42:6d:20:84:f4:fc:02:88:26:b7:85:
b8:65:e7:78:d3:a9:f0:cc:f5:78:ac:d2:0f:f1:64:
2f:60:0b:ac:ee:c6:ed:cc:4d:76:36:98:69:f5:86:
a1:fe:dd:9f:b0:0a:27:2b:64:1b:ff:a2:ae:9e:3c:
11:72:b3:de:24:80:19:f8:bb:2d:8d:e2:f7:e3:b5:
36:b2:8d:63:01:d0:cd:2f:2b:75:3f:a4:f8:a5:61:
d0:9c:24:4f:c4:cd:b0:6d:38:de:bc:1d:7f:e0:60:
72:76:26:59:2f:60:bf:7a:31:a0:1e:ee:84:e6:7c:
f7:57:0f:49:59:81:3d:95:d8:1a:79:06:f7:0f:50:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:42:FF:2C:F0:99:07:CA:86:CF:97:71:68:E3:0A:99:BC:40:E9
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231322e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.212.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b6:ea:2e:ec:5d:8e:e9:ee:8a:91:03:cf:52:1e:fb:2f:da:
f6:e3:c3:36:44:dc:c0:c3:3b:80:cf:b2:aa:c8:92:5f:cb:2a:
ee:fd:97:2e:09:f6:9c:04:e0:96:9b:9b:c0:51:cb:0b:1e:93:
25:52:7e:f1:ee:b9:3f:5e:e7:c3:0d:76:e0:2a:da:99:7c:aa:
da:bc:d5:f0:88:22:41:fe:1e:7a:37:71:d0:7b:7e:5a:4b:b9:
2d:19:39:81:32:b1:7c:44:26:e4:61:89:23:4c:2f:3c:9e:75:
bb:5b:62:b5:66:45:cc:7f:1c:c7:a6:02:89:c5:8c:f2:3d:30:
40:1d:1b:18:fd:db:e8:82:38:6a:94:28:3f:8e:34:e5:cb:7b:
bc:18:48:f5:c5:6d:a9:b9:0c:45:f5:27:f2:37:b1:e5:30:9b:
18:de:8b:a0:7c:9a:ef:54:7c:ca:c2:d3:6d:b5:f0:5b:95:34:
a3:0a:0b:7f:30:93:86:33:e4:2d:ec:8d:77:54:81:a0:9a:ac:
5c:1e:d0:de:dc:63:e7:fd:1a:31:54:07:04:55:d5:93:45:79:
ce:5b:80:28:16:0f:76:70:e6:cf:ef:0c:6b:dd:96:8f:5a:27:
94:f9:08:8f:44:7d:e4:ac:a1:d7:09:c6:60:e7:7c:dd:29:e0:
5c:94:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:51 2025 by rpki-client