Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OyZv2Dx/T6h35D+L7U57rtu9N+ODwSlIMDwEYvYLpwg=
Subject key identifier: FA:E9:B4:E7:E4:1F:6B:98:E9:AC:E6:DB:6E:B0:71:9C:05:11:8D:17
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 1660BBF2B01A11DF0AA2AE5FEAA06EE87556EC99
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32342d3234203d3e20383334.roa
Signing time: Sat 03 Jun 2023 00:00:11 +0000
ROA not before: Fri 02 Jun 2023 23:55:11 +0000
ROA not after: Sat 01 Jun 2024 00:00:11 +0000
asID: 834
IP address blocks: 77.83.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:60:bb:f2:b0:1a:11:df:0a:a2:ae:5f:ea:a0:6e:e8:75:56:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jun 2 23:55:11 2023 GMT
Not After : Jun 1 00:00:11 2024 GMT
Subject: CN=FAE9B4E7E41F6B98E9ACE6DB6EB0719C05118D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:a1:5d:ed:0b:33:e0:ca:fa:05:ed:28:7b:
86:d8:8a:2f:dc:3a:a1:d2:ae:2f:d0:b7:47:1d:c6:
55:e0:a0:b4:a5:22:f7:3f:37:ff:2f:10:3d:8d:14:
f5:7f:11:90:67:8d:7b:7e:28:a1:78:c1:ce:df:d7:
d3:94:a4:ce:ac:18:31:be:c8:8f:50:76:42:28:85:
31:cc:e7:16:d3:e8:e5:83:35:cf:9a:9f:6f:45:0e:
d3:59:b6:2d:f6:80:86:96:f4:41:a0:74:27:8d:2c:
92:93:c1:ab:a9:5a:89:a6:84:07:39:45:f5:93:8e:
1a:a7:bb:93:b9:46:cc:22:8b:ec:7c:eb:72:eb:a9:
d4:5e:93:6d:bb:02:32:6e:48:1a:a0:c4:8d:90:f1:
d3:a0:9a:b5:4b:53:34:6a:76:5f:da:84:15:85:e2:
25:b6:fd:dc:6e:01:be:c0:c2:ec:cc:78:ab:99:9a:
3f:8d:d7:fd:79:3d:a8:41:7d:b3:28:63:6c:9f:7c:
4a:2e:b2:c0:8e:01:a2:1e:7c:94:98:97:90:ed:d7:
76:bf:4c:e1:2c:a1:02:6f:1c:8b:37:02:b9:66:e0:
98:06:f4:21:c5:04:9c:9c:f4:d5:8d:1c:a8:ad:28:
da:04:86:a8:a2:14:a9:be:2e:8b:51:d7:57:4a:35:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:B4:E7:E4:1F:6B:98:E9:AC:E6:DB:6E:B0:71:9C:05:11:8D:17
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
65:84:49:b0:ef:64:91:02:8f:8c:ae:f9:03:45:8a:50:cd:ae:
20:8c:67:5b:ed:bc:af:4d:10:68:5e:5e:73:d5:7b:05:f3:ee:
8a:76:1a:f9:1a:19:47:74:06:87:ac:f3:c9:52:dd:4d:9e:69:
ae:4d:8c:50:0c:82:a3:d3:25:c9:d0:3e:52:13:e0:d3:df:e8:
fd:83:82:5b:3c:dc:68:e0:79:46:c5:87:45:3e:9a:01:ec:3e:
97:b7:0c:9f:23:b1:55:cb:e2:42:c5:e5:12:67:5f:4b:2f:84:
d4:53:ae:0d:a8:35:25:66:ef:9d:28:28:3c:e6:48:e2:e2:01:
cb:6c:c3:9e:36:5d:74:0b:cc:cc:e8:06:4d:de:40:d6:65:72:
10:7c:61:4b:76:04:13:f6:08:af:ea:e0:5a:93:6c:d3:bd:77:
32:e9:1c:d6:fa:e8:c1:bd:0a:ff:6a:d4:37:f7:39:89:86:e0:
aa:54:ba:98:bc:db:09:15:31:ab:79:f7:e8:24:b7:07:dd:8e:
7d:55:c8:9f:34:9b:f5:91:4f:ec:a7:39:35:5c:87:99:94:52:
de:88:41:39:6f:dd:b8:e8:66:da:bb:0b:1e:10:12:81:8a:06:
ac:74:1b:e1:17:57:79:98:2d:03:60:a5:24:8b:37:17:39:63:
f0:eb:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org