Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3234203d3e20383334.roa
File: 37372e38332e3130362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: vw9dA+a1If73NTWXjcFe1p9Qt2A5dmBeEvBaC74NIoc=
Subject key identifier: A8:92:42:D5:73:4B:29:BF:67:38:15:CF:B1:A3:9B:3C:BF:89:F3:EA
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 50CD95D8C0817AD899B6DDE5F78DCABBB59DF71C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3234203d3e20383334.roa
Signing time: Fri 14 Apr 2023 00:00:24 +0000
ROA not before: Thu 13 Apr 2023 23:55:24 +0000
ROA not after: Fri 12 Apr 2024 00:00:24 +0000
asID: 834
IP address blocks: 77.83.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cd:95:d8:c0:81:7a:d8:99:b6:dd:e5:f7:8d:ca:bb:b5:9d:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Apr 13 23:55:24 2023 GMT
Not After : Apr 12 00:00:24 2024 GMT
Subject: CN=A89242D5734B29BF673815CFB1A39B3CBF89F3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:3f:16:fe:d5:64:d5:6d:0d:20:59:c2:7b:
ce:39:bc:76:31:2a:33:52:d6:10:d2:0d:da:3e:0d:
29:f7:cb:76:af:62:34:bd:27:2d:cb:49:d5:a2:4f:
9e:a5:b0:63:67:57:f1:5f:5b:50:4c:2b:f2:ba:e7:
2d:09:57:29:a6:38:08:53:ec:30:aa:1a:a2:28:4b:
ed:45:fc:c1:04:37:31:46:d1:e8:0a:b8:5c:52:f3:
24:e0:52:37:5a:da:e6:39:a4:18:24:d5:79:be:ed:
10:cd:43:62:2d:ce:ff:a6:42:45:92:81:45:a3:fb:
02:db:2d:3e:5b:5e:fc:6f:d0:c1:cd:9d:b9:14:62:
b3:21:aa:e5:b5:3b:5d:b6:d7:74:8d:56:49:b6:be:
98:c9:1a:68:39:e2:f0:01:a1:d6:a1:92:70:51:01:
53:97:f4:f5:52:71:89:86:90:3b:21:be:98:3b:b2:
1c:91:3c:70:97:fe:37:44:10:4c:ef:08:63:bd:f5:
03:e4:f4:1f:00:a0:b5:f1:e1:c4:8f:af:d3:a1:ec:
c1:36:0d:f6:73:5d:00:7a:a2:a2:9d:00:43:13:fe:
c7:94:db:ce:21:2f:e6:2b:d2:3f:25:54:9b:d6:e1:
d5:e5:43:e0:36:45:eb:97:93:9c:b9:ef:4f:1d:6d:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:42:D5:73:4B:29:BF:67:38:15:CF:B1:A3:9B:3C:BF:89:F3:EA
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:71:e6:23:bd:f9:ce:c5:5c:8a:ba:70:d8:55:a0:c9:1f:5b:
28:47:13:8c:36:12:49:95:60:79:16:e0:9f:31:a5:60:f7:78:
78:31:53:b4:c3:99:71:de:23:b8:e8:b6:1c:7a:fb:5f:65:c1:
d0:fc:a0:ea:b1:78:6b:b4:4e:4c:d6:08:0d:f4:0a:ab:bf:fc:
fc:ef:70:a4:a2:a3:40:59:e6:3c:33:00:6b:21:f2:6c:7e:dd:
a7:08:80:db:60:c5:36:d7:6f:0c:f9:24:8c:e8:ed:ae:40:ae:
c9:7f:d2:fc:96:52:fc:4a:47:3d:1e:85:18:e7:7a:c5:ec:40:
4f:d6:b9:70:2a:a0:81:84:16:bb:9f:fa:1b:1f:45:d6:63:26:
af:a2:7f:fd:f3:fe:02:96:f7:c6:dd:49:22:66:1b:ba:2d:86:
c4:f2:c3:7d:56:7a:38:ec:be:72:82:77:27:9f:b4:e7:ee:78:
a6:58:11:22:1d:5d:d7:14:5a:5b:83:a5:f3:c9:ec:f2:18:43:
74:12:1f:28:b2:77:28:a8:d9:31:43:2e:62:dd:27:ea:b9:ac:
dd:5e:0e:f1:8e:e2:f9:82:a0:5b:a7:a0:ae:7f:7c:0d:48:e6:
f8:5e:b2:3d:d1:8a:f0:de:bc:b4:2c:d3:ca:3d:07:71:bc:33:
a6:41:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org