Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e20383334.roa
File: 37372e33372e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5M28WTPtTF+FreQRcGfPUjSPLkFNzbRYt/vpr1EMCR0=
Subject key identifier: C8:C8:E8:95:6F:F6:0F:72:2B:57:15:18:D9:47:4F:19:C7:46:C7:1E
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6C5F34F84B59F44642C48625879F51273B6A1148
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 00:00:17 +0000
ROA not before: Thu 30 Mar 2023 23:55:17 +0000
ROA not after: Fri 29 Mar 2024 00:00:17 +0000
asID: 834
IP address blocks: 77.37.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5f:34:f8:4b:59:f4:46:42:c4:86:25:87:9f:51:27:3b:6a:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 23:55:17 2023 GMT
Not After : Mar 29 00:00:17 2024 GMT
Subject: CN=C8C8E8956FF60F722B571518D9474F19C746C71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:79:23:43:9a:dd:c2:22:a5:ed:30:e7:02:
3c:7f:4a:31:65:c3:81:6e:e9:02:d4:fb:23:f8:00:
41:f3:a1:91:e6:0f:c7:55:85:a4:2a:67:2f:5a:3a:
02:d6:a3:8d:ac:3c:73:ab:0c:9b:50:73:29:e2:3a:
84:2c:a2:59:cf:d0:5c:7a:41:de:33:50:6d:4f:17:
a3:eb:9d:3c:fc:31:a3:2f:6f:3b:ee:f4:7e:e0:5e:
41:da:e3:0d:89:b7:05:73:7a:26:c2:33:1b:ce:03:
fb:f6:a9:f0:b4:50:b6:d3:28:2e:73:21:38:90:39:
18:3d:ef:24:58:b8:35:90:16:3f:29:5e:f6:7c:b5:
2c:58:5f:71:73:2f:bb:29:77:16:7a:b5:49:45:c5:
bd:25:20:8c:a9:dd:f8:97:d2:67:32:1f:65:7f:99:
0e:dc:8a:f9:4c:b1:ed:6c:da:00:f1:00:d9:53:10:
5a:9e:dc:08:24:28:64:01:48:ba:02:0d:29:27:04:
06:73:3d:46:5f:7f:6d:9a:3f:c9:a8:8f:42:a5:05:
98:9f:9d:d5:29:27:86:da:2e:36:c0:31:54:25:11:
af:f1:27:6a:48:e4:c4:38:65:bf:04:24:c5:e6:70:
85:1e:cc:17:dd:58:6f:71:c5:44:eb:6f:48:24:93:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:E8:95:6F:F6:0F:72:2B:57:15:18:D9:47:4F:19:C7:46:C7:1E
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
Signature Algorithm: sha256WithRSAEncryption
77:69:ed:46:cc:96:f6:1c:2d:6d:d5:c9:4a:3a:de:3f:5b:4f:
c8:07:13:83:f8:7c:fa:b9:b8:3c:ee:83:b2:96:07:84:c3:8d:
c3:27:5e:db:01:e9:f0:66:7d:bf:a9:8f:e7:20:e7:9b:a6:30:
ac:66:59:b6:93:84:fd:b0:c5:e9:9a:75:15:90:f0:a4:2b:57:
7a:b8:ad:c0:48:d7:df:8d:fa:6a:87:f7:6e:de:9e:fc:94:ee:
bf:4f:8c:36:2e:f1:20:89:ce:75:de:a5:bb:ab:84:70:7a:1b:
e5:da:fc:d0:4d:45:8b:d5:18:c2:2c:64:74:2b:51:7f:03:a3:
1e:2e:5f:33:73:73:48:a7:86:61:85:bb:e1:5e:28:ac:e2:30:
28:85:88:a6:a6:89:fa:da:1d:04:25:95:5f:26:7c:c6:fc:83:
0f:e2:a6:ad:c4:1d:45:0f:4a:94:e0:45:06:b6:91:2c:55:d4:
73:fe:c6:b2:09:1b:11:62:fa:35:84:a2:e2:75:48:95:c5:4f:
4a:42:cd:19:18:86:07:3d:c4:d1:b4:42:79:55:0d:30:af:3d:
33:db:9c:e1:89:17:94:98:45:8a:f0:0a:7e:05:c8:4f:d4:3f:
36:4b:00:bc:84:1b:29:d8:5e:6e:e5:a7:4c:37:1c:36:c9:82:
c9:35:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:32 2025 by rpki-client