Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e20383334.roa
File: 37372e33372e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0QLWQyPQoCAk5Sm8p+exvEk+xilZKaFrIMNWqWpB8i4=
Subject key identifier: 7A:19:EC:4F:95:B9:BE:18:95:2C:1B:A2:4A:A8:44:50:12:D6:EC:35
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 782A3ABD459F100F4EC27862F726486F33837089
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 00:00:06 +0000
ROA not before: Sun 01 Oct 2023 23:55:06 +0000
ROA not after: Mon 30 Sep 2024 00:00:06 +0000
asID: 834
IP address blocks: 77.37.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2a:3a:bd:45:9f:10:0f:4e:c2:78:62:f7:26:48:6f:33:83:70:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Oct 1 23:55:06 2023 GMT
Not After : Sep 30 00:00:06 2024 GMT
Subject: CN=7A19EC4F95B9BE18952C1BA24AA8445012D6EC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:dd:1b:fd:06:8d:75:be:66:50:7e:b9:9b:
76:45:26:12:65:e5:20:62:33:ff:3e:1a:84:9e:a0:
68:91:a4:b9:ed:5e:ab:d9:49:a0:52:28:2b:44:f3:
31:a9:50:77:0a:11:18:e1:46:7a:f7:46:55:59:52:
58:8a:43:0a:ed:3a:39:36:1e:c6:db:9d:11:12:7a:
b2:59:6b:bc:47:f6:f8:4b:9f:3a:95:d7:aa:1f:dd:
a1:6a:fc:fe:4a:a2:49:44:e6:bf:d9:df:3e:73:e1:
a5:24:13:3e:96:44:80:43:36:50:5a:b8:2c:3e:6b:
f0:29:c8:74:9a:7a:3e:e0:48:91:22:1d:49:b5:ef:
4b:3b:fa:a5:99:0d:de:97:fd:b6:9e:29:d0:d4:53:
ac:51:a5:d0:e6:2a:e4:0a:74:47:f0:6a:78:0d:69:
25:d8:53:d0:c8:38:c8:8e:0d:87:62:3f:28:a6:06:
c8:31:37:b3:c1:15:78:45:24:3b:81:13:9d:60:ae:
60:de:33:98:bb:85:e5:bf:2c:2b:21:58:e7:ce:82:
44:2f:da:09:84:c9:96:75:ab:7c:7b:f3:c4:66:9c:
5b:2e:98:aa:ea:36:bc:8d:c1:6a:a2:35:08:93:8d:
c6:7b:53:3b:57:3b:fa:cb:2a:37:b5:74:36:01:89:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:EC:4F:95:B9:BE:18:95:2C:1B:A2:4A:A8:44:50:12:D6:EC:35
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ec:f2:0b:a4:07:5e:7d:c1:2a:38:73:27:a5:cc:22:82:cf:
0b:ea:cc:c4:09:e1:55:71:7d:65:82:95:7f:5c:2b:5c:72:f4:
2f:79:b8:a5:ec:20:79:39:ee:aa:a1:05:08:8e:9d:2c:29:68:
2b:40:bf:d1:07:67:7d:0f:6a:1a:75:50:d8:c3:31:2d:9a:80:
7b:a1:bb:a2:f8:c1:9b:18:4c:d9:bf:7a:88:44:87:63:0c:71:
60:b9:0d:b8:2a:70:e4:66:c2:c4:04:37:64:9b:d5:55:13:5e:
38:33:50:25:b6:98:66:66:78:0e:cb:e4:21:55:e7:49:10:bc:
cc:4e:3d:d7:45:e2:f2:27:0a:62:e9:b1:0d:f3:50:f4:b7:24:
d3:41:f0:58:87:cc:05:69:89:91:31:64:3f:de:ba:86:7f:5d:
52:8d:2f:1f:90:b2:35:03:bb:9f:28:5a:02:b8:e4:8a:c8:1d:
b1:d8:7f:cc:6c:65:63:ee:3d:f3:6c:e5:5c:ed:db:fc:7d:4b:
07:77:9d:9c:91:32:1f:26:2a:41:3c:5d:67:ae:51:76:04:64:
08:01:67:d8:ae:a6:17:b3:86:a0:82:b3:dc:8e:bc:03:25:52:
2c:7e:ee:8f:75:a9:22:58:46:ef:d1:33:f4:7f:29:e0:7e:d5:
11:6f:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org