Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/39332e39332e38302e302f32312d3234203d3e203230343733.roa
File: 39332e39332e38302e302f32312d3234203d3e203230343733.roa (raw, json)
Hash identifier: Qln7kK6JwoKqSs+rgmBRv4MQVzzQ9FTaWMjqONlQgX0=
Subject key identifier: 93:00:A5:76:1A:1F:58:23:48:28:A2:1F:97:C0:E7:6E:C5:E8:B8:6E
Certificate issuer: /CN=0da6a545a238763be9cc7aec1cbc4609e8cbf6a8
Certificate serial: 56A0A034D1365FB70F3358B61D650B106A425499
Authority key identifier: 0D:A6:A5:45:A2:38:76:3B:E9:CC:7A:EC:1C:BC:46:09:E8:CB:F6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaalRaI4djvpzHrsHLxGCejL9qg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/39332e39332e38302e302f32312d3234203d3e203230343733.roa
Signing time: Thu 28 Dec 2023 01:35:33 +0000
ROA not before: Thu 28 Dec 2023 01:30:33 +0000
ROA not after: Thu 26 Dec 2024 01:35:33 +0000
asID: 20473
IP address blocks: 93.93.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a0:a0:34:d1:36:5f:b7:0f:33:58:b6:1d:65:0b:10:6a:42:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da6a545a238763be9cc7aec1cbc4609e8cbf6a8
Validity
Not Before: Dec 28 01:30:33 2023 GMT
Not After : Dec 26 01:35:33 2024 GMT
Subject: CN=9300A5761A1F58234828A21F97C0E76EC5E8B86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:b3:ac:78:8f:47:ea:7e:1c:f6:70:d5:a3:
66:fe:87:9b:a4:6f:96:80:a0:02:2b:0d:43:6e:29:
c2:99:45:91:87:83:bc:4d:9f:3a:38:6f:d0:d6:cc:
90:bf:c1:dd:07:fc:63:ec:03:6f:fd:8e:9e:4f:27:
1b:cb:75:c3:c4:b3:5f:1a:d0:7b:64:0b:24:31:52:
44:a1:b4:0f:b7:81:b7:c4:b4:75:37:9a:08:32:c0:
3d:dc:0a:63:93:e7:ea:8f:66:38:05:cb:49:dc:d4:
ee:58:9a:0e:3e:69:72:92:a1:fb:33:d2:39:c7:b8:
69:34:23:22:d9:03:84:57:d5:9f:06:8f:3a:8f:96:
e4:c5:be:e6:89:08:13:24:9d:45:05:36:82:ce:b2:
36:50:9b:47:eb:95:80:5c:94:ac:af:d2:54:88:3c:
1f:3f:75:59:37:3c:1a:7b:22:17:ed:2b:51:75:13:
73:ac:8c:74:ae:6c:4f:73:6a:eb:f5:78:86:c9:70:
95:d2:a5:de:5f:c5:fc:24:e6:fe:85:cd:35:8c:f1:
7b:ef:7b:6e:67:76:9e:71:a1:04:42:11:2d:2e:7c:
fd:e2:7a:92:07:bc:cd:f6:35:7a:d6:26:4e:b3:c9:
92:8c:fa:ac:08:cc:27:47:88:c3:77:7d:d5:89:d0:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:A5:76:1A:1F:58:23:48:28:A2:1F:97:C0:E7:6E:C5:E8:B8:6E
X509v3 Authority Key Identifier:
keyid:0D:A6:A5:45:A2:38:76:3B:E9:CC:7A:EC:1C:BC:46:09:E8:CB:F6:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/0DA6A545A238763BE9CC7AEC1CBC4609E8CBF6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaalRaI4djvpzHrsHLxGCejL9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/10/39332e39332e38302e302f32312d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
Signature Algorithm: sha256WithRSAEncryption
02:71:91:98:34:99:a4:1e:ae:97:7e:a2:1b:de:df:83:6e:79:
cf:f1:de:69:c3:9e:0d:36:fd:1f:23:bf:aa:70:4a:3c:72:f9:
01:92:c2:1a:cf:4c:1e:6c:6d:39:e6:ab:e2:8d:b5:92:94:ed:
83:b1:5f:b0:24:b1:36:38:69:03:25:9b:9c:1b:87:0c:77:40:
f5:e8:9d:89:b5:9c:3e:28:49:bc:67:b3:06:a3:6c:06:bf:6c:
12:67:45:e7:fb:45:9e:49:96:93:c5:71:f6:79:fd:75:17:ff:
f5:e8:bc:bc:2e:c0:f9:1d:04:63:c5:17:a0:c7:f2:98:e2:4e:
28:63:b0:d6:20:84:3f:18:89:38:7d:bf:94:2f:bc:44:6e:a8:
87:92:c2:bc:65:94:e9:1c:66:fa:9e:cc:b2:4f:be:9e:bf:b6:
11:c4:92:d9:87:86:b2:bc:16:b5:3d:9b:46:52:b2:82:8f:66:
f8:cf:6c:c7:83:97:38:00:e5:93:cb:9f:8d:5c:a4:58:e7:d0:
7d:4d:01:cc:ed:00:26:66:d0:8e:9d:fb:4a:1a:26:41:8a:cd:
f1:ed:f9:00:33:3f:19:c5:1a:e8:49:13:e8:43:ce:de:10:cc:
08:24:75:8d:b6:36:19:df:c9:a2:52:56:13:a1:5e:e0:52:e5:
40:dd:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org