Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323039323432.roa
File: 37372e33372e33332e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: 4aTzXOtAvPaI6J2KYxsS402lMZsPyPrS3kAGXyUJl4g=
Subject key identifier: 19:46:BA:6A:D7:DF:08:C2:12:A6:66:F8:E6:5E:B4:1F:3E:82:F2:60
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 53D07D4B41BB37FC3CCD97D21C381588FB2DD500
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323039323432.roa
Signing time: Mon 23 Oct 2023 09:52:53 +0000
ROA not before: Mon 23 Oct 2023 09:47:53 +0000
ROA not after: Mon 21 Oct 2024 09:52:53 +0000
asID: 209242
IP address blocks: 77.37.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:7d:4b:41:bb:37:fc:3c:cd:97:d2:1c:38:15:88:fb:2d:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Oct 23 09:47:53 2023 GMT
Not After : Oct 21 09:52:53 2024 GMT
Subject: CN=1946BA6AD7DF08C212A666F8E65EB41F3E82F260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:14:af:c6:32:d0:ad:b3:12:74:db:b2:0f:
97:56:29:57:41:11:fb:3c:c2:f9:9d:99:07:e2:d8:
3b:1c:ce:89:83:11:d3:d6:78:d3:94:f9:52:fd:ea:
ac:ba:75:a1:74:d5:90:c6:e2:99:e6:d0:56:84:27:
46:e9:ec:4c:85:86:9b:4c:24:99:7d:18:9b:73:7f:
19:58:40:27:ee:18:9b:39:c9:65:99:8f:dd:7c:d6:
88:1a:34:02:a4:4b:82:d2:c9:f1:8c:cc:e4:e9:23:
08:e1:80:e2:98:5a:2a:22:e8:9c:21:ca:b9:fb:ad:
1e:98:a8:ea:85:d5:e1:ef:a8:ec:af:3f:f7:5a:fc:
59:69:20:18:41:9c:af:f2:e9:d9:73:46:02:36:55:
9d:40:c9:28:e6:25:94:02:1e:e6:e1:29:d9:43:e5:
b2:1c:59:1f:d1:9f:f7:4a:b9:d4:73:ec:81:23:50:
8d:26:1e:1b:87:87:9e:3f:51:6c:71:12:45:62:f0:
2a:b8:43:dd:ab:bb:10:ed:14:06:7d:d1:11:25:9e:
37:b5:24:7a:d8:4c:29:57:09:5a:ea:1f:ab:78:9b:
07:1c:99:8c:10:08:f0:bf:24:08:b7:d2:1e:45:50:
db:79:b1:d4:6e:78:e8:4c:64:60:49:10:31:29:5a:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:BA:6A:D7:DF:08:C2:12:A6:66:F8:E6:5E:B4:1F:3E:82:F2:60
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33332e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:25:ff:7c:44:eb:5e:f1:ee:79:80:0b:78:58:7c:1e:dc:80:
cd:91:2c:57:f4:b0:53:6b:4a:3a:a7:67:03:f0:e8:76:2b:cd:
de:7c:ed:4b:4b:71:f4:44:99:5d:87:1e:59:74:a9:09:16:d7:
12:db:1a:1a:89:df:53:34:4c:e9:3b:b7:6b:e2:c7:63:e0:d0:
c6:40:49:03:65:94:bb:0e:73:04:d4:bb:00:c3:3e:6d:73:b3:
b9:5e:a1:95:14:a1:09:3f:73:29:e1:a2:37:73:62:11:f0:61:
88:c8:e0:cc:63:84:ce:00:b3:36:32:15:8d:67:e8:f7:ca:a4:
47:bc:3e:56:45:11:d8:41:f4:7e:8b:53:c3:3a:4c:0b:cf:9d:
cd:bd:ff:42:a1:db:48:e1:2c:33:75:cd:98:82:17:8f:8d:c7:
71:8b:68:28:2a:2c:27:5a:79:72:22:c9:14:79:f5:69:d6:dc:
a7:9a:77:2e:3d:fc:53:1d:37:50:aa:b1:07:8c:78:8d:dc:6c:
a9:a8:7a:00:52:95:14:83:21:20:ee:cd:f5:03:ef:e7:86:0d:
d1:1b:fd:b1:68:7d:4d:80:05:00:0b:f6:2f:75:41:0a:46:66:
df:01:c2:51:fb:9d:f9:b2:3a:0f:bc:34:e9:9c:e9:75:69:cb:
62:93:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org