Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232322e302f32342d3234203d3e203538323132.roa
File: 39332e3132372e3232322e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier: ZDs1KiYGL+wvrAFnhoBJvVoD02vV0RQiRlRiawfKRho=
Subject key identifier: 6F:0E:15:78:D3:35:C0:A0:9D:73:C8:9B:7F:A5:38:16:7A:40:0D:10
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4E9A3F7194E2B33F4DED2A044D785303F244225E
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232322e302f32342d3234203d3e203538323132.roa
Signing time: Fri 20 Jan 2023 06:26:14 +0000
ROA not before: Fri 20 Jan 2023 06:21:14 +0000
ROA not after: Fri 19 Jan 2024 06:26:14 +0000
asID: 58212
IP address blocks: 93.127.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9a:3f:71:94:e2:b3:3f:4d:ed:2a:04:4d:78:53:03:f2:44:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:14 2023 GMT
Not After : Jan 19 06:26:14 2024 GMT
Subject: CN=6F0E1578D335C0A09D73C89B7FA538167A400D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:bc:0f:3a:08:29:03:bf:32:f0:00:35:29:
74:bb:c8:39:82:eb:79:c8:f2:e7:fb:62:40:96:c4:
e7:1a:4f:6a:4f:fe:4b:f6:ac:8e:6a:37:ae:2c:c3:
5a:5c:a0:14:02:cf:c8:f1:27:cb:d6:00:87:63:5d:
ac:ff:cf:13:1a:0a:3d:fd:81:bd:fc:ef:e9:46:2c:
80:c8:87:32:e8:22:e5:c1:05:73:e3:03:82:14:68:
f6:fb:10:86:8a:67:b2:24:bd:a9:df:b2:50:0f:21:
bb:b1:a3:18:a9:e6:49:30:71:1b:52:93:c3:f5:65:
b7:20:f0:40:71:94:ae:3e:53:18:c5:4c:c1:02:20:
2f:cf:d3:a5:56:5f:1a:7c:26:70:3b:84:63:03:2e:
30:3a:c1:b6:f7:be:61:11:91:7e:91:09:0d:26:53:
47:ba:27:93:92:da:d1:64:30:84:37:da:27:b0:42:
2b:99:2f:c6:01:c0:17:2f:f0:56:94:a3:52:7b:5a:
66:4d:89:20:8b:f1:cc:86:3d:61:33:11:8b:5a:57:
37:7d:94:cb:20:b2:7b:13:f3:ef:74:9f:be:94:9e:
28:32:e4:81:22:dd:a4:9a:ec:a6:7c:7f:5e:49:07:
15:e1:ae:6a:5f:b4:9a:96:b5:4f:00:c7:e4:11:c7:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:15:78:D3:35:C0:A0:9D:73:C8:9B:7F:A5:38:16:7A:40:0D:10
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232322e302f32342d3234203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c8:78:fa:b0:2a:e2:a3:79:a9:5e:ef:ae:ad:bd:f9:dc:88:
67:3a:e6:a0:bc:66:56:be:96:6d:ca:47:3d:45:df:a8:99:05:
fc:37:59:89:72:a8:d9:ac:64:c6:fd:bb:00:e5:d6:b0:c9:a9:
65:9f:0b:b1:f7:fe:38:78:dd:1f:f8:57:47:c3:4c:1c:63:a9:
87:99:bb:c5:1f:5a:46:77:db:24:74:ad:33:37:07:ed:df:95:
eb:d8:17:45:3d:ef:fc:31:1d:14:e4:f3:e2:69:76:9b:f6:c7:
13:e9:38:e5:dc:f3:c8:33:c0:d6:91:80:06:e2:b2:ef:54:7e:
4a:23:c0:8a:23:9c:d0:7d:0e:60:12:58:d1:d4:21:ad:64:38:
35:1f:a0:e0:c0:05:06:57:65:6a:56:bf:07:06:72:0d:53:33:
07:89:37:42:dc:4b:03:2e:ce:e9:7c:87:86:a5:dd:57:a7:7e:
e9:69:2e:0a:6b:b1:5c:a4:5f:a9:de:f6:4f:2c:cc:9c:29:77:
63:ed:23:84:ea:9b:15:08:c3:07:e9:b6:ca:9b:f5:c5:07:e4:
04:53:96:19:d4:39:1a:44:fc:5d:39:73:ef:a4:43:a5:1f:33:
18:fd:b8:f9:8d:2b:a6:40:e8:bc:95:8b:d2:54:aa:fd:89:65:
a1:a3:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org