Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e32392e302f32342d3234203d3e20323034343731.roa
File: 37372e33372e32392e302f32342d3234203d3e20323034343731.roa (raw, json)
Hash identifier: 3ldhoziPgOZrXwbWpKVeQ5aMq15EA0Utsi1ofrZ3EgM=
Subject key identifier: FA:7E:6D:CD:FC:46:76:B3:7B:1F:DF:79:C2:0B:8C:7D:63:64:D7:0E
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3F0F50B803349FE8EEEC74E0BC26FCA42A80B52B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e32392e302f32342d3234203d3e20323034343731.roa
Signing time: Fri 20 Jan 2023 06:26:06 +0000
ROA not before: Fri 20 Jan 2023 06:21:06 +0000
ROA not after: Fri 19 Jan 2024 06:26:06 +0000
asID: 204471
IP address blocks: 77.37.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:50:b8:03:34:9f:e8:ee:ec:74:e0:bc:26:fc:a4:2a:80:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:06 2023 GMT
Not After : Jan 19 06:26:06 2024 GMT
Subject: CN=FA7E6DCDFC4676B37B1FDF79C20B8C7D6364D70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:95:64:09:29:f1:39:7a:8e:1b:44:3a:50:1d:
7a:6b:a0:8c:01:74:53:b1:8a:9a:bf:36:9a:fb:83:
ad:0d:4e:e7:a2:e1:16:fe:fd:22:46:96:96:92:96:
2e:fd:fd:61:a3:e7:12:db:df:41:94:aa:eb:7d:ba:
cb:ac:31:44:62:ba:ef:eb:6f:99:12:89:54:92:17:
6e:04:fb:9a:19:d1:4d:d7:c8:43:b7:49:1a:b7:c7:
63:2f:06:81:c4:12:a6:87:bf:c0:ac:67:d8:8a:de:
fd:5a:37:61:95:b3:52:b5:e3:82:50:55:b8:b8:2c:
51:1b:6b:09:db:73:0e:df:d8:b8:d9:07:f7:11:b4:
81:0a:48:25:42:46:99:0f:5a:b1:7b:74:38:94:74:
fc:c1:b7:9a:7f:a0:f1:03:29:8c:f8:ad:b3:dd:ee:
60:5c:0e:0f:70:60:9e:bf:7e:2c:d4:a0:14:c2:39:
7e:d8:b3:91:b9:7e:0d:39:6f:d1:45:7c:de:c2:94:
73:c9:22:86:af:3c:1b:f8:60:f3:6b:e7:f7:69:a7:
11:10:8b:40:e5:87:b8:b7:ff:4b:c2:fe:b9:f0:55:
0b:d7:ed:3a:05:7a:50:a2:e3:b8:d1:97:63:8a:c2:
47:47:40:09:21:c9:23:d8:f8:8d:78:6c:61:f7:e5:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:6D:CD:FC:46:76:B3:7B:1F:DF:79:C2:0B:8C:7D:63:64:D7:0E
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e32392e302f32342d3234203d3e20323034343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:38:b0:29:9d:96:31:70:a0:76:0b:14:37:68:1e:8c:0c:
8c:33:8e:fd:b1:f3:0b:d4:7c:75:05:4a:35:96:5c:ce:40:68:
1b:29:c0:fd:c3:d5:92:e5:eb:85:fc:a4:b4:08:06:9a:03:04:
47:12:3e:fb:7d:6b:cd:df:43:f3:28:31:fb:4f:0f:8e:9c:a2:
8b:b0:8d:cf:bd:b2:10:62:20:ac:cf:20:3e:e1:bb:fa:cf:a9:
09:f6:52:a3:6e:18:50:55:6e:25:dc:19:23:c8:49:a3:36:6e:
6a:71:47:37:15:e7:0c:83:d4:6c:69:05:6c:4d:c0:a5:2c:16:
2b:28:a3:bf:59:a4:04:eb:7a:50:29:61:ef:28:20:1b:bb:be:
73:6e:e3:98:d8:07:47:b1:4b:78:8e:09:ff:96:f3:8c:05:a1:
c0:f0:a3:49:ef:b7:c5:b9:24:32:82:44:f4:08:2b:e2:b8:e0:
cd:f6:d7:c7:8d:56:ec:ed:42:f0:6f:0a:de:f9:d7:e0:20:b7:
d0:20:fb:30:02:74:3d:d8:31:a2:d8:b9:95:d0:b7:53:4b:62:
1c:41:59:0d:a3:a0:68:53:1c:73:cb:84:f4:8a:e0:f8:f3:a3:
7c:83:e7:08:fb:7d:56:2e:ee:06:27:f2:79:9d:a9:5f:40:d2:
4b:2c:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org