Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e2038383933.roa
File: 37372e33372e3130362e302f32332d3233203d3e2038383933.roa (raw, json)
Hash identifier: 3wn0PWUl/mhl7XaRvOJcmZwtJ090DASiWDXy9PQszV0=
Subject key identifier: AC:55:07:FB:56:50:4B:F7:D9:AD:50:3E:F0:03:71:60:36:40:E0:E8
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 563787EFE5265229BEBBFD1ACBF0C8776514E1D2
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e2038383933.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 8893
IP address blocks: 77.37.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:37:87:ef:e5:26:52:29:be:bb:fd:1a:cb:f0:c8:77:65:14:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=AC5507FB56504BF7D9AD503EF00371603640E0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:db:35:00:a8:c8:a6:a1:de:c0:68:13:a0:
50:ef:dc:a1:71:6c:ad:5e:d3:de:20:6b:61:12:95:
58:d9:e2:e4:17:d7:cb:81:6f:1e:b0:75:00:ac:c6:
27:ea:04:60:23:fb:24:4d:1a:24:5a:6b:a2:51:ec:
7c:50:cd:4d:8a:75:fe:b9:7f:69:a4:be:10:07:6a:
c0:9b:c4:c6:d4:96:a8:b6:09:aa:22:81:b8:f4:a6:
a1:6f:d7:88:25:f6:73:71:a7:96:9d:df:bb:8c:90:
f8:10:1d:97:5c:7c:c7:b6:d8:03:96:75:4d:38:02:
8b:9f:ba:66:c6:85:39:e0:e8:6a:a8:d7:7e:2a:56:
18:fa:30:4a:13:54:12:91:27:50:c6:bb:4f:9c:85:
f4:d0:50:3a:ad:a5:6a:28:2c:61:bf:60:b6:a5:20:
a9:f2:a2:56:6d:1f:a7:d3:61:d9:dc:b0:76:2a:65:
bd:47:28:ac:7c:66:a9:8d:89:75:c7:d8:df:0d:5f:
39:4b:b1:b1:c7:3c:04:51:dc:4b:09:9d:75:1f:ec:
06:5b:17:bd:a7:f7:b8:a1:72:05:53:5d:db:99:00:
21:86:ec:86:07:67:a7:f8:1d:2b:1e:9b:9f:63:2d:
c0:ae:e5:6a:24:c3:ce:31:27:49:6b:d1:5e:bb:f4:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:07:FB:56:50:4B:F7:D9:AD:50:3E:F0:03:71:60:36:40:E0:E8
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e2038383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:4a:d8:f1:35:fa:0a:1b:e0:29:86:27:67:95:71:28:90:54:
d8:b1:17:6f:80:2a:74:32:71:c1:00:46:bd:0e:63:91:73:b8:
7c:29:93:9d:4d:a7:96:8d:f2:f8:5e:17:39:df:79:87:09:33:
2c:eb:ba:60:d6:e0:f7:58:28:71:6a:77:19:78:94:d5:e8:40:
6d:0e:68:3b:c5:7f:af:f1:4e:5f:d0:00:8b:b4:dc:32:67:96:
bc:e6:76:19:e9:b9:42:e5:0c:52:f0:1b:b0:52:b3:fb:2c:92:
62:08:0a:32:da:cb:22:38:11:37:32:42:8e:5d:8e:57:93:af:
a0:81:00:04:5f:63:c6:c8:98:95:29:c2:3c:53:65:f7:c3:92:
37:f4:7c:c3:e4:c7:12:1b:39:22:61:71:01:74:86:eb:f3:19:
f4:34:17:9f:da:72:9d:91:0a:9c:50:8b:07:3d:1d:cf:81:3f:
3a:4f:e8:3d:02:24:dd:8b:cd:7c:4f:c0:35:0b:cc:6e:82:62:
9e:eb:f7:80:44:41:ed:af:00:f7:a9:a5:62:99:0f:5c:95:a6:
4e:47:37:5c:4b:b4:b2:83:cc:cc:db:0e:b9:83:ed:e8:42:d6:
00:05:88:16:0d:57:5f:f1:f2:3a:fe:29:a4:fe:06:11:a8:4b:
55:70:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org