Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34302e302f32342d3234203d3e203630373231.roa
File: 37372e33372e34302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: C9WrDkm7CBiMRebtfuLtng2/JlWLsewHCpCrsH/mNOY=
Subject key identifier: 28:64:D6:B5:1A:3E:0C:BF:30:04:93:ED:41:B8:97:97:88:AC:0C:4D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 064093555F1ACE36122BC09857B06F0C810D151F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34302e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:07 +0000
ROA not before: Fri 20 Jan 2023 06:21:07 +0000
ROA not after: Fri 19 Jan 2024 06:26:07 +0000
asID: 60721
IP address blocks: 77.37.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:40:93:55:5f:1a:ce:36:12:2b:c0:98:57:b0:6f:0c:81:0d:15:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:07 2023 GMT
Not After : Jan 19 06:26:07 2024 GMT
Subject: CN=2864D6B51A3E0CBF300493ED41B8979788AC0C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:e8:9a:99:1d:d2:b4:6c:8d:92:a7:b7:54:
d1:76:ae:8a:08:bb:5b:a8:0d:48:ee:a4:85:75:b5:
8b:42:9f:ba:1b:07:e1:34:9f:72:46:89:54:91:e7:
9e:1d:5c:d2:c3:b4:16:98:d1:6b:83:b1:a4:a5:74:
bb:74:95:6d:96:20:e2:d3:89:a4:83:cc:59:5e:bf:
c9:cb:4d:f4:54:6f:87:b6:78:e1:21:35:89:19:b0:
85:8b:69:8b:e8:5a:46:2d:6b:cb:05:e3:bf:dc:5a:
2f:f7:47:e2:aa:a0:81:de:41:cd:3f:e9:94:9d:ef:
76:ce:1e:d1:1b:ce:24:0f:42:7b:80:3e:84:29:ea:
a0:1f:7f:21:c7:72:be:17:33:70:14:61:a2:52:e0:
5c:a2:17:e2:03:94:11:aa:9c:fa:58:b5:bc:d4:c8:
1d:d7:dc:6d:e3:25:54:fe:f7:3b:74:16:e8:d8:cb:
c0:79:03:1b:b3:3c:56:ef:93:37:93:4f:dd:95:54:
f6:bf:74:2b:4a:d1:ee:19:ad:84:c9:74:ed:dc:04:
2c:1a:45:c5:70:d6:3b:db:a8:f9:11:ff:f4:2c:23:
e7:36:93:23:6d:b9:c8:6c:24:17:ab:07:ea:71:ac:
4d:3e:39:df:65:cf:50:fa:c1:7c:3a:11:7d:0d:da:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:D6:B5:1A:3E:0C:BF:30:04:93:ED:41:B8:97:97:88:AC:0C:4D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34302e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:92:23:ed:7f:af:c4:1e:d2:00:60:6e:4e:f1:86:2f:a6:f2:
44:52:fd:f7:16:04:f2:6b:4c:6a:39:ac:8b:fa:22:33:e9:fc:
ba:41:ab:91:05:7c:31:16:49:74:6f:ed:b8:14:56:08:9d:de:
b8:fc:e5:4d:9f:1d:c4:fa:dd:41:5c:13:0f:97:64:cb:5c:d2:
44:b7:3d:b4:12:bd:d5:13:6c:5a:5e:5e:54:0b:9c:b8:f8:bf:
fe:38:ba:a5:80:66:ac:d0:48:01:60:4b:94:76:db:01:89:6d:
ee:e6:2b:c7:11:e5:8b:83:be:63:98:57:07:53:82:5f:44:db:
a1:8d:49:b5:96:e3:dd:87:b5:bc:e3:c6:19:db:e6:87:8c:b4:
bf:cf:c2:38:34:3e:aa:02:64:bc:17:45:b1:15:47:f2:1c:f7:
de:19:c0:3d:02:87:21:24:13:37:48:36:50:cf:7a:17:28:44:
0e:a1:16:d7:af:a5:e8:99:c6:be:c5:6e:fb:e6:1f:48:47:14:
df:3e:b4:d0:c2:41:1c:0e:06:83:fd:30:58:55:f8:e8:4c:17:
28:02:ac:e0:ab:5d:69:6b:6f:fa:0c:3b:7c:ef:7f:c5:95:a4:
55:38:53:27:32:ad:98:70:81:ae:35:a9:05:c5:0b:e0:8e:5f:
73:ca:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org