Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rXeoRElI0eL5a373hrhAbL6eRoXuVo7yYG05FlKt1Nc=
Subject key identifier: 1E:D3:BB:06:42:53:CA:57:82:12:D6:54:54:34:98:C3:0D:9F:6E:09
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 7394F6AC67CC9A9879083AC075467FA73851460F
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
Signing time: Sun 01 Sep 2024 14:08:03 +0000
ROA not before: Sun 01 Sep 2024 14:03:03 +0000
ROA not after: Sun 31 Aug 2025 14:08:03 +0000
asID: 834
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:94:f6:ac:67:cc:9a:98:79:08:3a:c0:75:46:7f:a7:38:51:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 1 14:03:03 2024 GMT
Not After : Aug 31 14:08:03 2025 GMT
Subject: CN=1ED3BB064253CA578212D654543498C30D9F6E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:0d:e1:13:2b:fb:04:01:81:df:e2:4b:44:
ce:46:f1:df:33:28:32:05:30:15:5f:ca:fd:75:ae:
cd:f2:7d:87:9e:ec:c1:f0:3a:a4:88:6d:1a:92:b0:
4c:bc:01:7c:db:63:3c:6e:c6:cf:46:07:bb:46:3a:
ff:78:1f:f6:70:ae:93:83:e4:f1:74:b0:08:47:ba:
75:96:aa:4a:de:af:62:57:bf:f1:4b:65:40:7a:8c:
89:ba:65:8f:7d:a8:7c:b3:90:35:50:a9:29:b6:95:
6b:36:12:e5:d4:b5:9c:22:23:a2:71:27:b1:93:2c:
29:5d:c2:3c:ba:e2:57:b7:43:fc:d2:4d:90:5b:fc:
be:90:da:93:30:92:fc:aa:ab:e2:c8:e8:3d:99:ac:
5b:58:46:65:81:99:00:fe:0a:63:6f:33:3c:56:65:
8e:5a:ff:0e:d4:bf:d5:82:c1:94:db:0b:0a:e7:d3:
31:47:32:13:3a:b5:d0:ea:5f:f4:85:3f:4e:d2:42:
1c:9b:91:61:5c:3d:e6:96:6f:be:7d:6c:da:84:98:
bf:40:f3:b2:0f:4b:11:e3:31:6c:c5:64:15:cd:48:
ba:e5:ed:5b:d3:c0:2f:0d:f4:2c:e5:0a:31:e5:9b:
96:2b:7f:c8:1f:82:14:0e:59:29:47:36:42:bc:d3:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:BB:06:42:53:CA:57:82:12:D6:54:54:34:98:C3:0D:9F:6E:09
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4d:33:b9:c9:a8:d5:d8:25:3f:eb:24:20:85:df:b4:9c:7a:
7b:79:87:34:c0:21:19:9d:0e:3c:09:b9:c4:3e:f4:c7:e0:86:
3a:b6:7c:56:fd:c3:d4:5f:63:e4:c5:02:9f:59:a6:33:4d:96:
12:ba:1a:e1:50:4e:ac:72:01:ea:10:6e:fa:4d:5f:f4:bc:98:
b4:33:cc:19:58:f9:7c:ee:84:2d:d1:45:fe:fc:63:16:66:45:
09:fb:8f:49:ca:f1:9a:20:30:05:22:05:e3:1b:75:0b:c4:cb:
95:d5:61:8d:4e:03:6c:36:af:da:d4:fd:45:93:e0:b1:b9:e0:
be:b7:e5:6c:e5:e0:26:9b:92:e6:b5:5e:11:57:8c:43:3a:4c:
23:65:a5:8b:3c:b1:de:fd:22:ae:b3:81:c9:22:47:30:07:8e:
20:52:bf:07:17:97:f3:4d:e0:43:72:28:d2:68:90:07:13:d2:
57:dd:4b:3b:8c:a9:38:75:eb:89:60:53:34:71:7a:41:3e:86:
64:65:2d:92:12:ee:d8:d4:47:39:ce:d3:42:98:5e:fb:4c:93:
d1:68:78:9a:d1:8c:d2:42:8f:56:86:ed:82:15:5e:79:21:f2:
68:be:15:7e:2d:f1:76:bd:28:64:d4:68:7f:0d:17:c6:f1:66:
1a:70:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:13:46 2024 by rpki-client on console.sobornost.net