Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231332e302f32342d3234203d3e203630373231.roa
File: 39332e3132372e3231332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: t+Qk44JaZIi9/KPiSnJfOs0q4E+PAOiVecfmMvcvviU=
Subject key identifier: 28:39:2D:D3:C5:83:4B:73:BC:B4:CE:39:9F:13:BF:E7:45:C0:73:03
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3C636AD0368FDF4FECE3EDF49F6B399C45F9AC4A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231332e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:14 +0000
ROA not before: Fri 20 Jan 2023 06:21:14 +0000
ROA not after: Fri 19 Jan 2024 06:26:14 +0000
asID: 60721
IP address blocks: 93.127.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:63:6a:d0:36:8f:df:4f:ec:e3:ed:f4:9f:6b:39:9c:45:f9:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:14 2023 GMT
Not After : Jan 19 06:26:14 2024 GMT
Subject: CN=28392DD3C5834B73BCB4CE399F13BFE745C07303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:ed:da:88:7e:f0:87:b4:4d:99:18:03:cd:
14:fc:cf:2e:63:b7:b2:4c:42:92:28:bd:d9:35:0c:
57:51:61:6c:57:9c:1d:6b:54:9e:2b:71:1c:95:ca:
23:06:47:f8:52:d1:3f:1d:40:f8:1e:d1:76:f1:e9:
83:ea:96:4b:3a:aa:55:01:2b:fb:ee:f8:0d:8d:09:
48:fa:91:d7:c5:95:18:d1:15:5b:88:11:8e:71:5d:
a3:dc:47:b1:0c:4d:62:03:c3:ef:b9:07:b6:2f:3d:
26:5d:c5:ff:e1:b1:c5:8e:2d:7f:64:bf:4f:6f:e2:
99:e2:a3:21:bb:c1:4e:c1:4e:d8:a1:29:63:c4:cb:
6d:4f:64:33:fe:c4:39:af:5e:fe:4a:a5:bd:a7:f3:
48:e9:21:ae:2d:4f:86:a7:00:69:d9:7c:ad:80:b0:
cc:a3:57:60:96:f6:55:f9:6f:d7:c5:15:2c:c7:97:
11:f8:76:ed:a4:e0:26:5d:67:80:42:22:3e:fe:e3:
b7:18:76:3b:c1:b3:cd:7d:3a:cd:17:57:38:f5:b2:
62:a8:87:45:ad:25:d4:cf:46:fe:84:07:11:93:74:
b0:c6:90:8d:11:27:99:98:0f:63:57:92:64:03:f8:
41:25:5e:f4:9e:6c:bc:20:58:72:94:c8:30:69:f5:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:2D:D3:C5:83:4B:73:BC:B4:CE:39:9F:13:BF:E7:45:C0:73:03
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231332e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c5:a6:a1:0e:51:5d:57:e0:6e:bf:03:1e:9a:bb:c8:76:57:
2a:10:d5:4a:b2:7a:c9:db:83:f6:6a:04:70:25:a6:d9:4b:89:
70:b5:70:93:4f:ce:d3:db:9e:ee:d2:7c:27:59:f8:4f:4b:25:
1d:d9:18:b3:26:0d:2f:f1:b8:77:6e:b3:10:50:41:ac:ec:71:
be:38:58:cc:4f:d7:43:fa:f4:de:67:75:0d:b2:01:ed:56:1f:
83:26:2d:98:2d:63:81:af:54:a8:f9:66:c8:4f:c9:ac:44:0d:
33:7e:bc:23:ea:b6:0e:34:97:79:9f:54:48:a4:9b:2b:75:4a:
3f:cc:6e:46:6f:c4:36:2c:df:12:c0:ac:8d:d0:30:a6:e5:03:
2f:09:18:57:3e:c5:b2:61:8f:d6:8a:e0:80:6f:d0:ed:04:6a:
5d:ce:18:ff:e3:af:db:50:60:40:ab:88:2e:58:36:7f:d2:b4:
ef:43:2e:67:87:02:28:0c:5a:4d:0d:f2:c9:36:31:a8:be:d6:
3c:6d:ab:15:29:f9:ba:63:3c:2a:53:2d:2b:be:fd:c9:0f:d7:
75:4e:16:b5:0b:34:74:23:6b:53:27:54:7f:49:4f:44:2b:1d:
97:85:5f:9a:df:a0:d0:98:69:53:e4:76:5d:78:ce:4a:81:2a:
42:1a:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org