Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e20383334.roa
File: 37372e33372e33372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ioISK1TCUy1KltWo4UaS0hMu06Z5yVNkW1gZNv5xyV4=
Subject key identifier: 00:20:EB:26:10:33:2C:D8:7B:DE:DB:9F:C5:DE:9D:27:74:16:6F:BB
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5BDB647AAE4630302AD6563012D856E2AFC0FE20
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e20383334.roa
Signing time: Fri 13 Oct 2023 07:30:05 +0000
ROA not before: Fri 13 Oct 2023 07:25:05 +0000
ROA not after: Fri 11 Oct 2024 07:30:05 +0000
asID: 834
IP address blocks: 77.37.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:64:7a:ae:46:30:30:2a:d6:56:30:12:d8:56:e2:af:c0:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Oct 13 07:25:05 2023 GMT
Not After : Oct 11 07:30:05 2024 GMT
Subject: CN=0020EB2610332CD87BDEDB9FC5DE9D2774166FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:76:51:bd:74:fb:ca:34:3d:50:e5:6a:a2:
75:9f:f9:56:86:40:7b:04:f8:57:95:e2:40:ca:ad:
0d:cb:e9:1e:99:89:1a:f2:4a:c3:f8:a5:a7:c7:0e:
95:e0:32:39:d1:2b:c1:cf:8b:24:89:17:42:f6:11:
a3:ed:84:03:67:32:03:23:ef:14:a0:20:35:02:fd:
cf:0a:0a:33:80:83:e2:0b:75:08:69:5e:2a:84:96:
e4:d1:9b:06:f5:c5:45:fa:18:a5:4e:6c:e6:2b:5b:
84:6a:ec:ca:48:0b:f6:73:dd:c9:26:da:8a:23:32:
1b:ff:a9:ea:c3:c5:b0:e5:97:76:e0:70:d7:23:c0:
4f:84:1b:3e:66:f2:50:50:cd:a6:bb:09:df:9b:5b:
c1:27:db:a3:70:5c:fa:3c:62:a5:4c:f3:f4:53:20:
5d:8b:40:da:00:af:5c:58:a3:0c:c9:b7:7b:0b:5f:
43:1c:6e:29:ae:89:12:db:00:57:0d:a9:b8:f7:36:
a4:88:41:dc:94:e6:9d:4c:4e:57:ba:d6:5b:2e:f6:
c4:97:21:eb:47:e2:0d:6f:54:fe:47:27:b5:4d:c3:
ee:5c:a2:05:fa:ba:19:c4:2f:fb:4d:76:b8:c4:46:
92:58:ce:4a:3c:9a:d1:bd:a4:cf:11:b8:a5:b0:30:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:EB:26:10:33:2C:D8:7B:DE:DB:9F:C5:DE:9D:27:74:16:6F:BB
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.37.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8e:1b:39:1c:52:3b:a0:d0:a9:78:66:28:e9:00:18:f9:22:
0b:5c:d4:22:9c:57:93:e5:12:ba:4f:16:a7:72:ed:c7:5f:92:
6d:3f:94:b7:08:97:2b:2b:e0:b8:4a:e6:9e:0b:44:4a:52:6a:
52:9b:78:26:6c:a9:ff:8e:b2:28:f3:37:c2:04:d0:f8:22:bb:
2d:0a:03:f8:c8:04:18:67:ad:96:e7:69:3d:9b:35:cd:88:0e:
c2:37:f3:67:47:97:9a:78:8b:e3:74:45:f6:dd:d1:26:46:98:
d6:16:74:67:5d:50:75:45:ec:ae:d0:48:71:5a:b9:5e:e8:e2:
9c:a5:c1:ec:17:75:2c:d4:aa:57:50:98:46:44:36:e9:9f:8e:
88:b8:6b:74:f6:71:30:22:f4:4b:e6:79:22:05:04:2f:70:91:
b2:dd:3d:0a:d9:f9:06:21:90:f3:62:18:ce:3e:e4:dd:3d:64:
55:d7:78:b4:29:57:94:7b:0e:95:cc:5f:e2:b3:5e:63:33:d0:
c8:af:ab:89:cb:e0:63:02:ab:6f:28:e0:ef:41:15:f2:a9:d1:
50:ea:51:45:b1:81:73:45:8d:17:4e:cc:5b:80:3a:a4:7a:32:
82:a9:83:47:4b:1d:3b:b5:02:a1:df:c1:a1:78:60:3c:f6:20:
4c:c7:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org