Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3234382e302f32312d3231203d3e203632333336.roa
File: 39332e3132372e3234382e302f32312d3231203d3e203632333336.roa (raw, json)
Hash identifier: vKdMwKeyzdOa7fQd7SqG7DIrD/5GmnempcBIGGhpD+w=
Subject key identifier: D3:37:9A:6E:62:8D:F8:9D:B3:30:6D:86:1F:6C:A0:E2:FB:64:12:C0
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4CF09FB4B5ABD103E3547A312B8C647E77F09F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3234382e302f32312d3231203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:15 +0000
ROA not before: Fri 20 Jan 2023 06:21:15 +0000
ROA not after: Fri 19 Jan 2024 06:26:15 +0000
asID: 62336
IP address blocks: 93.127.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f0:9f:b4:b5:ab:d1:03:e3:54:7a:31:2b:8c:64:7e:77:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:15 2023 GMT
Not After : Jan 19 06:26:15 2024 GMT
Subject: CN=D3379A6E628DF89DB3306D861F6CA0E2FB6412C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:55:65:a9:8a:05:94:b8:e3:62:9f:83:49:
78:14:cf:cd:49:db:ca:f3:d3:67:56:18:9f:32:8e:
c4:df:8d:8a:be:2e:45:23:03:c7:4e:9c:36:0d:e8:
ed:0a:1d:8d:b1:04:aa:09:03:0f:3d:2f:13:38:bc:
90:77:cc:1e:35:e4:68:76:13:bc:a9:1a:80:d7:b1:
b2:79:0b:bc:0e:73:a6:48:33:0e:56:a5:84:65:b3:
82:02:1a:44:1e:82:18:87:c6:f9:9f:f7:0c:13:25:
31:38:66:be:f2:1b:c4:cb:e5:f8:17:a8:d7:46:64:
f3:84:6a:f8:ff:b7:9c:1f:76:0b:73:ae:06:72:d0:
df:28:df:eb:07:2a:03:39:5c:e4:6a:81:30:44:a7:
2d:43:17:3a:15:86:e4:9d:58:f7:a2:87:b4:9b:8c:
0a:ee:0f:c2:20:59:ec:58:57:06:c9:75:09:5e:0a:
7b:36:e1:40:ee:1c:93:77:5f:c5:34:09:2a:d9:34:
aa:06:2b:6e:6d:4e:29:de:d9:bc:eb:ff:40:4f:a2:
9b:c2:30:4b:04:70:18:81:50:01:a3:0e:ec:ab:95:
54:67:79:90:9b:c5:0c:de:c6:3c:f7:07:da:4e:d8:
ce:77:54:12:04:75:8b:fd:2c:5a:4c:b6:19:ea:6d:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:9A:6E:62:8D:F8:9D:B3:30:6D:86:1F:6C:A0:E2:FB:64:12:C0
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3234382e302f32312d3231203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.248.0/21
Signature Algorithm: sha256WithRSAEncryption
20:31:d1:7a:0d:97:53:05:3e:4a:8a:08:cc:6b:78:de:a5:a9:
25:ef:a7:d6:36:47:bb:d0:c3:0f:79:3e:97:72:16:72:1f:f4:
95:a6:2b:83:43:6e:30:d3:23:6b:c3:e3:93:18:ef:46:06:e4:
69:66:de:db:c4:c5:5f:ef:59:1d:4e:ea:5e:c6:c7:59:92:b0:
ed:e2:ff:52:12:ff:2c:30:fa:c4:da:92:9b:83:63:21:07:e0:
f1:8c:8f:58:08:19:c0:37:6d:a1:8e:bc:2f:52:5f:e6:78:61:
26:aa:e4:48:8b:b3:1b:90:d5:81:15:13:da:e1:a5:23:de:a0:
3b:c9:b9:0a:85:a3:63:8e:e9:3d:64:c3:b9:87:54:e4:34:42:
9e:27:fe:f4:72:2e:20:94:48:f9:5e:36:cd:b5:da:14:58:af:
c9:51:a0:17:15:c7:67:e2:80:1a:cb:cd:58:31:28:2d:02:80:
a2:f5:35:55:47:5b:ca:14:7f:a9:ee:bb:c7:04:ef:16:82:67:
e8:aa:ad:f1:a4:4e:63:de:05:ef:23:0f:d8:5e:47:53:db:05:
f4:ad:9d:a6:01:30:c8:ec:2e:13:8e:57:7c:92:fb:ca:d1:f1:
a3:ce:70:6e:e4:f8:e9:13:4f:72:09:fe:0c:a3:44:2f:d5:25:
52:59:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:11 2025 by rpki-client