Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e203632303638.roa
File: 37372e33372e33362e302f32342d3234203d3e203632303638.roa (raw, json)
Hash identifier: gVvKpRbmasGT9AjwtQx0ZtkfeKJr5PBhdS5AbxdZ3kc=
Subject key identifier: E6:0F:38:AD:A5:49:85:6B:2F:2D:2F:33:FD:42:A1:17:20:0E:40:D1
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3294D2E7C657CC0F40369957F9EFB040FC5F6D3C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e203632303638.roa
Signing time: Fri 20 Jan 2023 06:26:06 +0000
ROA not before: Fri 20 Jan 2023 06:21:06 +0000
ROA not after: Fri 19 Jan 2024 06:26:06 +0000
asID: 62068
IP address blocks: 77.37.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:94:d2:e7:c6:57:cc:0f:40:36:99:57:f9:ef:b0:40:fc:5f:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:06 2023 GMT
Not After : Jan 19 06:26:06 2024 GMT
Subject: CN=E60F38ADA549856B2F2D2F33FD42A117200E40D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:54:df:f9:ef:ab:14:8a:6a:fc:c4:50:45:
01:5a:e0:94:64:81:82:d7:27:46:e1:11:e0:c4:d4:
3a:3f:52:48:ec:61:26:aa:6d:75:19:d6:5f:58:b0:
c3:4e:b5:cd:8c:cf:42:19:69:77:17:38:71:c9:6e:
7f:76:8f:4f:8c:2a:9b:cc:75:57:f4:67:9b:33:21:
4d:08:03:6e:ff:8b:55:a4:52:30:af:18:95:c5:99:
86:54:0f:7d:ab:c2:be:bf:94:38:ee:22:d6:20:d6:
a8:59:a3:e0:2f:49:50:a5:79:5f:60:cf:d4:9d:f8:
1a:d8:f4:fb:33:2f:bf:27:06:00:2f:e4:1b:7a:00:
66:e6:58:38:82:61:06:cc:1d:59:4c:d2:53:4d:18:
61:ec:83:2e:56:c4:6b:9d:85:53:8e:d6:e0:42:22:
97:00:19:ac:47:29:88:a1:02:66:2b:7b:1e:92:31:
01:66:b6:4c:e9:b9:5f:a8:f7:33:36:96:33:7b:e1:
82:57:d4:6a:cc:28:29:be:74:68:55:1a:2c:5b:17:
e8:68:c1:77:c6:01:49:64:5d:a8:43:29:df:09:62:
de:ce:9f:8e:67:27:15:02:24:4f:50:7b:15:52:09:
28:2b:a6:6c:81:a7:64:fb:22:75:e5:66:1c:7d:a5:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0F:38:AD:A5:49:85:6B:2F:2D:2F:33:FD:42:A1:17:20:0E:40:D1
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e203632303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0a:2a:06:2f:30:ce:8e:33:f0:36:df:8c:0f:24:2b:16:94:
df:e5:88:de:47:86:df:6e:93:11:86:1f:89:1b:a7:0b:34:fb:
67:0a:69:d2:10:81:cc:44:d4:34:5b:38:3f:bf:b0:3e:4e:7f:
24:3c:23:dd:ee:b6:87:1e:16:d4:73:78:ca:48:8e:ba:6f:09:
0f:36:4f:93:0a:be:0d:36:54:f6:e3:8e:e5:0c:6e:ce:0d:32:
9f:81:2c:5e:b4:99:28:20:64:26:9d:31:a8:de:a7:72:e4:85:
82:e0:da:5d:7d:e3:e6:f7:98:b6:c4:4e:f9:56:d0:39:a3:cb:
d6:f6:e4:cc:35:3c:47:ae:03:cb:92:31:bb:ea:8f:cb:cb:3a:
42:6f:1f:ae:97:27:97:85:e8:4b:52:9f:77:17:bd:d0:a4:17:
c2:b7:e1:09:62:6b:62:37:a7:21:cb:32:d8:9a:8a:80:ed:a0:
c3:db:bb:97:9f:c7:7f:be:74:c0:e0:15:8f:f0:c2:2d:11:2f:
6c:72:04:9c:60:95:7f:b6:ce:cf:74:fd:c7:a9:c5:37:1d:62:
62:11:72:c1:8d:10:33:a8:85:12:45:a5:d1:c8:fc:43:61:f8:
55:4f:e2:9c:cf:af:03:9c:0b:16:56:7f:97:d8:2b:02:09:19:
66:ef:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:45 2025 by rpki-client