Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e203439393939.roa
File: 37372e33372e3132302e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier: L8X2ZOoli/sbND3JWfFzMXp/M9PUrpM9J5L+HxT3UcM=
Subject key identifier: 20:03:C1:E8:D8:24:EC:77:C2:AE:58:3D:EA:FA:57:D4:EF:64:52:58
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3E01A0C58D8406654AA975A77C0659822EAF1893
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e203439393939.roa
Signing time: Fri 03 Feb 2023 09:24:32 +0000
ROA not before: Fri 03 Feb 2023 09:19:32 +0000
ROA not after: Fri 02 Feb 2024 09:24:32 +0000
asID: 49999
IP address blocks: 77.37.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:01:a0:c5:8d:84:06:65:4a:a9:75:a7:7c:06:59:82:2e:af:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 3 09:19:32 2023 GMT
Not After : Feb 2 09:24:32 2024 GMT
Subject: CN=2003C1E8D824EC77C2AE583DEAFA57D4EF645258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:4f:25:fc:81:1a:b0:6f:e3:18:de:89:d7:
e6:a4:19:06:f2:6e:2c:1e:25:1c:ab:4b:01:c4:c4:
79:4f:39:77:c9:00:27:3a:1a:08:66:e7:7c:40:f4:
31:4c:5b:86:31:f1:64:75:49:0e:bc:71:c5:df:e2:
ff:00:01:15:9c:9a:2f:82:7c:39:d6:91:e3:42:61:
5a:39:0b:c5:b8:4b:4a:8e:6c:18:94:cc:b8:50:66:
8a:0c:82:e0:59:7e:13:e0:a6:57:d7:72:53:a6:f3:
20:d9:1b:d3:c9:a6:9d:0c:aa:16:8c:7b:f5:54:62:
bb:c1:6c:79:6b:1a:2b:7b:71:b0:a5:4b:52:b9:93:
44:65:31:b5:69:01:37:50:0f:29:57:20:61:49:b7:
1b:3c:3c:f8:01:57:9b:79:bd:a4:3e:23:ce:af:c6:
f7:f3:f8:0a:db:f6:fd:00:ae:e3:de:b2:4b:b0:88:
ad:f4:de:5d:cd:f0:92:c9:29:84:d6:da:f6:a7:15:
52:67:31:12:f1:ef:c4:09:11:3e:4d:cb:7d:d8:f4:
f8:49:27:19:8d:7b:a1:19:80:1a:0e:ad:79:df:c5:
74:c1:90:3e:c4:ea:3f:98:66:1c:91:ad:f5:e6:ce:
ed:9a:0d:15:7f:c9:d8:7c:0e:d8:47:da:4b:ce:92:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:C1:E8:D8:24:EC:77:C2:AE:58:3D:EA:FA:57:D4:EF:64:52:58
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:77:46:11:11:f7:ae:9a:19:b4:57:45:f8:27:51:8d:16:dd:
70:79:46:65:a8:49:f1:de:e1:19:5e:38:d3:79:82:2e:60:2c:
a3:a6:bc:c3:95:c2:8f:b6:d0:d2:0c:00:da:45:a6:54:9e:ae:
bb:06:52:bb:27:79:e1:cd:67:4d:d0:82:2f:17:e9:65:4d:2d:
32:ae:d6:27:6a:c6:26:8e:19:4a:ea:e6:79:4c:1d:4d:2d:00:
1b:bb:5b:8f:5a:3a:86:b8:97:32:2c:18:54:77:4d:9a:49:11:
c5:3e:88:02:db:f8:44:e4:e9:93:d1:ea:de:35:31:bd:86:da:
2f:5f:55:f5:e5:b7:f9:ab:63:a1:17:a5:4a:a5:dd:6f:bf:6b:
5f:b3:2c:8b:27:a4:90:c2:77:10:6f:c7:93:ad:0d:2c:3c:ba:
50:79:44:bc:61:82:d0:0d:98:08:04:dc:34:bf:a2:63:45:f2:
a2:59:e6:fe:8e:cf:d0:a0:28:ed:c4:d9:66:90:50:3f:9b:36:
37:05:a3:35:e1:16:4b:bb:68:d2:00:53:88:4f:3a:f1:48:51:
22:c5:f0:f2:ea:04:cf:e2:74:e5:26:d6:ca:02:1e:4c:e7:85:
38:3b:a6:67:82:6e:61:a8:50:f3:61:d1:e8:74:72:dc:1f:b2:
16:a8:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:11 2025 by rpki-client