Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20323034383433.roa
File: 39332e3132372e3232302e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: MYCqAjwcaYGxOEE+Jb5i840d9EY6qV0Swx/1BxNAxqM=
Subject key identifier: 36:C6:46:9A:34:16:A4:5B:F6:56:02:DA:AD:B9:AE:06:B6:64:16:CE
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3C1DEC56BA40C3ED03E55A8D9EC8D708817E78DC
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20323034383433.roa
Signing time: Sun 09 Jul 2023 22:35:21 +0000
ROA not before: Sun 09 Jul 2023 22:30:21 +0000
ROA not after: Sun 07 Jul 2024 22:35:21 +0000
asID: 204843
IP address blocks: 93.127.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1d:ec:56:ba:40:c3:ed:03:e5:5a:8d:9e:c8:d7:08:81:7e:78:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 9 22:30:21 2023 GMT
Not After : Jul 7 22:35:21 2024 GMT
Subject: CN=36C6469A3416A45BF65602DAADB9AE06B66416CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:98:f1:78:94:0f:99:d1:da:06:b9:04:ad:
42:4c:55:ad:de:e8:c0:09:b7:dd:83:38:38:10:7d:
0e:c6:c4:bc:dc:f9:1d:75:f6:dd:c6:19:55:a0:4f:
01:2d:6b:3a:d2:ed:7c:0b:77:be:74:fc:9b:6d:9b:
d0:20:dd:9c:a5:21:f1:99:ee:c2:06:da:fd:4b:22:
b2:aa:3d:47:fe:2d:57:0c:37:4a:26:e1:cb:94:37:
fe:31:87:18:92:8d:95:fc:6e:e3:26:5d:e5:e5:40:
d3:49:8f:3d:1d:2f:f1:83:a3:39:7e:61:4c:6f:16:
0d:5e:79:81:d9:8f:14:79:96:bb:4c:4d:93:71:66:
29:e4:b7:7b:ef:55:23:54:a7:81:e0:2c:b9:7b:20:
21:dd:61:a5:75:a3:45:1e:e0:b6:c5:5a:c8:08:a9:
77:55:f0:6c:d6:e6:6f:f3:88:45:5a:31:7d:b9:58:
0e:1e:26:e8:d0:47:c5:6b:23:45:2e:f2:94:a3:43:
c6:01:05:76:b5:56:c6:72:27:80:d3:7b:50:b5:04:
83:e7:98:fe:7f:1a:45:b5:e4:1b:04:5a:81:b0:51:
31:18:76:03:89:d5:13:cc:05:17:5e:ba:f8:a7:b5:
55:cd:88:29:2a:49:42:a4:40:b2:3e:58:fa:aa:8f:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:46:9A:34:16:A4:5B:F6:56:02:DA:AD:B9:AE:06:B6:64:16:CE
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2f:7c:ab:f8:b5:45:2a:97:74:cd:76:ef:0b:2b:fc:63:f1:
96:7e:fe:25:40:84:1c:f2:e8:a5:84:2d:15:55:11:79:6b:07:
07:a8:40:72:22:cd:8b:e1:c5:3e:b0:af:e9:6b:cf:5d:e5:09:
83:32:76:25:29:4b:43:d0:15:b1:fb:ff:29:d2:fc:e2:6f:4f:
ce:4b:3f:57:8f:ec:16:fe:d2:16:95:f6:11:6d:58:7e:2b:e7:
7c:14:7a:4f:5c:0f:0a:de:f6:10:9b:d2:19:2e:0f:c6:6f:5a:
34:57:1b:34:ec:cf:af:99:e7:f5:3e:81:00:30:16:0d:31:aa:
5a:98:0e:34:75:f1:a4:e0:c6:61:ba:16:11:76:f1:19:7f:03:
28:f7:ad:92:74:b3:0a:1a:47:bb:d4:1e:49:09:b4:d6:7b:4f:
7e:8c:64:37:01:8b:80:10:b9:a0:8d:54:3d:3c:b0:f5:de:59:
e1:6d:8f:4e:7e:b0:c2:de:6d:23:c5:cc:47:2c:5c:69:16:3a:
b0:33:e6:cb:c7:7a:6d:30:25:42:6d:4e:e9:0e:ae:45:ef:0d:
c4:f8:a6:d7:fb:7d:05:3f:20:ca:7b:91:14:13:4d:11:37:74:
f5:e4:a5:58:60:e7:8d:70:ba:94:84:64:1e:13:8a:ef:8d:f6:
27:d4:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:25 2025 by rpki-client