Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33342e302f32342d3234203d3e203630373231.roa
File: 37372e33372e33342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 19BItNJ531KIoPBveEfbHLKemtYXA71iE/oJZtEPWIc=
Subject key identifier: 94:5A:15:91:10:7E:1A:C8:59:E3:B4:8B:E6:E7:B9:15:8E:8C:B1:0C
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6F78D8E260D4EDC3BF462F38E8C0646391C36EF1
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33342e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:06 +0000
ROA not before: Fri 20 Jan 2023 06:21:06 +0000
ROA not after: Fri 19 Jan 2024 06:26:06 +0000
asID: 60721
IP address blocks: 77.37.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:78:d8:e2:60:d4:ed:c3:bf:46:2f:38:e8:c0:64:63:91:c3:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:06 2023 GMT
Not After : Jan 19 06:26:06 2024 GMT
Subject: CN=945A1591107E1AC859E3B48BE6E7B9158E8CB10C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:a9:36:6a:c3:c1:32:39:88:cd:f6:40:c3:
79:84:15:e1:34:6b:91:aa:f0:44:46:21:d8:b8:98:
47:af:42:95:25:fd:84:ed:51:97:cf:1b:3c:8b:04:
04:32:5e:96:78:34:78:2b:cc:a2:93:67:2e:b5:b1:
9d:36:41:62:77:3f:a0:40:ba:40:94:a5:b3:3d:4b:
2d:b3:24:4d:a6:b1:ac:53:07:86:2f:03:93:e2:db:
92:8c:6f:c5:30:24:f7:b1:b9:ca:ae:9e:30:70:54:
e8:47:92:f9:45:45:6b:a5:da:86:61:ce:b5:fb:bf:
11:db:8b:99:00:7d:4e:e3:cd:8e:1d:b4:ac:17:5d:
18:0b:46:0c:89:d0:49:c7:44:98:9e:cb:63:cb:bf:
05:f9:e3:62:2b:bd:f2:6e:90:7b:03:c2:43:b1:cd:
92:9d:c1:4f:8e:e6:38:3c:98:a0:33:d3:29:a3:89:
b4:f0:0a:80:92:9e:60:85:63:fe:45:2d:e4:f1:9c:
83:e1:75:25:1c:a8:12:ae:f9:f1:e3:0e:02:53:9e:
3e:c9:ac:99:94:cd:f7:62:34:17:db:ff:28:53:da:
7a:50:9a:fd:64:45:bb:7f:a7:b2:f8:86:30:62:76:
77:40:22:d7:64:71:34:17:70:64:38:dc:d3:09:a0:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:15:91:10:7E:1A:C8:59:E3:B4:8B:E6:E7:B9:15:8E:8C:B1:0C
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33342e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1a:f7:9c:76:70:d0:42:71:18:2e:72:8f:ee:7c:4c:b0:a9:
c0:40:33:3c:6b:c9:f6:fa:9f:2a:78:30:62:7e:28:78:98:f4:
56:da:2b:40:27:31:ab:a9:19:ed:7f:6a:0e:ac:d1:b5:a4:10:
34:44:f3:1d:a5:dc:82:b9:0e:2e:cc:57:36:8e:3a:0e:13:50:
a0:bc:44:b9:7d:c5:aa:1b:41:68:c2:0c:00:7d:a6:44:7f:a0:
60:ad:06:04:28:0c:1f:a8:d0:b7:1c:16:41:49:26:9f:aa:2e:
f0:98:ea:b7:db:fd:bd:e5:71:2f:b9:1e:c4:6c:20:34:40:3d:
83:a3:43:6d:8f:bd:99:09:76:53:f9:74:a8:52:57:a9:cf:f2:
09:83:65:14:dd:3b:9b:e5:3a:ec:ed:26:3a:9e:e4:e6:6f:5c:
37:0a:0f:92:12:ab:e0:3d:40:5c:75:2d:47:ba:00:28:f0:b6:
7d:92:e7:97:90:ac:87:33:bd:75:e6:f5:b4:0e:07:53:54:6d:
7a:b1:4a:9d:14:fb:ca:5c:ca:ad:8c:6e:22:59:8d:7c:cd:8e:
ac:27:ae:29:91:ba:d2:91:23:d6:df:89:5d:59:13:4d:84:39:
3c:4d:e9:b8:10:36:b9:ea:09:89:cd:95:16:c7:3a:20:9a:ad:
f5:62:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org