Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20383334.roa
File: 39332e3132372e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CByRVW8t6puLhdvFR0h39oXhAYK5hqC4LG9MRi7C1bM=
Subject key identifier: 11:46:B4:6C:AD:97:0B:A5:C9:6E:A2:76:E3:14:EE:16:C4:01:2F:11
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 01F2EB3A9BADAC2A69C6F00B1FA3CFB790368430
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20383334.roa
Signing time: Wed 09 Aug 2023 13:00:09 +0000
ROA not before: Wed 09 Aug 2023 12:55:09 +0000
ROA not after: Wed 07 Aug 2024 13:00:09 +0000
asID: 834
IP address blocks: 93.127.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f2:eb:3a:9b:ad:ac:2a:69:c6:f0:0b:1f:a3:cf:b7:90:36:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Aug 9 12:55:09 2023 GMT
Not After : Aug 7 13:00:09 2024 GMT
Subject: CN=1146B46CAD970BA5C96EA276E314EE16C4012F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:ed:f5:78:4c:b1:76:2b:e8:60:ee:a5:ff:
a2:36:d2:b3:34:66:14:09:49:2a:5a:88:12:4a:0d:
e4:4c:da:2e:f4:fb:7a:7c:fe:7f:ab:f0:ca:eb:32:
a9:2f:50:f6:ab:9f:4e:d4:91:56:fc:8a:ac:0f:1f:
c3:62:2c:20:2f:0e:06:53:6f:3b:02:a2:b2:c8:81:
f5:a5:0a:e4:41:71:4d:35:3b:15:bd:51:6f:91:74:
54:bf:cb:23:b6:03:c7:d4:fd:06:a7:1e:94:30:ac:
7b:56:ec:97:9b:56:af:30:1a:6b:db:5c:b3:c6:83:
6c:8e:82:b5:4d:7f:0f:88:f1:08:7a:36:fe:3c:14:
81:0a:7d:90:57:95:08:92:8a:48:bd:f1:f9:30:54:
db:7b:87:40:36:58:3c:3b:4f:fc:a3:75:80:38:d5:
e6:e8:a6:43:35:74:f5:69:cc:65:73:6d:b9:8c:84:
8e:0f:2c:51:70:64:01:55:7a:9d:d8:47:99:6c:6c:
6c:80:62:4f:2c:04:f1:81:cc:e1:b2:d1:55:bc:ff:
d9:f9:e9:94:a7:08:39:9b:d4:ec:16:70:06:92:c6:
71:ad:fb:31:a0:ee:26:5f:56:32:44:4a:be:1a:18:
94:09:03:95:5c:c5:fa:27:04:07:fc:67:1d:a7:bd:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:B4:6C:AD:97:0B:A5:C9:6E:A2:76:E3:14:EE:16:C4:01:2F:11
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3b:bf:d3:ce:57:42:f2:78:ca:06:48:69:a4:df:20:0a:e1:
be:3e:d6:82:e1:46:0e:11:f5:55:48:1a:7d:27:e0:82:a7:e2:
a5:7b:36:7e:1e:dd:16:a2:4e:26:1c:5e:16:d8:b6:03:8d:ab:
07:d2:9c:e6:07:5a:76:67:b8:45:ca:ab:13:f4:0b:b2:02:28:
03:68:46:f9:f9:4f:7e:89:46:48:9f:51:a6:c4:4a:0a:e9:ed:
06:1f:fb:65:12:75:52:d2:c8:7e:89:f9:b6:a2:a5:b6:f0:60:
15:fb:b0:ce:9e:f9:a2:94:13:f1:9a:f2:5a:fa:0a:87:ce:ce:
bd:16:ba:fb:cc:0a:eb:7a:16:a2:1f:3d:d7:bb:44:b1:2d:a1:
00:36:46:95:89:ae:39:6f:9d:91:cb:3c:69:5b:cc:72:c1:e8:
f6:cd:d9:e8:68:8c:e6:0d:10:59:02:ab:6f:62:a5:bf:a6:2f:
d3:f4:05:93:dc:53:f7:3c:98:cc:05:37:51:6f:6f:a1:e7:da:
bc:53:ce:8e:5f:fe:29:b0:00:78:86:d1:e5:e8:99:49:80:3d:
9a:27:bd:22:9d:ca:7b:4e:60:7c:67:44:a5:87:db:65:29:fe:
bf:3e:7a:5d:cf:fd:bc:ab:16:a2:16:cd:26:a1:e8:b4:03:57:
11:9c:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org