Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e203439393939.roa
File: 39332e3132372e3231372e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: Ag2/4m+UhzkHrTywZa38CG4Y7P5R7ZH/5YB0/+1U1Zg=
Subject key identifier: DD:97:33:A4:43:68:C0:E8:F8:C5:1F:F8:2C:CC:87:6E:E6:7E:7F:8C
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5522F32A989565D2C3B2B18B4C352165AF22E850
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e203439393939.roa
Signing time: Sat 28 Jan 2023 22:23:00 +0000
ROA not before: Sat 28 Jan 2023 22:18:00 +0000
ROA not after: Sat 27 Jan 2024 22:23:00 +0000
asID: 49999
IP address blocks: 93.127.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:22:f3:2a:98:95:65:d2:c3:b2:b1:8b:4c:35:21:65:af:22:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 28 22:18:00 2023 GMT
Not After : Jan 27 22:23:00 2024 GMT
Subject: CN=DD9733A44368C0E8F8C51FF82CCC876EE67E7F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:ba:6c:d4:bb:cb:9d:85:ce:df:9e:26:17:
c4:1a:73:90:fe:c9:e2:e3:40:02:ee:bb:1b:44:90:
7a:e7:b8:7f:44:bb:2d:93:1c:d5:c4:11:00:e4:ad:
b0:d9:04:3a:aa:35:d8:cb:73:5c:ef:b2:44:39:a1:
d6:d1:00:31:fd:15:40:6d:81:18:44:44:91:f3:d1:
9d:91:c1:aa:75:1c:2a:dc:ef:af:f4:76:f6:b7:32:
ce:3b:9f:b7:1b:ea:7d:32:4d:4d:e5:23:ea:0e:53:
4c:fb:6f:8f:4d:b5:22:5a:60:6b:31:79:30:8b:f3:
aa:9b:3b:9f:4d:29:d5:7e:89:54:46:66:fc:63:ee:
e5:0b:e4:2e:b6:c4:9d:1c:d3:a1:50:de:08:e7:b6:
ad:71:83:2a:8c:6e:ac:8e:39:e3:2a:7f:db:d9:07:
38:7a:41:19:0c:9e:47:f1:20:26:3f:7e:e9:06:c4:
a8:a1:75:b2:35:45:d4:aa:18:02:cf:2f:3c:9d:2d:
17:63:5f:0b:43:53:a8:39:9d:38:bf:8b:3a:6e:06:
a6:f3:a3:ec:a7:70:1b:8b:ad:cd:0a:f6:b9:84:8e:
3b:45:cd:9e:01:07:2e:db:c1:ba:84:b7:41:97:33:
18:a9:e7:4f:a1:16:ef:7b:62:86:b1:81:29:c1:2f:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:33:A4:43:68:C0:E8:F8:C5:1F:F8:2C:CC:87:6E:E6:7E:7F:8C
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231372e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e3:7a:08:b0:71:12:64:13:d1:7f:71:81:ab:11:57:56:ce:
27:c3:c3:85:3f:d4:00:a1:15:0a:19:fe:74:21:82:90:c4:72:
e1:6d:09:1b:04:ef:28:0f:7f:2b:8f:19:86:5c:9d:e1:40:5d:
4b:c1:53:07:aa:d3:1d:a7:13:df:d1:80:ef:ab:0f:55:86:b6:
77:ca:ac:a8:d4:a0:0e:2c:a8:73:c5:68:f6:c0:13:88:00:0e:
15:6d:50:aa:5b:2f:fd:e0:e1:89:48:10:16:be:21:bf:26:00:
b2:36:65:7d:30:6b:d1:ae:f3:27:2e:da:38:a3:69:2d:2a:d1:
8c:4b:4d:c7:c4:9e:10:6c:6c:bf:ec:b0:65:d5:b2:d3:47:12:
24:8f:66:4c:85:a5:36:da:f1:93:5b:31:74:28:f5:39:90:99:
51:50:73:d8:ea:7f:4b:f2:9c:df:77:21:1b:4e:11:12:bb:00:
5c:00:de:b6:b5:22:89:8a:89:8e:98:83:91:15:c7:eb:a7:dd:
ad:dc:4e:95:b4:b5:46:10:de:c5:36:8f:03:c3:c4:46:9d:26:
af:6b:5e:d2:43:8b:ef:c9:0c:08:70:8c:8c:f4:c2:3f:c0:f0:
e6:06:3c:e9:98:69:40:c8:68:03:aa:54:b0:28:f4:17:15:09:
f8:e6:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org