Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e332e302f32342d3234203d3e20323034343731.roa
File: 37372e33372e332e302f32342d3234203d3e20323034343731.roa (raw, json)
Hash identifier: PTjmpNSwrMeVbVR4c/1CKhF7GVBXafSIgvHfC9VtPOA=
Subject key identifier: 52:9D:EA:B2:81:98:C3:37:E5:E0:15:EC:23:AC:D3:49:A7:53:06:BA
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7A99C18D2AC1C02ED39D709B2D5B774EA875A364
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e332e302f32342d3234203d3e20323034343731.roa
Signing time: Wed 15 Feb 2023 12:44:02 +0000
ROA not before: Wed 15 Feb 2023 12:39:02 +0000
ROA not after: Wed 14 Feb 2024 12:44:02 +0000
asID: 204471
IP address blocks: 77.37.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:99:c1:8d:2a:c1:c0:2e:d3:9d:70:9b:2d:5b:77:4e:a8:75:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 15 12:39:02 2023 GMT
Not After : Feb 14 12:44:02 2024 GMT
Subject: CN=529DEAB28198C337E5E015EC23ACD349A75306BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:f4:7f:fd:aa:8e:d8:9f:82:9f:ba:75:ab:
e6:83:49:01:25:ac:34:d6:2e:7b:6a:6d:98:a9:e1:
43:5c:54:c8:0b:06:29:d7:10:4d:a3:83:9b:0a:4f:
b9:3e:94:a6:2a:09:09:30:ae:64:b6:13:47:48:e2:
63:3a:34:fb:22:f0:8d:b8:06:9f:01:f9:72:71:4a:
b8:84:2d:99:94:43:93:db:a9:2e:c9:d6:cb:0c:54:
f5:46:59:38:4c:b8:e9:4e:93:92:7c:23:1f:ee:0d:
95:e4:98:f4:e8:df:b8:b5:32:65:57:f2:dc:21:42:
19:42:ee:36:34:8a:23:a5:60:a1:b8:78:87:a7:41:
5a:9a:e7:11:d5:9c:b0:1f:58:e0:ec:e8:83:16:6e:
0e:44:fa:cd:63:ad:0a:00:a4:22:fd:28:74:16:e5:
07:90:2a:2d:23:63:cc:7a:1f:5c:08:89:44:bc:9f:
5b:ba:5e:57:04:81:98:89:f9:2f:5c:d2:55:fc:fc:
bb:4c:bb:a9:79:52:03:6e:65:e8:b6:22:1e:dc:b9:
e0:c1:54:e2:23:d3:6a:ad:18:b0:aa:a5:24:32:26:
71:ff:54:fb:85:82:4a:30:77:d5:0d:3f:7e:ff:85:
6a:d3:e4:ce:de:7e:92:35:a4:e4:62:95:88:63:f0:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:EA:B2:81:98:C3:37:E5:E0:15:EC:23:AC:D3:49:A7:53:06:BA
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e332e302f32342d3234203d3e20323034343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.3.0/24
Signature Algorithm: sha256WithRSAEncryption
53:98:e4:e2:b5:f9:d9:fd:19:61:b4:2f:1c:f1:36:a8:4a:e8:
07:cb:71:a6:18:7d:59:21:40:0a:72:f5:7a:6a:de:e0:ec:0e:
57:cd:4f:7d:27:1b:d2:de:e3:ce:e8:3c:9a:a4:b7:ec:44:0a:
94:8a:e9:f1:5a:98:da:a5:e5:ca:63:d5:1a:dd:1b:20:f0:37:
cd:d2:b8:f6:ca:f3:92:b4:aa:3d:88:96:44:40:e5:38:e4:28:
7a:dd:0e:74:f0:41:10:4a:68:73:ab:a2:f5:d2:6d:78:e4:0f:
dd:fe:ad:cc:5a:d6:5c:c8:f0:62:cc:bc:34:6b:bb:e5:34:61:
dd:90:73:b3:e7:68:a6:d6:3c:f8:a2:a9:bf:7a:41:99:ec:44:
fa:80:a8:ad:cc:b3:b3:6a:7a:5c:d9:54:4a:b5:ae:c2:40:6d:
c5:85:cc:69:2e:8e:12:94:c5:b7:bb:4c:3f:1a:a5:ca:37:36:
f7:4e:be:59:83:c0:bb:cf:38:d5:f2:2a:0e:53:39:25:42:0d:
69:67:c6:ee:27:27:c5:c8:0d:65:17:33:6e:66:58:56:ad:cb:
f9:b6:52:a4:4c:4b:2b:03:6f:7f:4b:16:44:31:82:cd:25:c4:
98:ed:28:60:79:00:3a:bf:14:5c:b3:b6:20:47:31:e2:8f:c7:
a7:46:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org