Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3234203d3e20383334.roa
File: 37372e38332e3130342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: TUUdQEH2dkpQdQUDvJNO5xjDVFocdTEDW0W/NynoJuY=
Subject key identifier: 66:90:27:4D:A6:38:D4:43:33:AB:31:65:22:88:60:B9:FC:3E:35:F2
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 58E87ADBD7D44505E9975D5C5FFE5126D4D9B97E
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3234203d3e20383334.roa
Signing time: Fri 14 Apr 2023 00:00:24 +0000
ROA not before: Thu 13 Apr 2023 23:55:24 +0000
ROA not after: Fri 12 Apr 2024 00:00:24 +0000
asID: 834
IP address blocks: 77.83.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e8:7a:db:d7:d4:45:05:e9:97:5d:5c:5f:fe:51:26:d4:d9:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Apr 13 23:55:24 2023 GMT
Not After : Apr 12 00:00:24 2024 GMT
Subject: CN=6690274DA638D44333AB3165228860B9FC3E35F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:97:93:dc:81:8d:a6:82:66:3b:38:70:19:
df:49:b5:72:4a:4e:32:22:ef:99:c5:e3:27:c7:11:
a0:9f:ff:39:6e:3a:a7:e2:94:f4:01:fb:a4:33:ca:
7f:35:d7:f8:5e:4e:0e:0d:19:77:51:5d:10:15:9b:
b8:a0:2c:34:7a:41:81:0f:bd:5b:9b:6d:1f:e7:e7:
e7:84:47:99:1c:96:ca:6b:31:91:8b:ba:55:b4:25:
97:40:f9:62:dc:03:41:6d:a3:1a:51:22:6c:dc:43:
bd:6d:cc:db:0e:13:b1:98:fe:f3:11:07:10:f9:2d:
9c:cf:be:7a:2e:5e:2a:aa:34:d0:11:f7:17:06:b5:
67:09:bd:10:ff:a8:e2:00:ef:d0:d3:bb:ba:ed:72:
7b:af:3f:1b:5e:a2:27:c9:7b:2d:d3:00:4c:6e:95:
50:79:f9:c0:7b:f9:bd:ed:5c:8d:f0:d3:84:16:c6:
16:6c:b4:1f:98:3d:86:cf:ef:51:44:c1:ba:e8:ec:
1f:46:17:27:d4:28:ed:ab:43:17:91:56:9c:f4:ad:
b7:4d:fa:06:29:ff:eb:2b:13:89:06:30:1b:a2:cb:
be:de:22:22:0a:a5:42:41:9d:78:67:ce:63:8b:27:
26:22:56:15:1c:07:a0:08:13:58:c2:49:e3:af:75:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:27:4D:A6:38:D4:43:33:AB:31:65:22:88:60:B9:FC:3E:35:F2
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/23
Signature Algorithm: sha256WithRSAEncryption
30:f9:35:59:26:d7:b0:d0:bd:cc:b6:e5:f4:14:a1:c6:d7:d3:
16:8a:2e:d8:b8:b5:1d:a5:bb:10:8a:ce:41:b1:89:39:d7:84:
5a:61:dc:ea:ab:39:57:20:74:82:8e:7f:32:67:7d:a0:ae:01:
7a:74:0d:7c:7c:f6:01:ce:fc:59:93:07:1a:2c:bf:67:4b:1e:
b5:a2:7b:e4:f0:9b:36:58:4a:03:13:e3:ab:9f:7e:e6:80:58:
0e:fe:cb:ce:d0:78:56:ea:2c:30:b4:5f:88:db:3e:7a:16:28:
fc:3a:9d:78:de:68:1c:68:ab:94:7f:b0:a7:ca:95:e0:4b:bf:
fd:c2:33:71:5e:47:2b:e8:ff:f0:da:f1:30:a6:b1:16:59:14:
66:46:7e:f9:de:38:33:b2:0a:c4:6c:e1:28:ad:90:8e:95:19:
7a:1b:8b:6a:2e:3d:22:05:3d:55:86:e2:1c:94:9f:04:ab:d4:
7b:d9:75:4e:08:ec:de:c1:9d:52:14:e7:4f:5a:41:00:51:dc:
7d:57:36:d2:3d:b6:11:3b:97:1c:09:22:45:cf:71:85:5d:76:
02:e2:ac:34:12:62:2f:42:00:78:2e:62:09:2c:86:75:cd:5f:
cf:a4:05:0b:b2:33:b9:60:d8:1b:89:62:02:0c:e9:4b:bb:5c:
dc:c7:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org