Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20383334.roa
File: 37372e33372e33382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: fN7by02gE+q7loFmAYvB44DEKQMD9YULvqulWBL6+O8=
Subject key identifier: 9E:B5:1D:F3:7E:DF:10:1F:95:8C:6B:79:73:8B:5A:81:70:DB:D5:DF
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 662BE804A9959D89D738A5440A662428A116A520
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Jun 2023 16:00:03 +0000
ROA not before: Wed 07 Jun 2023 15:55:03 +0000
ROA not after: Wed 05 Jun 2024 16:00:03 +0000
asID: 834
IP address blocks: 77.37.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2b:e8:04:a9:95:9d:89:d7:38:a5:44:0a:66:24:28:a1:16:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 7 15:55:03 2023 GMT
Not After : Jun 5 16:00:03 2024 GMT
Subject: CN=9EB51DF37EDF101F958C6B79738B5A8170DBD5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:e1:0e:02:1a:c9:57:43:0e:85:bb:a0:2e:
7c:c8:f6:d8:de:70:ed:1f:6b:f5:b7:53:0b:ae:0c:
21:77:15:55:08:4a:40:13:a3:97:62:0c:3c:89:e5:
ac:4e:b9:c3:b6:e5:c3:28:69:75:78:8f:d4:c9:e6:
33:b2:20:13:db:dd:76:30:45:46:42:e2:6f:b6:2e:
21:44:fb:39:5c:c5:b5:47:b2:2a:78:e8:d5:64:1c:
d3:b8:a0:f3:c2:d3:42:ef:a0:b1:9f:c3:59:18:cf:
23:66:b2:32:9e:88:6d:db:c1:48:08:d6:f4:41:d0:
9d:79:f6:a9:34:7c:eb:bf:7d:f4:a8:40:3c:89:b3:
d9:8f:41:e9:57:88:bd:c0:20:d3:49:65:70:09:0b:
0c:34:cb:4b:7f:8d:fa:a0:dd:b9:11:e3:11:c9:0a:
1f:ec:ca:8e:ee:ac:a6:cc:94:8e:49:b9:b8:25:cc:
e7:de:26:c1:50:53:68:d3:5c:f8:5c:04:ee:c2:1c:
c6:0e:5a:ff:b1:4b:dc:f5:de:96:64:62:f0:ee:5b:
2c:24:1d:04:8d:14:54:31:71:92:b3:6a:3c:ce:c6:
d8:53:28:35:36:fe:29:e1:b7:4d:9d:d0:d5:b2:85:
8e:7a:a6:95:d7:0d:e8:4b:a3:71:30:ad:cc:96:fe:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B5:1D:F3:7E:DF:10:1F:95:8C:6B:79:73:8B:5A:81:70:DB:D5:DF
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bc:20:08:04:e7:1d:15:33:d2:f0:bd:d6:50:c2:eb:84:a6:
b6:46:b4:b7:be:57:bf:41:b0:53:28:4b:fe:93:e7:38:6f:62:
24:0a:31:9b:b1:48:03:8b:7a:36:ff:2d:0d:3a:c3:17:40:f9:
2b:4d:6f:d0:e1:3a:cc:ec:08:0b:93:09:cd:7f:45:29:43:5f:
cf:76:c3:c3:46:f2:1c:12:fb:fa:c7:71:ab:ba:18:e2:b0:e7:
5b:7f:db:00:38:e5:93:11:50:2a:f0:ea:c3:19:79:4e:7b:61:
b5:27:85:3b:a7:6f:9f:7b:01:dc:b5:78:a2:ca:d1:73:27:42:
f1:1f:27:7f:23:2e:b9:c1:07:5f:ac:9f:97:9d:a6:64:d7:12:
bb:89:eb:8f:9f:2a:39:ab:f7:2d:bd:88:27:82:c4:b9:65:c6:
c6:b2:36:78:36:4d:80:4e:da:ab:ae:a2:f4:c6:5a:74:35:de:
21:f1:bd:4d:cb:e5:31:88:f9:f4:24:e0:81:b6:65:75:fd:f7:
23:1c:e7:b4:a7:a5:64:23:eb:e3:6b:c9:8a:f8:30:50:30:0e:
d2:bc:6f:8c:80:45:db:25:90:b8:37:e6:c8:47:45:7f:e1:62:
d5:d9:06:2a:96:4b:09:12:9c:a4:2c:48:36:ee:b1:a5:5e:bd:
16:48:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org