Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34312e302f32342d3234203d3e203630373231.roa
File: 37372e33372e34312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 9Hflk4S6ZF/WE1hGXyKYP4oDeyYCcFOMITphuESKldI=
Subject key identifier: 94:BA:26:57:89:B5:AB:22:56:34:F7:B5:42:55:65:C4:63:44:33:11
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3AB81DA0AED8A5279DFB1D97B9E7C9774B94CE34
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34312e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:07 +0000
ROA not before: Fri 20 Jan 2023 06:21:07 +0000
ROA not after: Fri 19 Jan 2024 06:26:07 +0000
asID: 60721
IP address blocks: 77.37.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b8:1d:a0:ae:d8:a5:27:9d:fb:1d:97:b9:e7:c9:77:4b:94:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:07 2023 GMT
Not After : Jan 19 06:26:07 2024 GMT
Subject: CN=94BA265789B5AB225634F7B5425565C463443311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:08:be:39:43:64:c8:4e:c5:68:eb:7f:40:
e8:1d:bb:65:5f:66:39:89:9b:57:f3:6d:b5:6a:4a:
8f:23:f5:db:ae:70:a9:38:6a:fb:2c:2d:2c:b8:29:
d3:10:15:0e:39:23:6a:bd:2a:bf:11:b3:bc:a3:23:
71:68:0e:b4:0b:15:17:05:ee:c9:01:b4:fa:94:83:
46:89:b2:d6:16:6e:e4:7c:e0:ea:6c:f2:76:94:8e:
97:aa:da:c7:de:be:0f:51:b1:9c:52:f5:9b:b5:e9:
2b:39:e4:8f:7b:78:ed:83:e3:e8:b7:fe:a3:1f:e3:
5d:db:51:13:dc:07:ad:57:20:9a:60:0c:c6:96:0d:
59:0d:71:78:c2:44:be:91:c1:17:f0:d9:c0:da:50:
02:e6:2e:05:82:d5:79:5c:ae:dd:97:f4:4a:4c:4d:
c1:9e:cb:e0:9c:6d:75:b7:a7:c7:e1:75:ce:ef:2d:
8b:75:45:06:89:2f:1b:ab:35:4f:28:3b:26:2f:97:
2c:05:23:bf:d4:ed:5f:44:7c:be:1d:9d:7b:c2:87:
7b:a3:cd:9e:67:70:21:b0:0b:10:bc:57:a0:6a:da:
40:fd:de:cb:5c:b9:01:2a:b5:70:d1:af:c8:cb:12:
7a:22:96:08:b7:ef:8b:30:0f:f4:53:5a:bd:05:45:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:26:57:89:B5:AB:22:56:34:F7:B5:42:55:65:C4:63:44:33:11
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34312e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:83:85:a1:90:9a:22:d2:49:56:b8:2b:0f:83:90:f4:fd:c1:
e5:5d:e4:75:78:5d:c0:2a:75:7f:f0:4a:ec:ce:e1:36:87:7e:
23:23:17:d2:69:14:d9:bc:f0:27:b8:f4:d3:e4:4f:af:96:2c:
0e:d6:d1:6c:24:e1:92:fc:57:9a:27:d0:a9:89:7f:19:3b:ae:
4e:8b:18:23:ca:64:64:7e:97:dd:01:38:e4:a4:fc:92:21:4b:
8c:55:a1:15:10:08:f5:d6:80:17:57:93:69:f2:af:e2:d1:ac:
65:ea:58:e2:45:ab:bc:a7:1d:83:e8:c8:d3:4a:bc:00:83:f2:
24:7c:42:0b:41:f5:a7:50:82:1f:a3:b7:7c:28:4b:4f:e9:9f:
ed:2a:b6:23:bc:12:60:fd:6f:34:14:b9:09:c4:c5:c1:10:d7:
0c:da:5c:94:28:b2:c9:f0:83:99:dc:e8:13:c6:32:57:74:a1:
7c:48:be:f8:b3:25:0f:eb:76:6f:e6:95:16:1d:78:39:46:92:
f7:30:cb:3e:93:0f:a7:76:5f:ff:2b:43:3e:0f:a9:1b:4c:87:
a7:92:7c:18:6b:3f:bc:91:e9:1c:2b:98:db:ea:02:9a:6e:de:
69:2f:01:c7:c7:e2:cf:f7:b7:7d:41:c5:26:d7:00:bd:25:12:
c8:59:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org