Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3i/ym6SH4OanqII0Al4j1GPjcPmbdJRGueI6yqnRO7A=
Subject key identifier: FA:7D:BB:90:36:59:E6:C4:88:4D:1C:3F:10:6D:BA:4D:10:A3:55:3A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 56FEDD5CFDB8A02E20E4F6CE1C766F5D8FD1BD25
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e20383334.roa
Signing time: Tue 05 Sep 2023 00:00:06 +0000
ROA not before: Mon 04 Sep 2023 23:55:06 +0000
ROA not after: Tue 03 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 93.127.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fe:dd:5c:fd:b8:a0:2e:20:e4:f6:ce:1c:76:6f:5d:8f:d1:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Sep 4 23:55:06 2023 GMT
Not After : Sep 3 00:00:06 2024 GMT
Subject: CN=FA7DBB903659E6C4884D1C3F106DBA4D10A3553A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:de:5a:30:ca:3e:9e:ba:f0:75:b1:b7:16:
d6:48:9c:98:e6:d4:d4:b9:dc:63:f9:d4:c9:d2:a5:
91:ef:cc:c2:84:22:c3:3f:56:c3:41:71:91:02:74:
80:b6:1d:b1:5f:35:b8:bf:76:9c:69:6e:a6:04:1e:
5b:cc:4e:24:3b:d5:ef:11:6b:c7:60:5f:24:f0:a3:
73:cb:a3:82:95:a3:cb:e2:47:67:e9:c2:45:d2:09:
ba:b4:d2:ad:f2:8d:77:15:84:72:1d:b5:cb:48:19:
ae:08:87:50:ec:cc:77:23:b6:7c:25:60:42:c4:c0:
70:7e:37:4f:53:9f:d7:65:48:17:22:b8:a7:23:83:
f4:ba:50:6a:7c:39:8a:62:85:fa:f1:95:26:dc:6d:
7b:58:f1:e3:b0:e6:69:ee:23:e1:24:4e:52:7c:74:
59:c0:a0:d0:29:b0:72:17:30:18:ff:5f:60:3f:16:
bf:90:4b:0f:75:b8:97:db:7b:68:e7:1d:e1:34:58:
ce:81:00:05:2b:f6:91:51:f4:22:e4:41:19:2a:33:
39:cc:8c:50:7e:7c:19:5f:44:39:ae:83:23:7e:f1:
89:24:95:9a:df:94:b8:cf:80:52:78:a8:64:2c:cb:
27:a1:7f:ca:ca:f6:94:c7:2e:32:ed:ac:65:75:26:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:BB:90:36:59:E6:C4:88:4D:1C:3F:10:6D:BA:4D:10:A3:55:3A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ed:5c:5c:a0:9e:95:3d:62:8d:ba:44:4c:69:01:38:e6:dd:
18:27:55:26:57:ce:ee:9a:62:22:5a:d2:27:3e:6d:c8:40:3d:
f5:15:f2:e3:86:91:e9:d0:5b:82:56:98:b1:b3:86:e9:84:4e:
bc:b1:ad:4c:5c:15:c2:3d:84:26:4d:36:a7:c5:f4:fa:f8:6e:
48:f3:fd:e4:67:e8:98:24:93:15:d0:bd:72:67:06:9c:df:e6:
dd:15:35:b3:b5:4a:b7:34:a7:bb:1d:7d:72:8b:56:3d:09:49:
bf:1a:71:0d:2d:20:d0:93:0d:40:b4:58:cc:e2:e2:2b:1f:2a:
09:44:d8:6d:17:cf:37:48:fe:ea:ff:cd:93:0b:78:57:e8:70:
c7:bd:75:ab:75:c9:4d:be:75:0a:b5:00:e2:df:e4:7b:40:5d:
72:5a:f3:f7:8c:55:9b:d4:c7:3a:ba:e2:c6:f5:c3:f5:35:45:
f6:0b:07:65:20:5e:7b:ec:11:c9:45:75:fa:c0:5e:47:d9:e8:
56:cb:62:48:9e:90:73:a7:76:c8:fe:31:fb:7b:ea:0d:15:0b:
cd:e8:ae:29:e9:66:96:42:7d:df:a5:5b:e4:a8:4f:44:49:50:
8e:7d:d5:50:37:dc:c7:da:ac:39:be:2a:a6:d3:b2:32:a4:a7:
a9:50:7a:3c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUVv7dXP24oC4g5PbOHHZvXY/RvSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA5MDQyMzU1MDZaFw0yNDA5MDMwMDAwMDZaMDMxMTAvBgNV
BAMTKEZBN0RCQjkwMzY1OUU2QzQ4ODREMUMzRjEwNkRCQTREMTBBMzU1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbt5aMMo+nrrwdbG3FtZInJjm
1NS53GP51MnSpZHvzMKEIsM/VsNBcZECdIC2HbFfNbi/dpxpbqYEHlvMTiQ71e8R
a8dgXyTwo3PLo4KVo8viR2fpwkXSCbq00q3yjXcVhHIdtctIGa4Ih1DszHcjtnwl
YELEwHB+N09Tn9dlSBciuKcjg/S6UGp8OYpihfrxlSbcbXtY8eOw5mnuI+EkTlJ8
dFnAoNApsHIXMBj/X2A/Fr+QSw91uJfbe2jnHeE0WM6BAAUr9pFR9CLkQRkqMznM
jFB+fBlfRDmugyN+8YkklZrflLjPgFJ4qGQsyyehf8rK9pTHLjLtrGV1JgvVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+n27kDZZ5sSITRw/EG26TRCjVTowHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMjMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdf9gw
DQYJKoZIhvcNAQELBQADggEBAKntXFygnpU9Yo26RExpATjm3RgnVSZXzu6aYiJa
0ic+bchAPfUV8uOGkenQW4JWmLGzhumETryxrUxcFcI9hCZNNqfF9Pr4bkjz/eRn
6JgkkxXQvXJnBpzf5t0VNbO1Src0p7sdfXKLVj0JSb8acQ0tINCTDUC0WMzi4isf
KglE2G0XzzdI/ur/zZMLeFfocMe9dat1yU2+dQq1AOLf5HtAXXJa8/eMVZvUxzq6
4sb1w/U1RfYLB2UgXnvsEclFdfrAXkfZ6FbLYkiekHOndsj+Mft76g0VC83orinp
ZpZCfd+lW+SoT0RJUI591VA33MfarDm+KqbTsjKkp6lQejw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org