Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e2038383933.roa
File: 39332e3132372e3232342e302f31392d3139203d3e2038383933.roa (raw, json)
Hash identifier: wM70ZU+SiWUTJVuYK7k3oeFSm20KXFzMmQ61ghdA61Q=
Subject key identifier: 10:C8:26:A0:2E:5E:5A:6C:1D:E4:FA:8D:AF:60:08:6F:A8:7B:F0:E7
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3518F8D4C50228E2C5631C94A5316CB3A66D52D4
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e2038383933.roa
Signing time: Fri 20 Jan 2023 06:26:14 +0000
ROA not before: Fri 20 Jan 2023 06:21:14 +0000
ROA not after: Fri 19 Jan 2024 06:26:14 +0000
asID: 8893
IP address blocks: 93.127.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:18:f8:d4:c5:02:28:e2:c5:63:1c:94:a5:31:6c:b3:a6:6d:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:14 2023 GMT
Not After : Jan 19 06:26:14 2024 GMT
Subject: CN=10C826A02E5E5A6C1DE4FA8DAF60086FA87BF0E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:92:2c:34:81:0f:d5:b7:42:f2:de:ef:a9:
77:c9:f0:57:1f:30:21:f1:77:48:94:65:d4:91:d4:
79:3f:d9:5f:f9:be:bc:fc:fb:5f:75:19:9a:da:df:
3e:3f:65:61:c4:b8:cd:15:10:f7:19:30:ab:0b:ae:
55:08:55:3f:ae:68:fb:8b:63:49:1a:90:55:f1:12:
16:f5:0a:dd:c4:ff:b4:d3:ca:f2:96:f7:8c:21:0a:
69:41:12:42:83:26:2f:c9:92:a6:9f:ce:6d:0c:ef:
34:1b:b2:fa:cc:a9:2b:91:61:3a:07:30:24:20:3e:
af:c4:c5:8d:e3:03:d4:aa:c0:be:65:9a:2b:98:fb:
d9:4e:f1:2d:ba:77:26:4a:67:7b:8f:b4:dc:7a:0e:
0f:25:46:6c:e4:ab:e5:4f:b0:ba:19:e8:d0:a1:b5:
3c:a0:2e:dc:1b:f8:65:b1:04:5a:f5:d4:94:f2:0b:
3a:88:19:2d:cb:14:07:bd:14:1d:c9:03:b5:57:49:
21:c4:69:b9:6e:1e:8a:2c:6d:f2:be:e5:79:22:2c:
bf:24:b5:37:cd:62:e5:d4:b5:c5:52:b8:8b:eb:8c:
05:da:18:81:c4:26:8e:8e:4d:a6:1d:17:4a:6c:d3:
e9:43:1e:b0:79:77:38:a7:16:a5:60:79:55:a9:1d:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:26:A0:2E:5E:5A:6C:1D:E4:FA:8D:AF:60:08:6F:A8:7B:F0:E7
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232342e302f31392d3139203d3e2038383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.224.0/19
Signature Algorithm: sha256WithRSAEncryption
25:7a:ed:03:ae:95:3f:b7:bb:4d:e7:66:e2:36:d5:de:64:16:
67:c1:1a:c0:f8:50:9a:68:76:a5:b4:f5:eb:07:12:b7:1a:ca:
f2:f0:46:71:77:6f:79:c8:a8:33:71:ed:08:9f:ec:8a:26:2d:
11:d8:0a:f6:55:c7:f1:fe:a5:43:03:05:88:b0:03:35:f8:e4:
37:09:89:12:c8:e3:19:37:0c:9d:74:c8:a4:54:87:0c:91:83:
72:d9:35:b5:ff:e6:dc:7f:93:d8:c3:97:5b:ed:86:98:f0:6c:
9a:c5:17:6d:32:7f:e3:9e:8d:10:9c:b1:77:fb:3c:99:64:ed:
76:49:5d:df:21:67:8c:f2:50:03:df:b7:c3:1e:02:23:7f:88:
4f:2d:62:a6:12:56:cf:aa:f9:be:59:bc:49:1b:63:f9:60:90:
8d:65:5c:8d:59:72:14:5d:a6:bd:fa:13:5e:52:e4:8c:6a:37:
5a:e3:23:dd:40:d8:48:9b:b5:9e:6a:e2:3d:7d:40:d4:4f:0d:
f1:b5:01:22:bc:ae:ab:88:95:f8:b1:ad:1a:ba:94:ae:55:c5:
58:50:83:13:31:09:d8:97:81:f7:25:e3:b1:6f:4f:50:7c:3c:
07:17:b9:46:ac:32:e1:bf:df:82:6f:1a:88:56:dc:0b:eb:0e:
3b:f5:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org