Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e342e302f32332d3233203d3e203632333336.roa
File: 37372e33372e342e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier: drE/xdkp2H7ZvecRf0LbrYPr9zJXdFxW11y3ml1qr1k=
Subject key identifier: 09:9D:CE:58:EE:AA:D7:E5:73:24:DE:EA:10:9F:5E:09:D8:C4:7D:78
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 71F97C6AB049B444E47BE17CAE2F6C79D5F6EAA3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e342e302f32332d3233203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 62336
IP address blocks: 77.37.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f9:7c:6a:b0:49:b4:44:e4:7b:e1:7c:ae:2f:6c:79:d5:f6:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=099DCE58EEAAD7E57324DEEA109F5E09D8C47D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:6c:ee:5d:16:d9:ac:12:e2:33:32:ea:cd:
35:17:a7:8c:c5:e7:e9:68:99:f2:02:8c:33:61:f5:
77:fb:07:5b:dc:01:a1:ec:fa:39:4a:8d:85:62:0d:
cf:cc:06:24:d4:a5:01:c7:85:be:6a:8e:1f:ce:71:
b3:41:17:26:2d:de:2d:d6:7d:d9:5d:01:cd:8d:d0:
4e:04:41:47:4a:26:85:37:51:c0:0f:96:d9:76:44:
af:13:b2:6e:7b:c7:44:ed:2b:94:cd:52:00:60:77:
9e:43:f6:b3:e9:8a:27:5a:49:f3:46:c6:0f:75:36:
67:f9:14:39:73:8b:3e:64:7c:55:a3:3e:a7:87:bd:
6d:ce:5e:36:c2:35:77:74:1f:aa:0f:ef:ca:b8:04:
f2:33:5c:bc:fd:6c:61:cd:d9:38:58:51:bc:32:85:
30:1e:bc:48:92:4c:fb:c3:df:8e:79:41:0a:7c:36:
9d:bd:88:38:8f:b4:61:3e:25:39:43:ab:f3:f8:61:
49:73:da:db:33:6e:81:e6:5c:34:d4:4b:bc:b1:a6:
85:8b:c2:0e:74:25:2f:39:d9:96:24:36:c7:25:f4:
ff:34:68:c7:23:0a:8d:3b:91:5c:72:08:92:03:28:
e0:b4:ec:3d:00:ce:7a:21:b0:ef:87:7f:13:cf:cc:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:CE:58:EE:AA:D7:E5:73:24:DE:EA:10:9F:5E:09:D8:C4:7D:78
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e342e302f32332d3233203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
Signature Algorithm: sha256WithRSAEncryption
08:66:98:84:1e:2e:f8:03:b1:70:34:46:c1:bc:95:e0:31:22:
5f:f0:2a:a7:b7:01:fb:45:46:53:22:80:62:99:c8:ae:5c:f0:
89:85:a2:47:83:a2:f7:6d:0b:06:d8:61:d4:5d:e5:ac:4b:0b:
1b:3f:e0:71:11:83:d7:ee:e2:31:58:d9:9c:46:bc:9c:33:b0:
ab:1d:a3:e9:ba:bb:dd:93:e6:36:92:40:72:39:97:75:3f:4a:
df:32:35:27:3a:cc:ec:87:7e:1f:47:1e:f6:1d:26:9f:d4:37:
41:b2:78:73:60:97:13:cd:f9:2f:18:a8:4c:d2:d0:32:f3:51:
66:19:4d:50:44:2d:4d:bc:d7:7d:dc:4d:34:3f:4e:72:8f:25:
49:98:fd:c8:c0:4d:2d:b7:a8:63:8c:37:a4:51:28:e1:1f:de:
57:6f:6a:00:7b:0d:b3:33:39:a5:2b:93:56:7c:4c:41:fc:1f:
59:57:6e:65:a2:f9:18:a1:06:05:f0:6b:f4:32:79:06:07:c4:
99:ab:46:6e:6c:21:30:04:d6:54:88:78:93:53:79:90:50:95:
c3:b0:54:59:0b:a9:91:44:53:20:82:57:26:f0:e4:da:4e:3c:
f6:b8:44:f7:aa:d6:f7:d9:b8:8d:8a:37:79:d8:4e:b6:cc:87:
d1:75:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org