Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e20383334.roa
File: 37372e33372e3132302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 8MZnNdbCHg2fZ7Wb4g3k/x35OT8+Nzzz40Fmqt+B0R8=
Subject key identifier: 8E:D1:18:F8:54:F4:58:1B:DB:CF:33:CB:DA:9B:D6:92:9C:67:BB:EA
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 01F564BC28219D1C7569C14E6DB964BB6A039547
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e20383334.roa
Signing time: Mon 03 Apr 2023 00:00:10 +0000
ROA not before: Sun 02 Apr 2023 23:55:10 +0000
ROA not after: Mon 01 Apr 2024 00:00:10 +0000
asID: 834
IP address blocks: 77.37.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f5:64:bc:28:21:9d:1c:75:69:c1:4e:6d:b9:64:bb:6a:03:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 2 23:55:10 2023 GMT
Not After : Apr 1 00:00:10 2024 GMT
Subject: CN=8ED118F854F4581BDBCF33CBDA9BD6929C67BBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:3e:38:db:7c:7f:1f:d7:de:dc:bc:a3:ee:
99:9b:7d:77:08:fc:80:3b:de:bf:9c:ed:4e:67:e1:
56:9c:1f:33:91:18:9a:7f:40:19:d9:e0:f0:4f:2e:
72:d2:dd:c3:55:fc:5c:ad:9d:d7:72:bc:4f:e9:75:
fa:4a:89:96:26:ec:b3:6b:73:5f:ee:14:b3:e3:60:
71:ad:cb:5f:48:7b:3b:39:48:ae:3e:61:ce:25:0a:
ed:53:ff:1a:ba:8a:af:a2:29:52:e5:a6:6d:cd:00:
a1:c3:13:3e:00:96:35:3a:98:9e:22:8d:19:ab:d8:
e8:fa:a9:02:1f:84:29:13:de:d7:e2:20:86:75:c1:
09:a1:b7:80:38:c5:7b:79:bc:74:08:9a:da:db:66:
63:a5:40:6e:8f:a3:07:9a:f7:f6:4d:46:b6:f7:67:
0e:bc:90:3e:2c:7a:16:c7:70:61:03:0f:a3:9f:c7:
89:50:c4:aa:c6:cb:cb:c8:6d:34:57:3a:b8:a8:5f:
25:04:09:ec:e4:3a:34:d5:6d:06:23:86:ce:fa:c5:
09:1f:be:a6:d8:57:35:bd:a7:78:1c:9b:9c:93:47:
14:8a:bc:5e:88:bd:a3:45:d3:ee:70:ee:16:5c:37:
9c:22:fd:3e:2a:0b:f0:f3:dd:65:07:64:bf:01:ce:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:18:F8:54:F4:58:1B:DB:CF:33:CB:DA:9B:D6:92:9C:67:BB:EA
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3132302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.120.0/22
Signature Algorithm: sha256WithRSAEncryption
23:5f:c6:64:6b:b1:67:2a:1e:f8:6f:e5:9a:67:53:ad:60:91:
47:ed:72:c9:79:53:0c:f8:1c:ee:d8:30:eb:11:52:a2:84:85:
5a:25:3d:8f:df:c5:74:86:65:6f:cf:2c:54:09:6b:53:a5:f4:
2c:4c:17:b6:08:eb:d1:aa:48:84:d1:05:0d:e7:93:f7:e0:96:
59:29:5f:3e:0f:23:10:22:88:85:02:1b:5e:6d:1a:8d:43:d9:
f5:65:6e:10:ca:a4:ad:db:a7:59:cc:e0:ad:2d:18:3e:98:bd:
5a:3f:82:6a:eb:26:61:5b:f9:be:c7:b1:3d:61:e9:b0:81:a3:
cd:f5:c2:09:50:b3:90:75:25:df:ed:e9:d7:ff:53:7e:55:e4:
b1:2d:89:36:a8:c6:9a:54:eb:b6:80:0f:0a:0e:54:17:92:f0:
b0:a0:fa:71:f0:f3:ea:5c:0e:3d:84:2d:7f:36:f9:f5:86:ae:
73:18:9c:b5:2f:ea:64:d5:f1:45:76:59:53:22:ae:bf:a1:db:
d1:39:fa:56:be:54:4f:35:ab:99:27:2b:81:ba:8f:f5:9c:24:
7d:9c:3f:32:dd:8f:d9:20:f6:ec:65:22:c6:c6:f4:8e:c8:15:
bd:d6:7c:07:f2:4a:2a:2c:b1:c7:e9:6a:8e:01:10:80:53:aa:
68:82:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org