Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sAAdnvDp8SwNnMLs3ASSvUQnGsX/9/FvzkDIHAkmuM8=
Subject key identifier: 24:90:30:50:B6:73:5F:94:A8:D1:9C:B3:FF:05:7B:D9:2C:CC:B7:DC
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 6E6E26C4B099DE6C4096F94639DA4A84A751CF52
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e20383334.roa
Signing time: Tue 19 Sep 2023 07:30:03 +0000
ROA not before: Tue 19 Sep 2023 07:25:03 +0000
ROA not after: Tue 17 Sep 2024 07:30:03 +0000
asID: 834
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:26:c4:b0:99:de:6c:40:96:f9:46:39:da:4a:84:a7:51:cf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 19 07:25:03 2023 GMT
Not After : Sep 17 07:30:03 2024 GMT
Subject: CN=24903050B6735F94A8D19CB3FF057BD92CCCB7DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:97:d9:57:97:41:57:cf:47:8f:aa:1b:47:
64:7b:c6:3e:83:bc:2e:45:98:7e:94:1a:39:e9:04:
49:56:13:3d:3e:e4:cc:03:0c:71:a4:01:fa:80:4b:
5a:cc:37:ff:40:13:88:84:34:c0:2f:3b:93:0a:e8:
d5:e0:c1:f5:eb:e6:07:ea:71:56:21:93:14:5d:49:
9c:ac:64:7a:5a:e4:b2:ba:14:f6:f6:33:1c:b2:dd:
56:13:03:d2:b5:8d:67:72:23:9a:17:a4:3e:ca:84:
c2:b2:22:77:98:64:5d:b2:4c:a9:17:a7:19:ec:f9:
98:e2:93:ab:25:e5:76:dd:a7:2e:b9:2c:0f:0d:21:
2e:9e:be:85:46:3e:94:5b:d2:17:2c:af:7f:68:b3:
ee:d3:ab:29:17:78:6a:a7:fc:15:d6:25:c7:6c:30:
47:4f:ac:2d:05:d7:7a:56:95:d2:60:86:59:69:d2:
fe:61:2c:2f:74:fe:88:6b:9b:14:43:79:11:8d:57:
40:95:5b:9d:c7:d1:a3:ab:ca:25:a6:31:69:f4:f6:
96:dd:03:63:08:33:4d:b2:1e:79:83:68:1c:f1:b6:
d1:20:63:3b:12:34:a8:a9:25:73:37:44:d2:00:6f:
24:43:31:1a:44:cd:81:60:01:18:c5:d3:66:16:c1:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:30:50:B6:73:5F:94:A8:D1:9C:B3:FF:05:7B:D9:2C:CC:B7:DC
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:03:06:ce:81:20:50:e6:49:6e:fc:b4:4b:6e:ca:02:f4:
ed:0b:75:c3:60:8d:86:3d:a1:18:d3:39:a0:0d:39:ef:0a:80:
19:92:a5:67:eb:5c:99:69:5a:78:01:6a:e3:8e:4d:5e:2c:d7:
0e:59:28:80:6e:92:a3:a0:c8:53:b2:f0:36:d2:f4:66:2a:55:
13:ab:a4:cf:e5:a0:1b:63:b2:b4:a8:ac:1d:92:cc:23:38:f9:
28:e5:ae:cc:6e:1b:0e:9e:32:fe:64:f5:05:ff:25:4f:f4:36:
aa:b8:2c:14:85:97:8c:40:66:46:96:a6:12:28:4e:14:89:df:
e7:0c:ea:67:b0:e0:cf:da:a9:e9:b4:93:76:dd:80:78:5a:2f:
56:76:42:d8:22:99:43:d2:35:bf:e5:53:db:c2:65:4b:bf:8e:
db:8d:73:20:59:1d:a7:9d:5b:a6:6e:c6:f2:5d:f0:3e:1a:cb:
2c:b8:4d:8a:a7:c7:a2:00:a7:e6:2a:42:61:bc:c8:b0:cb:85:
8c:bc:76:ea:5d:7c:87:25:c3:b5:fc:25:dc:1f:84:0c:31:26:
3e:fb:b7:32:10:e1:3f:01:3c:ff:d1:75:55:46:8f:ce:2d:b3:
3c:47:fb:dd:23:c3:53:39:fc:d7:bb:7d:80:7a:73:43:6b:ac:
fc:4f:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org