Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: S5wLE/mPEQ9w73uUEI4ueHLTo938Ah/rjX/aw/kH1ys=
Subject key identifier: F7:EA:FE:3D:B9:C0:8E:D6:EC:BC:55:BB:51:DC:99:4B:B0:C2:B1:61
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 0A3D856836C0BDC48A036C6D1402B7F557C41D78
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 Sep 2023 00:00:05 +0000
ROA not before: Sun 24 Sep 2023 23:55:05 +0000
ROA not after: Mon 23 Sep 2024 00:00:05 +0000
asID: 834
IP address blocks: 77.83.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3d:85:68:36:c0:bd:c4:8a:03:6c:6d:14:02:b7:f5:57:c4:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 24 23:55:05 2023 GMT
Not After : Sep 23 00:00:05 2024 GMT
Subject: CN=F7EAFE3DB9C08ED6ECBC55BB51DC994BB0C2B161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:d5:b1:6a:97:87:92:e6:04:27:29:65:51:
2f:2b:a5:66:53:c8:9f:6e:bb:d5:eb:74:da:4d:8d:
30:69:ba:9c:5f:32:da:41:60:a5:a8:b8:5b:5c:a6:
65:d1:48:af:e5:b3:53:e2:9f:b4:fb:05:26:a1:31:
c0:ee:11:8c:c9:f8:74:d9:50:72:de:65:40:87:24:
f4:a0:2e:00:d5:59:8b:c5:7d:9b:95:db:70:cc:88:
44:90:d3:71:87:f8:e2:61:35:1d:94:63:91:f2:54:
7b:db:83:27:2d:95:c7:49:11:6e:ca:c2:2d:b8:64:
51:14:53:bc:69:dd:95:34:27:6a:ef:e1:f3:ad:88:
ce:e7:c2:41:33:7c:07:d5:5c:76:47:57:5d:98:70:
8b:a8:d8:bf:4b:4c:e2:d0:a2:14:db:5e:93:18:ac:
8f:92:ea:68:3c:71:b1:7c:0f:ba:56:dc:e9:eb:da:
61:80:bb:34:ff:ea:49:a4:64:f0:56:91:ea:74:af:
41:bd:79:c1:4f:14:29:d0:04:72:be:90:70:71:68:
c1:91:d6:dd:fb:b7:ff:07:e9:8e:22:e3:84:4c:b2:
ce:b0:d6:21:dd:2a:52:a9:07:ab:0e:19:e5:70:7f:
7a:83:c6:d5:6a:e8:6a:3e:d5:0c:cc:95:c2:aa:11:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:FE:3D:B9:C0:8E:D6:EC:BC:55:BB:51:DC:99:4B:B0:C2:B1:61
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:91:6a:0b:80:8e:0d:7f:59:e2:72:fc:f2:58:7b:ec:6b:07:
87:6d:7d:9d:80:44:49:66:c0:bc:15:85:aa:1b:6b:3e:2a:1a:
54:0e:25:d0:64:36:d1:b0:c9:61:66:b4:dc:a9:47:3e:36:66:
7d:49:63:a8:2a:fa:9c:f9:56:a6:9e:40:8d:f1:02:91:f8:08:
4f:c1:c1:dd:31:26:f7:45:2b:64:e2:3e:66:dd:ce:5a:b9:00:
60:6c:0c:b1:f7:6f:37:fe:03:a8:92:1e:f5:8c:aa:bd:6a:dc:
d1:f6:44:5b:2a:79:93:0f:66:05:be:61:44:e5:a0:72:1f:79:
0c:c8:cd:22:1c:0c:6e:31:10:8f:4f:bd:22:51:71:5a:bc:37:
63:e4:43:4d:1d:2c:b9:13:30:95:e2:f6:88:9f:05:86:22:aa:
34:21:a9:bc:c2:b2:0d:0c:a2:a3:67:51:e7:4b:90:ba:c9:66:
28:e8:06:c5:d5:22:27:74:7e:37:d0:30:ca:78:be:12:e9:1a:
73:c8:e5:e5:1e:a5:63:81:f3:00:a6:82:84:97:97:2c:ee:37:
d5:1e:a1:20:42:04:cd:ab:93:00:b0:7b:4b:6e:6c:47:97:39:
02:3a:62:aa:28:73:73:1e:ec:35:4c:01:7f:d7:e6:c0:32:51:
5d:56:f6:8b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUCj2FaDbAvcSKA2xtFAK39VfEHXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA5MjQyMzU1MDVaFw0yNDA5MjMwMDAwMDVaMDMxMTAvBgNV
BAMTKEY3RUFGRTNEQjlDMDhFRDZFQ0JDNTVCQjUxREM5OTRCQjBDMkIxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkndWxapeHkuYEJyllUS8rpWZT
yJ9uu9XrdNpNjTBpupxfMtpBYKWouFtcpmXRSK/ls1Pin7T7BSahMcDuEYzJ+HTZ
UHLeZUCHJPSgLgDVWYvFfZuV23DMiESQ03GH+OJhNR2UY5HyVHvbgyctlcdJEW7K
wi24ZFEUU7xp3ZU0J2rv4fOtiM7nwkEzfAfVXHZHV12YcIuo2L9LTOLQohTbXpMY
rI+S6mg8cbF8D7pW3Onr2mGAuzT/6kmkZPBWkep0r0G9ecFPFCnQBHK+kHBxaMGR
1t37t/8H6Y4i44RMss6w1iHdKlKpB6sOGeVwf3qDxtVq6Go+1QzMlcKqEXttAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU9+r+PbnAjtbsvFW7UdyZS7DCsWEwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVNoMA0G
CSqGSIb3DQEBCwUAA4IBAQBPkWoLgI4Nf1nicvzyWHvsaweHbX2dgERJZsC8FYWq
G2s+KhpUDiXQZDbRsMlhZrTcqUc+NmZ9SWOoKvqc+VamnkCN8QKR+AhPwcHdMSb3
RStk4j5m3c5auQBgbAyx9283/gOokh71jKq9atzR9kRbKnmTD2YFvmFE5aByH3kM
yM0iHAxuMRCPT70iUXFavDdj5ENNHSy5EzCV4vaInwWGIqo0Iam8wrINDKKjZ1Hn
S5C6yWYo6AbF1SIndH430DDKeL4S6RpzyOXlHqVjgfMApoKEl5cs7jfVHqEgQgTN
q5MAsHtLbmxHlzkCOmKqKHNzHuw1TAF/1+bAMlFdVvaL
-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org