Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e302e302f31372d3137203d3e203331343030.roa
File: 37372e33372e302e302f31372d3137203d3e203331343030.roa (raw, json)
Hash identifier: se+2VSJhhL/Nd57NqQeGu8kXVwCAkrRjlniRGwi+6AQ=
Subject key identifier: 76:7A:FF:BA:B7:DD:9B:85:C9:DF:76:42:65:0B:7D:4E:97:DE:6B:46
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 752B2B49578E20899B6DF0A6B8CD77A174AF0E29
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e302e302f31372d3137203d3e203331343030.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 31400
IP address blocks: 77.37.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2b:2b:49:57:8e:20:89:9b:6d:f0:a6:b8:cd:77:a1:74:af:0e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=767AFFBAB7DD9B85C9DF7642650B7D4E97DE6B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:70:d4:a1:5a:18:66:70:d1:78:ea:7c:b5:
a5:10:a1:59:cc:95:45:54:83:8a:0c:45:9f:b9:fe:
c8:ba:09:8a:99:2a:91:09:c3:bf:c0:9b:11:5e:2c:
fd:bb:19:a3:ad:db:81:3a:fc:23:33:ac:bf:9b:b4:
2c:fd:d4:ea:42:a5:1e:89:c7:68:74:e0:04:44:30:
40:b7:7b:d4:a2:3d:50:69:5c:ca:6d:cc:70:f2:2c:
a4:04:c9:ac:e8:57:1c:a6:0a:87:dc:d5:6d:d2:b5:
56:33:6b:7a:69:d4:bd:0f:ef:79:a7:8e:6a:20:91:
bf:6a:8b:c7:0f:9a:de:6b:94:e6:f2:52:07:82:30:
c3:c0:eb:0f:70:3d:80:01:b3:9c:53:67:2a:a9:b7:
d4:56:1f:82:7e:05:eb:ad:c1:e2:24:45:fa:13:35:
8a:87:e5:d9:40:2a:52:53:67:b9:10:2d:97:01:81:
b7:04:d8:97:12:2a:fb:c8:8f:92:25:36:61:b1:30:
31:69:64:2d:4f:bb:3e:f8:a9:a5:f2:98:7f:59:c8:
53:40:9c:8c:d4:23:eb:b8:6e:5f:a4:10:01:cc:3a:
5a:e6:5e:d9:78:8c:32:cb:39:04:54:0f:ae:fa:82:
f2:90:14:b7:57:a9:c1:20:02:9e:51:71:ca:e7:f2:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:FF:BA:B7:DD:9B:85:C9:DF:76:42:65:0B:7D:4E:97:DE:6B:46
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e302e302f31372d3137203d3e203331343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.0.0/17
Signature Algorithm: sha256WithRSAEncryption
56:10:85:15:dd:9c:99:90:fb:b3:be:dc:dd:69:84:34:95:ef:
dc:a0:b1:c9:67:7a:01:fc:31:cd:84:94:e5:ce:8c:58:36:5d:
0a:0a:a0:90:7c:88:29:58:7b:b4:62:61:17:51:a6:d0:7f:ab:
3e:bf:7f:9a:d3:4b:ce:bf:7f:5f:2a:5e:c5:b8:21:94:ae:38:
e1:42:7e:f0:e7:65:84:21:23:f7:2b:67:1a:4a:4e:d0:68:d1:
fa:95:7c:48:15:75:7d:e4:5e:11:66:2e:fa:46:9c:ba:d9:65:
2a:02:d2:f4:5f:24:b0:fd:5f:e4:36:13:e1:6c:18:c3:1f:3a:
95:6e:dc:d1:f6:a1:9d:49:4d:1f:83:e3:8f:a3:87:07:b3:06:
15:62:0c:be:5d:c7:88:67:9a:a8:99:99:4e:27:d0:8d:a7:08:
ec:f6:c0:a0:63:23:c5:30:32:93:8e:34:f0:e4:78:36:4b:3d:
8e:a9:8d:48:e5:a7:66:79:bd:f6:63:4d:aa:16:84:d9:e0:20:
77:7b:54:c1:9a:bb:2d:77:95:15:ae:6c:bb:69:6d:d9:b0:af:
fc:e9:21:d5:90:16:a8:70:63:17:11:5e:1b:6c:74:fb:88:3a:
7d:de:9f:2e:fa:13:41:33:ed:4f:28:03:38:83:33:f4:60:7a:
4b:9e:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org