Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20323132363039.roa
File: 37372e33372e33382e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: M3j/eVlnlKIn9nAE+1FeDCi0FLaUqR56VlPK3AG277o=
Subject key identifier: 4A:B1:02:A2:17:1A:17:8E:A9:F7:D8:6B:88:5F:F3:5F:E6:3E:B9:C0
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 0C09A4CD4E50D0897DEF64FCBDDD0AA10CAFA6ED
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20323132363039.roa
Signing time: Fri 20 Jan 2023 06:26:07 +0000
ROA not before: Fri 20 Jan 2023 06:21:07 +0000
ROA not after: Fri 19 Jan 2024 06:26:07 +0000
asID: 212609
IP address blocks: 77.37.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:09:a4:cd:4e:50:d0:89:7d:ef:64:fc:bd:dd:0a:a1:0c:af:a6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:07 2023 GMT
Not After : Jan 19 06:26:07 2024 GMT
Subject: CN=4AB102A2171A178EA9F7D86B885FF35FE63EB9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:0d:1f:7d:b4:40:8d:0c:3c:8a:eb:58:5a:
37:81:f2:cc:0f:ff:36:e9:aa:5b:88:eb:8c:36:86:
47:c4:4d:f8:3e:e3:c0:2a:ad:f7:6a:07:bd:4d:5e:
53:e8:29:5b:33:d6:14:34:77:0b:5a:5e:66:9c:7a:
b9:93:53:31:dd:41:fd:0f:2c:9b:25:fd:f2:77:dd:
94:35:60:5c:cc:27:cf:65:b6:78:5c:40:b6:94:aa:
80:44:d2:33:fe:dc:0e:17:c3:24:01:3a:be:d1:a8:
ca:81:eb:b0:a0:00:80:43:25:7f:81:6a:1a:da:49:
ff:38:8e:14:59:14:d9:8a:6f:7b:06:cc:74:09:0c:
bd:a0:f2:aa:83:58:a5:3d:08:a0:e6:25:e8:fe:05:
03:6d:71:4b:0c:ec:9d:01:b9:2f:77:b5:55:1b:bb:
64:f9:61:f6:d1:4e:e0:2d:17:54:d2:70:82:5c:0e:
7d:3e:62:14:e1:00:d0:3b:3d:98:d6:42:85:1b:d5:
14:f4:ef:77:92:c9:4b:f9:f8:9e:18:8a:bc:fb:b5:
9b:e1:d0:00:7c:da:1a:8c:7f:a7:1a:f1:72:d9:93:
df:d8:96:31:28:a3:be:bd:8c:8b:6d:30:df:23:92:
38:87:6c:9a:70:6f:d5:b9:58:b3:f5:c5:ff:4e:01:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:02:A2:17:1A:17:8E:A9:F7:D8:6B:88:5F:F3:5F:E6:3E:B9:C0
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f3:c9:59:b5:96:bb:6a:26:cf:41:13:57:48:17:78:c7:9a:
7b:be:49:2c:06:70:2d:65:9d:16:82:b8:1f:86:07:01:be:74:
b7:9a:52:c4:b6:06:d8:a3:1a:c6:61:24:25:f8:4f:9f:2c:e8:
a6:45:f7:60:0a:f4:1d:23:7c:16:0e:b8:f0:e6:88:ca:a2:fa:
9b:d2:be:58:75:66:40:31:08:0c:b3:6b:38:c6:97:da:61:78:
21:69:a6:78:4d:22:d3:81:f5:fb:b0:e8:bd:56:50:cf:46:07:
65:70:d3:c3:22:34:4b:52:f1:fd:bf:34:9c:84:78:70:27:f5:
63:27:c6:6f:57:af:01:8d:fd:e6:07:46:68:c0:f3:09:e0:ec:
14:78:a2:4f:7a:7d:9b:80:9a:d3:94:09:f1:4e:77:ef:3b:47:
92:c3:4b:9e:b7:74:67:58:20:5b:e3:5a:08:b6:88:15:5f:5a:
db:ab:f1:cb:ea:33:3c:4d:34:d0:ba:10:ce:7c:d3:a1:76:1c:
97:a3:2f:02:22:d2:99:06:3d:99:56:54:c0:40:9f:32:ca:38:
78:cf:2f:68:fa:ad:2b:ce:2a:93:2f:70:f7:2e:50:c9:fb:9e:
96:ed:26:cc:7b:16:74:a3:9f:07:ce:75:e7:ad:2d:25:44:29:
46:0f:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:27 2025 by rpki-client