Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232312e302f32342d3234203d3e203631333137.roa
File: 39332e3132372e3232312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: hAZF5VexNO/DlVgJiDE0/XUDxNJvepJx241wpWKL27o=
Subject key identifier: AD:D0:53:F0:79:08:E8:52:AA:83:4A:EB:98:64:FE:98:63:5D:D4:83
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 11A2C464CF6FE93D7965631EDA4066CFC3FCF161
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232312e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Jan 2023 06:26:14 +0000
ROA not before: Fri 20 Jan 2023 06:21:14 +0000
ROA not after: Fri 19 Jan 2024 06:26:14 +0000
asID: 61317
IP address blocks: 93.127.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a2:c4:64:cf:6f:e9:3d:79:65:63:1e:da:40:66:cf:c3:fc:f1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:14 2023 GMT
Not After : Jan 19 06:26:14 2024 GMT
Subject: CN=ADD053F07908E852AA834AEB9864FE98635DD483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:b7:f0:8e:14:9b:86:3c:24:d1:4b:e8:4e:
f0:a2:28:1b:72:89:b6:ec:5c:34:6b:be:26:54:57:
99:51:1e:db:18:6f:e6:7e:93:a5:89:48:c9:ba:28:
aa:80:8d:01:7f:f6:49:05:1e:c9:e2:e2:6f:c8:2f:
fb:1c:89:2f:6f:72:1b:86:f2:58:59:3c:cc:ee:8f:
ac:c3:e0:9b:16:53:d0:12:4d:c4:69:4f:e7:8e:35:
04:9c:dc:71:3e:f5:74:a3:39:63:60:68:ba:e9:66:
41:48:5a:7a:f1:5d:33:e7:5b:4e:88:39:bb:ba:82:
ff:82:d8:8b:fc:72:10:23:6e:7c:d2:df:96:f5:5c:
8b:15:64:dc:ca:89:86:1f:94:75:3d:8a:65:d7:d6:
59:47:83:74:5e:64:15:a8:d0:70:e4:6a:1c:1d:48:
69:0a:d3:f4:f1:16:9b:66:87:f8:f7:8d:74:d0:f2:
72:93:24:9a:56:d7:03:dc:83:b8:22:a3:64:20:f2:
56:de:ae:83:f8:99:fd:16:7c:69:be:5c:ef:2f:2f:
84:59:3f:17:00:6d:5c:41:00:d8:92:d2:47:30:e2:
be:61:ff:c3:cd:6a:ce:47:c6:4b:b4:06:9d:04:ce:
12:a4:4d:c1:1d:03:76:01:62:ca:18:fe:b7:ce:0f:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D0:53:F0:79:08:E8:52:AA:83:4A:EB:98:64:FE:98:63:5D:D4:83
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.221.0/24
Signature Algorithm: sha256WithRSAEncryption
43:13:58:fc:ab:4d:5a:e4:71:31:44:86:16:58:fa:71:14:b7:
42:46:03:b1:96:95:31:86:1d:5b:7f:fd:7e:64:11:52:66:6a:
90:6c:99:ca:91:76:c7:3d:6f:c5:c5:80:38:55:33:18:b7:9c:
2a:e6:9d:68:d0:3e:d5:18:de:01:1f:ee:9a:b4:56:37:f2:ac:
7b:bd:51:fb:22:7b:0d:43:39:53:80:9e:4d:ad:5e:2b:e7:1f:
06:ac:c4:b4:63:3d:fa:9e:da:b2:28:4e:d0:53:18:1e:62:51:
a5:11:8b:4b:1d:0c:77:cb:e0:c8:2d:b2:f6:32:e0:43:f8:8f:
a0:45:48:bf:a6:5d:5d:82:3b:3a:2a:3e:57:42:9e:c3:c7:54:
bd:76:98:41:e4:a1:ee:5e:fa:e3:dc:81:76:38:68:0a:d8:5d:
2d:56:55:bf:a1:93:c0:12:99:f3:2a:ae:7e:02:b8:b8:f1:d9:
59:76:c7:1c:a9:eb:f9:04:06:aa:cb:00:c8:f2:db:0a:28:28:
c5:94:7f:ba:61:1b:52:54:49:68:64:64:96:d9:22:d5:7b:9f:
31:ee:40:a7:64:7d:40:2b:cd:91:e2:94:9e:9e:99:c6:93:70:
ff:ed:70:60:51:6b:b0:fc:72:dc:1e:9f:9d:95:d6:85:63:0c:
af:16:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org